Skip to content
NewThe live risk and unusual-trading desk for MT5 brokers
GarnetSync

Compliance & KYC

No shortcut to approved.

KYC can't be approved without an accepted, virus-clean proof of identity and proof of address, by any role. Documents are scanned on our own servers, encrypted one by one, and every opening is logged.

Book a demo How it works
app.garnetsync.com
KYC in review: the client's answers and two documents to accept or refuse
KYC review: proof of identity and of address, each accepted or refused. Corvane Markets is a demo brokerage: invented people, prices and money.

Compliance & KYC: the rules

Rules that hold for every role.

  1. 01

    Both documents, both clean

    Proof of identity and proof of address, each accepted by a person and each scanned clean. No role can approve KYC without both.

  2. 02

    Checked by their bytes

    JPEG, PNG or PDF up to 10 MB, recognised by the file's contents, not its name. Each is encrypted with its own key (AES-256-GCM).

  3. 03

    Scanned on our servers

    ClamAV runs beside the API, so documents never leave our servers to be scanned. A missing answer is never "clean", and a flagged file is never opened.

  4. 04

    An audit log in the same transaction

    Who, what, before and after, IP address and browser, written in the same transaction as the change itself.

  5. 05

    Append-only

    UPDATE and DELETE are revoked on the audit log, and every opening of a document is logged.

  6. 06

    Nothing deleted

    No account, deal or client is deleted. MT5 accounts are archived instead.

The KYC gate

Approve stays locked until both are clean.

Follow one client's two documents through the scan and the review. The approve button follows the database's rule, not a screen's opinion.

KYC review: Ana Sousa

Example

  • Proof of identity

    passport.pdf, PDF, 1.8 MB

    Scan: cleanAccepted

  • Proof of address

    bank-statement.jpg, JPEG, 2.4 MB

    Scan: cleanAccepted
KYC approved

Approved by Sofia Marchetti, written to the audit log with before and after.

A file the scanner flags is never opened, so it can never be accepted. Every opening of a document is logged.

Evidence

A client's money, line by line, with who approved it.

Every deposit and withdrawal with its deal ticket and approver, on the client's own page beside their KYC and activity. Nothing on it can be deleted or rewritten.

  • The deal ticket on every line
  • The approver, by name
  • Corrections as new lines, never edits
app.garnetsync.com
A client's ledger: deposits and withdrawals with deal tickets and who approved each
A client's ledger: every deposit and withdrawal with its deal ticket and approver. Corvane Markets is a demo brokerage: invented people, prices and money.

Compliance & KYC: questions

Straight answers.

Do documents go to a third-party scanner?

No. ClamAV runs beside our API, so documents are scanned without leaving our servers.

Can an owner approve KYC without the documents?

No. The rule is in the database: without an accepted, virus-clean proof of identity and proof of address, KYC can't be approved by any role.

What can clients upload?

JPEG, PNG or PDF, up to 10 MB each, checked by their contents rather than their names.

Where to next

Where the documents come from.

Clients upload their documents in the portal, on your own address, after signing up with a bot check and a confirmed email.