Security

Security and regulatory framework

How accounts are protected, how access is controlled, and the regulatory basis on which the platform operates.

Authenticated sessions

Sign in with a password or a one-time code sent to your email. Sessions are server-validated on every request to an account area, not trusted from the browser.

Protected routes

Every account and trading screen is guarded. The public marketing site and the authenticated application are separate surfaces with separate rules.

Business errors are not authentication errors

A rejected order — market closed, insufficient balance, invalid quantity — is returned as an order error with its own code. It never signs you out. Only a definitive authentication failure ends a session.

Failures do not silently sign you out

A dropped connection or a backend restart produces an inconclusive result, not a logout. The session check distinguishes "you are signed out" from "I could not tell", and only acts on the first.

Account verification

Identity documents are reviewed before an account is fully unlocked, mirroring a real onboarding process.

Rate limiting

Sensitive endpoints are rate limited to make automated abuse impractical, without interfering with normal use.

Regulatory

Where we stand

Stated plainly, because a vague answer on this question is worse than an uncomfortable one.

Authorisation not yet held. VNK Avenue does not currently hold a financial services licence in any jurisdiction, and does not describe itself as regulated.

We will publish the jurisdiction, the regulator and the licence number on this page as soon as authorisation is granted, and not before. Until then, nothing on this site describes VNK Avenue as regulated, authorised or supervised.

Further disclosures are published on the disclaimer and risk disclosure pages.

Safeguards

What protects your account today

Every item here is a technical fact about how the platform runs, or a commitment we control directly. None of it depends on a regulator.

Client funds held separately

Customer balances are tracked in their own ledger, distinct from company funds, and every movement is reconciled and auditable.

Encrypted in transit

All traffic between your device and the platform runs over TLS. Credentials are never transmitted or stored in plain text.

Verified withdrawals only

Funds can only be withdrawn to a bank account that has been verified against your own completed KYC record.

Costs disclosed before execution

Every charge on an order is itemised on the ticket before you place it, and again on the contract note afterwards.

Full audit trail

Every administrative action taken on an account is recorded against the person who performed it, including support access.

ISO certified

Independently certified against the ISO standard, under certificate E2023094323.

Reporting a security issue

If you believe you have found a vulnerability, please report it before disclosing it publicly. Include the steps to reproduce and what you were able to access — we will confirm receipt and keep you updated.

Report an issue

Open an account.

Trade across four market segments with professional market access.

Investments in securities markets are subject to market risks. Read all the related documents carefully before investing.