Security

Built like a vault, not an app.

Security is the product. Here is exactly how your account, your data, and the platform are protected — a licensed entity, hardened infrastructure, and controls in your hands.

I — Licensed & accountable

Licensed, and accountable for it

Licensed & regulated

Operated by Perdura Capital Market Inc — licensed by the Cayman Islands Monetary Authority (CIMA) as a Securities Investment Business / Virtual Asset Service Provider (Licence No. 2038223), and incorporated in Cayman (Reg. SN-305482). Verifiable on the CIMA public register and verify.gov.ky.

KYC / AML onboarding

Identity verification and anti-money-laundering screening are required before any account can hold funds.

Over-collateralized lending

Every loan is backed by more than its value, with automatic liquidation buffers to protect the loan book.

II — Platform & infrastructure

Built on hardened foundations

The platform runs on named, independently-certified infrastructure, and access to your data is fenced off at every layer.

Certified data platform

Built on Supabase — a SOC 2 Type 2-compliant platform — for authentication, database, and encrypted storage.

Global edge network

Served over Vercel’s global edge with automatic TLS and DDoS mitigation. All traffic is encrypted in transit (HTTPS).

Row-level data isolation

Every member’s records are fenced off at the database with row-level security — your data is never reachable from another account.

Encrypted KYC storage

Identity documents are kept in private, access-controlled storage, scoped to you and used only for verification.

Least-privilege access

Administrative and service credentials are server-side only and never exposed to the browser. Admin surfaces are role-gated.

System-controlled compliance

KYC approval is locked to authorized staff — members cannot alter their own verification status. Every sensitive action is validated server-side.

III — Your account

Controls in your hands

Strong password policy

Minimum-length passwords enforced at sign-up, with secure, industry-standard authentication.

Two-factor authentication

Optional TOTP two-factor authentication from an authenticator app, enforced at every login for an extra layer beyond your password.

Withdrawal address whitelisting

Withdrawals and sends can only go to addresses you’ve pre-approved — enforced server-side, so funds can’t leave to an unknown destination.

Transaction alerts

Email confirmations on every withdrawal and send request, so you see money-movement on your account as it happens.

Questions about how your account is protected?

Read the Risk Disclosure Statement and our Terms of Use, or open an account to see the platform for yourself.

Open an account