Compliance

A clear record of how your prices were set

When an auditor or a client asks what happened, the answer should come from the bridge itself. XiroLink records every change, every connection and who can sign in.

The problem

Disputes and audits start with the price

A client disputes a price, an auditor asks who changed a spread, or a regulator asks how access is controlled. If your bridge cannot answer, you are rebuilding events from memory. XiroLink does not file regulatory reports. It gives your compliance team a reliable record of the pricing setup and everyone who changed it.

Every change

In the audit log

2FA

Can be required for all users

Encrypted

Credentials at rest

Automatic

Backups to S3 storage

How it works

How XiroLink handles it

01

Every change is logged

The audit log records every change to makers, takers, symbols, markups and settings, with history on each record.

02

Every connection has a history

Sessions keeps a record of every connection and rejected attempt, with the reason it ended.

03

Access is controlled

Two-factor sign-in that you can require for every viewer, admin and read-only roles, and IP blocking with automatic blocks after repeated failed logins.

04

Data is protected

Credentials are encrypted at rest, and configuration is backed up automatically to S3 compatible storage on the interval you choose.

Frequently asked questions

Does XiroLink produce regulatory reports?

No. XiroLink does not file or generate regulatory reports. It gives you records to support them: an audit log of changes, session history, LP comparison exports and, with risk accounts, an audited ledger.

Who can change pricing settings?

Admins only. Viewers have read-only access. You can require two-factor sign-in for everyone and block IP addresses.

Can we replay a generated instrument for a dispute?

Yes. Each generated instrument has its own random seed, visible only to admins. Seed and run number replay the exact series. Synthetic instruments are included in Professional and Enterprise.

Where is the bridge hosted?

We host and run it for you on managed servers. Enterprise gets a dedicated server in the region you choose, on your own subdomain.

Answer the next audit question from the bridge

See the audit log, session history and access controls in a demo.