Security

Quandex (QUANDEX CO TECHNOLOGY LIMITED) builds platforms intended to operate as economic infrastructure. Security is treated as an engineering requirement of that role, not an add-on.

This page describes our working approach. It does not assert any certification, audit outcome or regulatory approval. Any certifications Quandex obtains will be listed here once achieved [to be confirmed].

Access to production systems is limited to the people who need it, and is granted on an individual basis.

Data in transit is protected using current transport encryption standards.

Specific control frameworks, encryption-at-rest arrangements and retention practices will be documented here as each platform's architecture is finalised [to be confirmed].

Changes are reviewed before release, dependencies are kept current, and issues identified in review are addressed before deployment.

Quandex maintains an internal process for identifying, containing and communicating security incidents. Notification timelines and contact routes will be published here once the corporate contact system is configured [to be confirmed].

If you believe you have found a security issue affecting a Quandex platform, please contact us through the partnership enquiry form and mark your message as a security report. A dedicated security address will be published here once configured [to be confirmed].

Please give us a reasonable period to investigate and respond before disclosing an issue publicly.

Where Quandex relies on infrastructure or service providers, we assess their security posture as part of selecting them. The list of material providers will be published here [to be confirmed].