Skip to main content

Regent · Security and audit

Built for moneythat isn't yours.

An intermediary holds other people's sale proceeds and tax IDs. Regent is designed around that: nobody has a password to steal, each firm's data is walled off from every other, sensitive numbers are encrypted, and the record of who did what can't be edited.

Signing in

No passwords, anywhere.

Staff sign in with a code texted to the mobile number on their account, or with a passkey. Exchangers sign in with an emailed code, and your firm can require a texted code as well. Sign-in is rate-limited. A change to a staff member’s sign-in email waits for a second admin, and a phone change takes effect only when staff confirm it.

Access

Each person sees what their role allows.

Roles

Admins and processors in each firm, with record-level permission checks on every action.

Firm separation

Every firm's records carry its id, and a guard in the data layer refuses any query that isn't tied to one firm.

Encryption

Taxpayer IDs and bank account numbers are encrypted at rest and shown masked.

The record

An audit log nobody can rewrite.

Every change on a file is recorded with who made it, when, and the values before and after. The log is append-only: the database itself refuses to update or delete an entry. Forced steps carry their reason, hard-stop overrides carry their note, and messages carry their delivery status.

  • A History tab on every file, filterable by documents, people, properties, funds and system
  • Approvals, callbacks and payouts recorded with the person and the time
  • Changes to the firm’s money controls recorded, and loosening them needs a second person
History tab of a Regent exchange listing timed events: phase changes, receipts, document generation and deadline changes, each with the person who made them
A file's history: every event, with who and when.

Screens from Regent today, with a sample firm and sample exchanges. Your workspace and portal carry your firm’s name and logo.

Screening

Sanctions screening on every exchanger and signer.

Exchangers and their signers are screened against sanctions lists, and a daily sweep catches files opened before screening began. A possible match goes to an admin to clear or decline, and while it’s open, no payout can go on that file.

Straight answers

Questions processors ask

Does Regent hold a SOC 2 report?
Ask us on the call about Regent's current security documentation, and we'll walk you through the controls on this page in the product.
Can our staff see another firm's data?
No. Each firm's data is separated in the data layer, and a query without a firm is refused.
What if a staff member leaves?
An admin deactivates them. Their history stays on every file they touched.
Does Regent need our bank credentials?
No. Regent never connects to your bank. Your staff send wires through your bank as they do today.

Bring your compliance questions.

We'll answer them in the product, not in a slide.

Your team has a direct line to ours.