The question that ends exchanges is rarely technical. It is a supervisor asking who moved what, when, and who approved it — and the platform either has the answer on screen or it does not.
In a regulated market the platform is not only a trading venue; it is the record. Every deposit, every approval, every account change is something you may have to produce, and produce quickly.
None of that is glamorous, and none of it demos well. It is also the difference between an exchange that survives its first examination and one that does not.
A record of every movement
The base requirement, and the one most quickly built badly.
- Every deposit, withdrawal, trade and internal transfer in one auditable view
- Per-network balance snapshots across system and user wallets
- Price feeds tracked per market, with reconciliation tools
- Reports across wallets, money flow, trading and earnings — exportable
Identity, in tiers
Verification is not one gate; it is a ladder with different limits on each rung.
- Tiered verification with document review
- Limits set per tier
- A review queue with an audit trail of who approved what
- Account suspension and restriction when something is flagged
Who is allowed to do what
The control an examiner asks about first, and the one a small team most often skips.
- Role-based administrative access
- Reviewers separate from administrators
- Withdrawal approval as its own step, not a side effect of another one
- Actions attributable to an account rather than to "the admin"
What we do not provide
Named plainly, because on this page it matters more than anywhere else.
- No licence, registration or regulatory approval — those are yours to obtain
- No AML programme and no compliance officer
- No sanctions screening data; the platform integrates with providers who have it
- No independent third-party security audit of the codebase, and we will not imply one
Own it outright
A clone in the marketplace sense is a copy you rent or cannot read. This is the opposite arrangement.
- Complete source code, with no encryption and no obfuscation
- Deployed on infrastructure you control
- No recurring licence, and no vendor approval needed to change how it works
- $24,900 one-time for the Full Suite, with deployment and six months of support
What a supervised market asks for
| The capability you are after | How it works here |
|---|---|
| A complete transaction record | Every movement in one auditable view, exportable |
| Tiered identity verification | Document review with per-tier limits and a queue with an audit trail |
| Separation of duties | Role-based access; reviewers are not administrators |
| Controlled withdrawals | Approval as an explicit step, with per-asset and per-network settings |
| Sanctions screening | Integration with a provider — the platform is not the screening service |
| Reserve visibility | Per-network balance snapshots across system and user wallets |
| Code you can have reviewed | Full source, unencrypted, which is what makes an external review possible at all |
Questions you might have
Is the platform certified or audited?
No. There has been no independent third-party security audit, and we say so rather than implying otherwise. Holding the source is what lets you commission one.
Does it handle the travel rule?
Through integration with a provider. The platform carries the data and the controls; it is not the compliance vendor.
Can we prove reserves?
The admin panel gives per-network balance snapshots across system and user wallets. Publishing an attestation is a separate exercise with an auditor.
Who can approve a withdrawal?
Whoever you give that role to. It is a distinct permission rather than something every administrator has.
Do you help with the licence application?
No. That is a legal engagement in your jurisdiction.
See the platform behind the comparison
A private demo walks the platform with the people who deploy it. Bring the feature list you started with and check it against what is on screen.