Security
Security is a system property at Holdriser, not a feature added at the end.
HTTP-only sessions
Your session is stored in a Secure, HTTP-only, SameSite cookie. JavaScript in the browser cannot access it.
KYC compliance
Identity verification gates protect regulated operations. We comply with applicable financial services regulations.
Multi-layer architecture
The browser communicates exclusively with our BFF layer. Internal Rust services are never exposed to the internet.
Double-entry ledger
All money movements use double-entry accounting. Ledger entries are immutable once posted.