Roles and a permission matrix
Five preset staff roles: admin, finance, dealer, risk and read-only, with allow, view-only or deny for every Cockpit area. Changes apply immediately.
Security & compliance
Controls regulators and auditors expect.
Every broker runs on its own isolated server with its own database, ledger and administrator identities, so client data stays in the broker’s chosen region and never mixes with another broker’s. On top of that, Metafix layers the controls an audit will ask about.
Staff access and governance
Who can do what, and a record of it.
Preset roles, a permission matrix and two-factor login for every staff member, with an audit trail behind every sensitive action.
Two-factor for every login
An authenticator app for every master, broker and staff account, with recovery codes. Codes can never be reused, and an extra check is required before approving a withdrawal or adjusting a balance.
Separation by design
Platform-level controls are kept apart from each broker’s own data, and each brand’s data from every other brand.
An audit trail with context
Every sensitive action records who did it, their IP address and their device, with a journal viewer for compliance staff and a per-trade audit export.
Protecting client accounts
Hard on attackers.<br/>Easy on clients.
Account protection that stops abuse without locking real clients out of their own devices.
Lockouts that only hit attackers
Brute-force lockout blocks an attacker without locking the real client out of their own device, and login responses take the same time whether or not an account exists.
Stolen sessions are ended
A reused login token ends the whole session and is logged. Changing a password or blocking an account signs out every device instantly.
Read-only where it should be
Investor passwords can see but never trade, withdraw or change credentials, and must differ from the main password.
Secure on the device
Tokens are kept in the iPhone Keychain and Android’s encrypted storage, and outdated or insecure app versions can be retired by the broker.
KYC, AML and privacy
Verification you run in-house.
Identity, address and selfie checks with no third-party vendor to pay, screening before approval, and document handling built for retention rules and app-store requirements.
In-house verification
Proof of identity, proof of address and a selfie, reviewed in a queue to approve, reject or request more. The broker sets which documents are required, and every sign-up form updates automatically.
Documents kept safely, then let go
Encrypted document storage viewable only through a logged, authenticated viewer, re-KYC and expiry so approvals do not last forever, and a retention policy that purges documents after the broker’s chosen period.
Screening before approval
A sanctions and PEP screening checklist on each case, cleared by staff before approval, with an optional KYC requirement before withdrawals.
Privacy and app-store rules
Account deletion from the app or a public web form with a 30-day cooling-off period, anonymisation while financial records are kept, and data residency on each broker’s own server in its chosen region.
Platform protection
Hardened from installation onward.
Encryption, isolation and verification at every layer of the private installation.
Encrypted everywhere
Encrypted connections on the one port every mobile and corporate network allows, with every secret encrypted at rest under its own key: two-factor seeds, API secrets, email and payment credentials and KYC files.
Hardened at installation
Unique random secrets generated for every broker, services that refuse to start with weak or placeholder secrets, databases firewalled from the internet, and each trading service running as its own restricted user.
A sealed execution path
A mutually authenticated execution path, so no other process can inject or intercept trade instructions, and signed licences checked on every order.
Reviewed, and reviewed again
Zero known vulnerabilities in the trading services after the latest security pass, regular security audits with every finding tracked to a verified fix, and secure, expiring download links for every statement and report.
Licensing transparency
A licence you can see, on your own server.
Signed licences, totals-only metering, and client protection even if a licence ever lapses.
Signed licences, verified on your server
Licences are digitally signed and checked on each broker’s own server, with a licence card in Cockpit showing status, days remaining and early renewal warnings.
Privacy-minimised metering
Usage metering reports only totals, never individual trades or client data. Your servers receive only finished software, never source code.
Clients are never trapped
Even if a licence lapses, Stop Loss, Take Profit, stop-out and closing positions keep working.
A note on compliance
Controls that support your programme.
These controls support the broker’s own compliance programme. Metafix is a technology provider; it does not hold client funds, provide investment services or confer any regulatory approval. Licensing, KYC policy and reporting obligations remain the broker’s responsibility, and the platform gives the broker the tools to meet them.
Explore Cockpit ↗Talk to Metafix
Walk through the controls with us
Ask for a guided demonstration of staff roles, two-factor flows, KYC review, the audit journal and the services panel on a demo installation.