NEPSE2,657.50▼ -1.21%
GHL335.00+0.81%GBIME267.10+0.83%KBL232.20-2.85%LBBL541.00-1.64%MAKAR460.00+8.77%GVL570.00-2.10%NICA341.00+3.02%PCBL273.80-3.25%SOHL648.00-2.11%NIMB210.90-0.28%CFCL608.00+0.35%SAHAS728.00+1.25%LSL275.50-1.96%BPCL730.00+2.48%PHCL356.50-2.06%SHIVM691.80-1.87%SANIMA407.00-1.33%API338.30-1.77%JBBL361.40-1.74%TAMOR595.00-1.49%RSML2,647.00-1.23%MBL273.80-2.28%SONA459.90-3.38%NMB278.70-0.99%

Security and reliability

Built to the standard of the money it moves.

A broker's platform holds identities, balances and collateral. These are the protections every brokerage on LSNEP gets from the first day of its pilot. We describe what we do, not certificates we do not hold.

Protection, liveIllustration

Sign-in code

482 913

  • 09:58:12Staff sign-in, 2FA passed
  • 10:04:37Client limit changed
  • 10:05:02Payout approved, second check
  • 10:11:48Sign-in blocked, wrong code

Defence in layers

Four layers, each with its own controls

Layer 1

Clients and staff

  • Two-factor sign-in
  • Roles per branch and desk
  • Session limits
Layer 2

Application

  • Audit log on every change
  • Input validation
  • Rate limits on sign-in
Layer 3

Data

  • One data store per brokerage
  • Encrypted in transit
  • Daily backups
Layer 4

Operations

  • Uptime monitoring
  • Security test before go-live
  • Incident process

Separation

Your clients' data never sits beside another broker's.

Each brokerage on LSNEP gets its own data store. A request from one firm's app can never read another firm's records, because the records are not in the same place.
  • Separate data store per brokerage
  • Traffic encrypted in transit with modern TLS
  • Backups taken daily and tested by restoring them
  • Client data stays under your control when you leave: full export, then deletion on request

Access

Everyone sees exactly what their job needs

Roles are set per brokerage and can be adjusted to how your firm works. These are the defaults.

RoleCanCannot
Branch staffOpen accounts and answer clients of their own branchSee other branches or change fees
Risk deskSet margin limits, haircuts and send margin callsEdit client KYC records
ComplianceRead every record and the full audit log, export reportsChange balances or limits
ClientSee their own portfolio, ledger and statementsSee anything belonging to another client

Every sign-in for staff uses two factors. Clients can turn on two-factor sign-in in the app, and brokers can require it.

Audit trail

Who did what, and when, for every record

Every change to a client record, a balance, a limit or a fee is written to an audit log that staff cannot edit. Compliance can filter it by client, user or date and export it for SEBON, NEPSE or your auditor.

Audit log

Sample data
  • 10:42:08risk.deskMargin limit, client 041255% → 50%
  • 10:31:55branch.pokharaKYC approved, client 1187NID verified
  • 09:58:12complianceExported ledger reportOctober

Reliability

Watched around the clock, tested before launch

Monitoring

Every service is checked continuously. If something stops responding, our team is alerted at once, not when a client calls.

Security test before go-live

Before any brokerage goes live, the platform is tested by an independent security reviewer and findings are fixed first.

Incident process

If something goes wrong we tell you quickly, keep you updated until it is resolved, and send a written account of what happened and what changes.

Independent of your trading system

LSNEP runs beside your TMS. If our platform has a problem, your clients can still trade through your existing trading system.

Ask us the hard security questions.

Bring your IT head to the demo. We walk through data separation, access roles, backups and incident handling in detail.