Platform Security

Enterprise-grade protection — built in.

• All data encrypted in transit (TLS 1.2+) and at rest (AES-256) — designed to prevent unauthorised access
• Zero-trust architecture: no user or system is inherently trusted; and access is always verified, limited, and logged
• SSO via OIDC and MFA via HOTP/TOTP — granular access controls are applied across all platform components
• 24/7 monitoring with automated threat detection and incident response protocols, with defined SLAs for escalation and resolution
• Audit logs maintained for all access and activity across the platform

AKJ Orbital: Secure by design.

Built on GCHQ's Secure by Design principles, and independently tested as deployment matures.

• Complete logical data segregation: your fund's data is isolated from all other platform clients
• Role-based access controls ensure only authorised personnel access specific data and systems
• Secure API connectivity: all integrations (FIX, FIX API, exchange connections) are authenticated and encrypted

Infrastructure

Resilient infrastructure — built to stay up.

• Hosted on enterprise-grade cloud infrastructure with regional data residency options (EU, UK)
• Business continuity and disaster recovery frameworks tested and maintained per DORA requirements
• High-availability architecture with defined RTO and RPO, with service continuity contractually committed
• Incident response SLAs with defined escalation, notification, and resolution timelines

Data Governance

Your data. Your control.

• Client data is never used to train or fine-tune any AI model
• Your data is used solely to deliver the services you have contracted for, and nothing else
• Data retention policies are configurable to meet your internal requirements and regulatory obligations
• On termination, all client data is permanently deleted, with the option to export before deletion
• Full transparency into how and where your data is processed, via the AKJ Trust Portal (in development)

Regulatory Framework

Authorised to manage, operate, and distribute, across the UK and the EEA.

• Portfolio management — full-scope AIFM permissions to manage alternative investment funds and their risk
• Investment services — MiFID II licence covering execution, dealing, and discretionary portfolio management
• Investor reach — funds marketed to professional investors across the UK and the EEA under AIFMD
• Digital assets — MiCA authorisation brings crypto-asset services inside the regulatory perimeter
• Ongoing supervision — prudential capital, and conduct-of-business requirements in operating jurisdictions

Operational Resilience

Digital operational resilience — supervised, tested, and evidenced.

• Falls under the Digital Operational Resilience Act (DORA) as an EU-regulated financial group
• ICT risk management framework covers identification, protection, detection, response, and recovery
• Critical third-party technology providers are always under ongoing oversight, with contractual and exit safeguards
• Incidents are classified, escalated, remediated, and reported to clients and regulators within defined timelines