Controls a bank would expect, enforced by the platform itself
Trade finance depends on trust. GIX Credit makes each control part of the system, so it cannot be skipped from the screen.
Two-factor sign-in
Authenticator codes are compulsory for financiers and platform staff, and available to everyone.
Four-eye approval
The person who lists an LC can never approve it. Only checkers or admins accept bids.
Private by default
Documents sit in private storage, and only the right people can open them, through links that expire in a minute.
Tamper-evident log
Every sign-in, listing, bid and acceptance is chained with SHA-256 and can be verified any time.
SOC 2 Type II infrastructure
The platform runs on cloud infrastructure independently audited to SOC 2 Type II, with encryption in transit and at rest.
Security alerts
Users are emailed when a password, sign-in email or two-factor method changes.
How access works
Every person belongs to one organisation and has one role: admin, maker, checker or viewer. The database checks the role and the organisation on every request. Screens only show what the database allows.
- Exporters see their own listings and all bids on them.
- Financiers see published listings and only their own bids, and only after two-factor sign-in.
- Platform staff see what their job needs, also only after two-factor sign-in.
Infrastructure
GIX Credit runs on enterprise cloud infrastructure that is independently audited to SOC 2 Type II. Data, documents and sign-in records are held in secure, access-controlled data centres. All traffic is encrypted in transit (TLS), and data is encrypted at rest.
Operations and resilience
- Encrypted backups of the database every night, kept for 30 days, with a written restore procedure.
- Automated health checks every hour, with alerts to our team if anything fails.
- Secrets are held only in protected server settings, never in the code that reaches your browser.
- Every change to the platform is tested before release, and access to production systems is limited to authorised staff.
Reporting a security issue
If you believe you have found a security issue, please contact us through the contact page. We take every report seriously.