Security & Compliance

Investor protection is built into the infrastructure

Risk disclosure, suitability checks, education, portfolio monitoring, derivatives gates and a full compliance trail are built into the platform rather than added later.

Framework

Six protection pillars

  • Identity verification

    Onboarding captures and verifies identity before an account can trade, with status visible to the operator's compliance team.

  • Suitability controls

    Investor profiles are produced from a broker-configured assessment and determine which products are reachable.

  • Knowledge requirements

    Derivatives access requires completing education and passing an assessment. There is no way to skip it.

  • Risk thresholds

    Exposure, concentration and position limits are evaluated before an order is accepted and escalate through Warning, Restricted and Blocked.

  • Risk disclosure

    Contextual disclosures appear where a decision is being made, and acknowledgements are recorded.

  • Full audit trail

    Every sensitive action writes an append-only event with actor, role, resource and before/after state.

Regulatory posture

Working with the rules

GIGX provides technology to firms licensed by the Securities and Exchange Commission of Nigeria. The licensed operator holds the client relationship, the client funds and the regulatory permissions.

The platform is designed around that division: it produces the records, controls and reports an operator needs, and it never places GIGX in the position of a broker.

GIGX is a technology company, not a broker. It works through licensed operators and builds the platform to support their compliance responsibilities.

Platform security

How access is controlled

  • Role-based permissions for investor, broker, compliance, risk and admin roles
  • Authorisation enforced in server code and database policies, not in the interface
  • Session management with visible device and session history
  • Input validation applied on both the client and the server
  • Secrets held only in server environment configuration
  • Append-only audit records for sensitive actions

Regulation and compliance

Built to work with the rules

GIGX is a technology company, not a broker. Its infrastructure is designed to help licensed partners operate efficiently and support their own compliance responsibilities.

Nigeria market context

Designed for Nigeria's evolving digital capital-markets environment.

Licensed partners

Investors are served through licensed brokers and capital-market operators.

Data protection

Designed with applicable Nigerian data-protection requirements in mind.

Audit trails

Important actions and disclosures can be logged and made available for review.

International approaches

Platform design aims to reflect leading investor-protection and market-infrastructure practices.

These statements describe platform design intent, not a licence, regulatory approval or legal guarantee.