Security and Compliance

We operate under strict regulatory frameworks and robust internal controls designed to safeguard client funds and minimize operational and financial risks. All transactions are executed via secure payment systems with multi-user approval workflows and processed only through vetted counterparty banking partners.
‍
We do not speculate in currency markets or invest client funds. For every client transaction, we place a matching, binding trade with a regulated counterparty.

[Company Name] is authorised [insert: by the relevant regulator, e.g., the UK Financial Conduct Authority] under [insert: applicable regulations, e.g., the Electronic Money Regulations and the Payment Services Regulations] to [insert: issue electronic money and/or provide payment services].Firm Reference Number: [FRN ######].
‍
As an Authorised Electronic Money Institution (or equivalent), any client funds received prior to the value date of an FX transaction—or held post-trade but not yet remitted—are redeemed for electronic money, issued to the client, and segregated in accordance with the applicable regulations. Balances are recorded on our back-office systems and are repayable on demand.
‍

We maintain designated safeguarding accounts with selected global banking partners in accordance with [insert: EMR/PSR or local equivalent]. The Financial Services Compensation Scheme (FSCS) (or local deposit guarantee scheme) does not apply to safeguarded e-money funds. Instead, client money is protected through statutory safeguarding. Client funds are segregated from all company assets.

Client funds are not invested, lent, or otherwise exposed to credit or market risk.Safeguarding reconciliations are performed in line with regulatory requirements.
‍
For more information about safeguarding under the applicable regulations, see the regulator’s guidance ([insert official guidance link]).

Our controls, processes, and safeguarding arrangements are reviewed regularly and are subject to periodic independent audits by third-party specialists to confirm alignment with regulatory standards. Key counterparty relationships are reviewed at least annually.

We maintain a comprehensive AML/CTF framework, including:
- Risk-based customer due diligence (CDD/KYC) and, where relevant, enhanced due diligence.
- Ongoing transaction monitoring and screening (sanctions/PEP/adverse media).
- Escalation, investigation, and suspicious activity reporting in accordance with law and guidance.
- Regular staff training, independent effectiveness reviews, and board-level oversight.

[Company Name] is registered with [insert data protection authority, e.g., the UK Information Commissioner’s Office] as a data controller (Registration [Ref: Z######]). We process personal data in accordance with [insert governing law, e.g., UK GDPR/PIPL/PIPEDA], subject to appropriate technical and organisational measures, including encryption, access controls, and secure retention/destruction practices. For more information, see our Privacy Policy.

We may update this Security & Compliance information to reflect regulatory changes or improvements to our controls. The most recent version will always be published here.