Every packet, auditable.

Regulatory coverage

How compliance is enforced

Every transaction passes through the compliance engine before it is allowed to settle. Identity is verified, sanctions and PEP lists are screened against current data, and the relevant jurisdictional rules are evaluated against the token template, the parties and the amount. A failed check stops the transaction at zero state — nothing partially happens.

• Rule code is signed. Each rule set is signed off by a named compliance officer and versioned alongside the runtime.
• Attestations are sealed. Every transaction produces an attestation hash recording which rules ran, which proofs were verified and which result was returned.
• Audit access is continuous. Regulators and internal audit teams can subscribe to a streaming feed of attestations — no quarterly extract required.

Certifications & audits

SOC 2 Type II

Reissued annually. Reports available under NDA to credentialed counterparties.

ISO 27001

Information security management system. Certificate available on request.

ISO 22301

Business continuity management. Certificate available on request.

PCI DSS

Where AETHER processes card-rail interactions, PCI DSS controls apply to the relevant components.

Penetration testing

Independent third-party testing on a continuous schedule. Executive summaries are shared with counterparties under NDA.