Resource 07 · Technology and security

Enterprise infrastructure without an enterprise build program.

Fractional Assets is built on technology originally developed to support a regulated real-world asset platform in Australia. The architecture was designed around scalability, security, automation and integration rather than a public crypto exchange model.

Architecture

Cloud-native services and ledger integration.

The core environment uses AWS serverless technologies and microservices with integration to the Stellar ledger. It supports multiple user-facing and administrative applications, including investor onboarding, asset assessment, finance/investment, administration and settlement workflows.

01

Compute and processing

AWS Lambda supports scalable microservices and backend processing; Amazon SQS supports decoupled asynchronous processing.

02

Data and objects

DynamoDB provides high-performance, highly available data storage, while Amazon S3 provides durable encrypted object storage.

03

Identity and communications

AWS Cognito supports identity and multi-factor authentication; Amazon SNS and SES support notifications and transactional communications.

04

Encryption and protection

AWS KMS supports encryption-key management and AWS WAF provides protection against common web and application threats.

Automation

Automate repeatable journeys while retaining human validation where required.

01

Onboarding and verification

Investor onboarding, identity verification, KYC and wallet creation.

02

Investment operations

Asset/property assessment, digital transactions and smart-contract execution.

03

Communications and delivery

Notifications, deployment pipelines and automated end-to-end testing.

04

Governance controls

Human validation checkpoints can be retained for compliance-sensitive processes.

Security controls

Layered controls for an approved operating model.

01

Identity and permissions

Multi-factor authentication and least-privilege IAM controls.

02

Encryption

TLS 1.2+ encryption in transit and AES-256 encryption at rest through AWS KMS.

03

Security services

AWS GuardDuty, AWS Macie, AWS Security Hub, AWS Trusted Advisor and AWS WAF.

04

Assurance practices

Vulnerability scanning using Snyk, penetration testing, secure coding controls, multi-step transaction verification and protected KYC data handling.

Investor experience

The technology should be invisible to the investor.

Investors should not need to understand blockchain to use the platform. They should see a familiar branded investment application. The complexity belongs underneath.

See how the operating platform could be configured around your proposition.

Discuss your organisation, asset strategy, investor base and preferred launch window with Fractional Assets.

Book a demonstration