Skip to content

Security

Security and data, broker by broker

How we keep each broker's data separate, where the platform runs, and what access we have ourselves.

Three sample brokers, Your Brand, Velmora Markets, Quillon FX, each on its own domain, deployment and database, with no data path between them. A trader on each signs in with a 6-digit code from an authenticator app. Our stats system reads each database, read-only.

Illustration with sample brands, sample clients and sample sign-in codes. Your Brand stands for your own name and logo.

Book a demo

No data path between brokers

Every broker on its own deployment, database and domain

Each broker signs in its own traders. Our stats system reads each database, read-only, to count platform statistics.

Each broker is kept apart

  • Every broker runs on its own deployment with its own database, on its own domain.
  • Brokers never share a table. No query path runs from one broker's data to another's.
  • One codebase runs every broker, and fixes reach each broker as a tested update.

Where it runs

  • The platform is hosted on Vercel. Each broker's database is a Postgres database on Neon.
  • Neon encrypts stored data with AES-256 and uses TLS 1.2 or 1.3 for data in transit, and keeps a restore history so a database can be rolled back to an earlier point in time. See Neon's security overview.
  • The site only works over HTTPS and cannot be framed inside another site.

Sign-in and staff access

  • Sign-in checks passwords against one-way hashes. The copy your admins can reveal is encrypted, and every reveal is logged.
  • Repeated sign-in attempts are limited, per address and per account.
  • Traders can turn on two-step sign-in with an authenticator app and see their recent sign-ins.
  • Staff roles (admin, manager, sales manager, retention and sales) each see only what their role allows.
  • Staff actions on clients and leads are written to an activity log.

Money

  • Pelris is the software vendor. We never hold or move client money.
  • Withdrawals wait for staff approval by default, and bank wires never credit an account on their own.

Our own access

  • We run the platform for you, so our team can reach your deployment to support it.
  • Our internal system keeps a read-only connection to each broker's database. It is used only to count platform statistics, such as client and trade totals, once a day or when we refresh them. The connection details are stored encrypted.

Bring your compliance questions. Send them before the demo and we will go through each one with you.

Book a demo

See the whole platform. Free for 14 days.

Get demo logins for the CRM and the trading terminal, or book a live walkthrough with our team.