Security and trust

Risk-based verification

Participation begins with due diligence on the organisation and the people who own, control, and represent it.

• Legal identity

  Registration, current standing, address, business activity, and the expected purpose of participation.

• Ownership and control

  Direct and indirect ownership, beneficial owners, controlling persons, and supporting evidence.

• Representatives

  Identity, role, authority to bind the organisation, and transaction permissions.

• Risk review

  Sanctions and other required screening, source information where relevant, and ongoing review proportionate to risk.

• FATF Recommendations↗

  International risk-based customer-due-diligence framework.

Access follows responsibility

Users should see and perform only the work assigned to their organisation and role.

Personal authentication, company membership, named Buyer or Seller Trader grants, Deal Room participation and action-level permissions are separate controls. Staff use MFA, and Administrator actions require step-up authentication.

Document and record integrity

Every material submission and decision should be attributable and resistant to silent alteration.

• Attribution

  Organisation, user, source, and authority are attached to the action.

• Versioning

  A correction creates a new version without erasing the superseded submission.

• Integrity evidence

  Cryptographic hashes and controlled storage help detect later alteration.

• Audit history

  Material actions, reviews, timestamps, statuses, and reasons are appended to the record.

Funds remain outside BSX

BSX is not a bank and does not hold, safeguard, or manage client money.

Buyer-to-Seller settlement takes place outside BSX. The platform records transaction evidence and status, while authorised Finance personnel independently verify relevant bank receipts. BSX does not provide custody, a client-money account or a payment guarantee.

Operational safeguards

The platform uses implemented controls without claiming that any Internet service is absolutely secure.

• Protected files

  Private storage, short-lived authorisations, file validation, malware scanning and preserved document versions.

• Assigned review

  Company evidence is available only to the applicant and authorised assigned Admissions personnel within the released review path.

• Participant isolation

  Market, Auction and Deal Room information is limited by company, participant and role permissions.

• Attributable history

  Material actions, confirmations, authority changes and financial states remain linked to the responsible actor and time.