Compliance

A clear record of how your prices were set

When an auditor or a client asks what happened, the answer should come from the bridge itself. XiroLink records every change, every connection and who can sign in.

Disputes and audits start with the price

A client disputes a price, an auditor asks who changed a spread, or a regulator asks how access is controlled. If your bridge cannot answer, you are rebuilding events from memory. XiroLink does not file regulatory reports. It gives your compliance team a reliable record of the pricing setup and everyone who changed it.

How it works

1

Every change is logged

The audit log records every change to makers, takers, symbols, markups and settings, with history on each record.

2

Every connection has a history

Sessions keeps a record of every connection and rejected attempt, with the reason it ended.

3

Access is controlled

Two-factor sign-in that you can require for every viewer, admin and read-only roles, and IP blocking with automatic blocks after repeated failed logins.

4

Data is protected

Credentials are encrypted at rest, and configuration is backed up automatically to S3 compatible storage on the interval you choose.

Audit log

Every change in the bridge is recorded, and each record keeps its own history.

Session history

Each connection and rejected attempt is kept, with the reason it ended.

Two-factor sign-in

Works with any authenticator app, and you can require it for every viewer.

Admin and viewer roles

Give compliance and management read-only access, with no way to change pricing.

LP comparison export

Best price share, spread and availability per LP, live or over 30 days, exported as CSV for reviews.

Replayable generated prices

For generated instruments, seed and run number replay the exact series for testing or disputes.

Every change
In the audit log
2FA
Can be required for all users
Encrypted
Credentials at rest
Automatic
Backups to S3 storage

Frequently asked questions

Does XiroLink produce regulatory reports?

No. XiroLink does not file or generate regulatory reports. It gives you records to support them: an audit log of changes, session history, LP comparison exports and, with risk accounts, an audited ledger.

Who can change pricing settings?

Admins only. Viewers have read-only access. You can require two-factor sign-in for everyone and block IP addresses.

Can we replay a generated instrument for a dispute?

Yes. Each generated instrument has its own random seed, visible only to admins. Seed and run number replay the exact series. Synthetic instruments are included in Professional and Enterprise.

Where is the bridge hosted?

We host and run it for you on managed servers. Enterprise gets a dedicated server in the region you choose, on your own subdomain.

Answer the next audit question from the bridge

See the audit log, session history and access controls in a demo.