Account protection
Multi-factor authentication and identity verification at login, intended to make account hijacking materially harder than a stolen password.
Based in the U.S. Serving the global digital asset market
Security, compliance and transparency are operating commitments before they are marketing words. This is what NPX says it has built, what it is still building, and what it will not claim.
The trust center
For digital asset platforms, the security of accounts, assets, data and systems is the first concern for users. NPX describes security as the cornerstone of its platform infrastructure, supported by a multi-layered framework spanning login, identity verification, wallet management, transaction monitoring, withdrawal review, access control and anomalous-behavior detection.
The company cites multi-factor authentication, secondary confirmation for sensitive actions, tiered access, multi-party approval, data encryption and real-time risk monitoring, designed to reduce account hijacking, unauthorized operations, system attacks and irregular fund movements.
No control eliminates risk. The honest test is whether the controls are defined, operated and reviewed — and whether the company is clear about what they do not cover.
Six control families that NPX says form part of its platform security and internal governance.
Multi-factor authentication and identity verification at login, intended to make account hijacking materially harder than a stolen password.
An additional approval step for sensitive actions such as withdrawals or security-setting changes, so a single session cannot complete them alone.
Internal permissions assigned by role and limited to what each function needs, reducing exposure from excessive administrative access.
High-risk internal actions require more than one authorized person, creating a check against error and single-person override.
Encryption of data in transit and at rest as part of the platform’s stated security architecture, supporting confidentiality and integrity.
Continuous risk monitoring for anomalous behavior, irregular fund movements and system events, with escalation routes for investigation.
NPX states that registering a business entity in the United States establishes legal existence and corporate status, but does not automatically grant authorization for regulated financial activities such as digital asset trading, payments, securities, derivatives, custody or money transmission.
For activities subject to specific oversight, the company says it does not claim the necessary licenses based on its corporate registration. It describes legal assessments and compliance reviews tailored to the regions served, the products offered and local requirements — and for specially regulated offerings, it says applicable licenses must be secured before launch.
The corporate record behind this distinction is documented in the NPX corporate authenticity and compliance wiki.
Compliance posture
NPX says a mature platform’s compliance capability cannot be measured by a single license. Its framework includes customer identification and verification; AML/CTF and sanctions screening; monitoring of anomalous activity; listing risk assessment; internal access and approvals; user risk disclosures; and cross-jurisdiction product-access reviews.
These are described as systems being built and refined, not as a claim that every control is complete or independently certified. The company also says it will not present capabilities that are still under development, unverified or lacking supporting documentation as established facts.
For specially regulated products — leveraged trading, digital asset contracts, derivatives, custody, fiat payments, security tokens — NPX states that legal assessments and compliance reviews must be completed, and applicable licenses secured, before services are made available.
Identity verification, risk profiling and ongoing review form the base for monitoring and reporting.
Sanctions screening and transaction monitoring look for prohibited parties and anomalous patterns.
Digital assets are assessed for legal, issuer, liquidity and technology risk before listing.
Product access is assessed against local law and adjusted as regulatory requirements evolve.
Transparency commitments
NPX says it is committed to accurate disclosures about corporate information, technical capabilities and operational measures that are already in place, fully deployed and subject to verification. It also says it will not misrepresent licenses or capabilities that have not been obtained, applied for or approved, and will not describe qualifications under application or in planning as already licensed.
The company states that it will continue to refine trading rules, fee structures, asset management protocols, risk disclosures, procedures for exceptional events and mechanisms for protecting user rights. Those are the documents that let a user understand how the platform operates, what its services cover and which risks attach to each product.
Digital assets are not suitable for every investor. Before using any platform, understand the following risks:
The company file sets out the legal entity, governance structure, values and contact route.
Read the company file