Every packet, auditable.

Regulatory coverage

How compliance is enforced

Every transaction passes through the compliance engine before it can settle. The engine verifies identity, screens sanctions and PEP lists against current data, then evaluates the jurisdictional rules against the token template, the parties and the amount. A failed check stops the transaction at zero state, so no part of it happens.

• Rule code is signed. A named compliance officer signs off each rule set, and we version it alongside the runtime.
• Attestations are sealed. Every transaction produces an attestation hash recording which rules ran, which proofs were verified and which result was returned.
• Audit access is continuous. Regulators and internal audit teams can subscribe to a streaming feed of attestations, with no quarterly extract.

Certifications & audits

SOC 2 Type II

Reissued each year. Reports available under NDA to credentialed counterparties.

ISO 27001

Information security management system. Certificate available on request.

ISO 22301

Business continuity management. Certificate available on request.

PCI DSS

Where AETHER processes card-rail interactions, PCI DSS controls apply to the relevant components.

Penetration testing

Independent third-party testing on a continuous schedule. We share executive summaries with counterparties under NDA.