Security & Compliance

Every decision is attributable. Every analysis is frozen. Nothing is deleted.

  • AuditWho · when · why on every decision
  • SnapshotsImmutable · SHA-256
  • AccessRole-based · Entra ID · Google
  • SharingTokenized · password · expiry · revocable
Security & compliance

Nothing is deleted. Everything is attributable.

TradingSmart is designed so that any decision can be reconstructed months later — by your team, your auditor or your bank.

01

Audit trail

Every risk decision stores who made it, when and why.

02

Immutable snapshots

Case versions are frozen with SHA-256 hashes of files and report.

03

Nothing is deleted

Dismissed findings remain visible, struck through.

04

Role-based access

Menus and data are filtered by user profile.

05

Microsoft & Google sign-in

Users authenticate with Entra ID or Google accounts.

06

Encrypted storage

Documents and reports are stored encrypted.

Audit trail

Who, when and why — on every decision.

TradingSmart records dismissals of false positives, screening verdicts, field corrections and intermediary mandate confirmations. Each entry carries the user, the timestamp and a reason.

Audit · DD-2026-0142
  1. J. Moreau dismissed “Address mismatch”
    reason: Same street, abbreviated.
  2. A. Chen screening verdict → Attention
    reason: Namesake in court record, different city.
  3. J. Moreau corrected field: legal representative
  4. system case frozen v3 · sha256 9f2c…e41a
Share with your bank

Evidence that cannot change after you send it.

Each analysis is saved as an immutable case version — files and report hashed with SHA-256, with case codes, aliases to other systems and links to companies and deals.

cyanwaybusiness.com/share/k7Qx…2Rm
Tokenized URL
Read-only, no login
Optional password
Set per recipient
Expiry
Access ends on a date
Revocable
Cut access anytime
Gated files
Streamed behind the gate
Frozen
SHA-256 snapshot
Our principle

“AI reads. Deterministic code decides. Humans stay accountable.

AI reads

Language models (Anthropic, OpenAI) only transcribe fields verbatim. Any value that does not literally appear in the source text is discarded.

Code decides

All risk verdicts come from deterministic code. “Not verifiable” is an honest answer — the system never invents an OK.

Humans stay accountable

Analysts review, override or dismiss findings. Every action records who, when and why.

Request a demo

See your next counterparty through TradingSmart.

We walk you through the trading platform and a sample Due Diligence report.

  • Deals, pipeline, sourcing and shipments
  • Document classification and deterministic validators
  • Executive scorecard and bank-grade report
  • Secure read-only share link