Compliance Ops
Trade reconstruction (CFTC 1.35), just-in-time privilege elevation with four-eyes approval, break-glass emergency access, and GDPR/CCPA data-subject controls + the DLP export-audit log.
Trade reconstruction (CFTC 1.35)
Assembles the complete, regulator-ready record for a trade: its lifecycle history, the tamper-evident hash-chained audit events, and the linked electronic communications, merged into one chronological timeline.
JIT privilege elevation
Time-boxed, four-eyes-approved elevation to a role or permission. A requester can never approve their own request (enforced server-side). Sensitive actions need a fresh step-up MFA re-verification first.
Break-glass emergency access
Opens short-TTL emergency elevated access. Requires a fresh step-up first; the justification is MANDATORY; every open emits a high-severity audit + alert signal.
Privacy / GDPR + DLP
Data-subject access (DSAR, GDPR Art. 15), right-to-erasure (Art. 17 — anonymizes PII, never hard-deletes; refused under a legal hold or open surveillance case), and the DLP export-audit log.
Legal-hold note: erasure is refused while a litigation hold or open trade-surveillance case covers the subject (the guard runs server-side).