FastXE — Security

1.1. FastXE uses access and authentication controls designed to protect customer accounts and internal systems. These measures may include:

• 1.1.1. Secure authentication processes
• 1.1.2. Multi-factor authentication
• 1.1.3. Session-management controls
• 1.1.4. Account-access monitoring
• 1.1.5. Role-based internal permissions
• 1.1.6. Restrictions on access to customer information
• 1.1.7. Additional verification for sensitive account actions
• 1.1.8. Controls designed to detect suspicious login activity

1.2. Access to sensitive systems and information is limited to authorised personnel and service providers with a legitimate business requirement.

2.1. FastXE uses security measures designed to protect information during transmission, processing and storage. These measures may include:

• 2.1.1. Encryption in transit
• 2.1.2. Encryption or equivalent safeguards for sensitive information at rest
• 2.1.3. Secure hosting environments
• 2.1.4. Access controls
• 2.1.5. Data minimisation
• 2.1.6. Logging and monitoring
• 2.1.7. Backup and recovery procedures
• 2.1.8. Secure data-retention and deletion processes

2.2. Information is retained only for as long as reasonably necessary to provide services, meet legal obligations, resolve disputes and protect FastXE and its customers.

3.1. FastXE's security practices are designed to address risks affecting its website, applications, infrastructure and supporting services. These practices may include:

• 3.1.1. Secure software-development procedures
• 3.1.2. Code and change reviews
• 3.1.3. Vulnerability identification and remediation
• 3.1.4. Dependency and software-update management
• 3.1.5. Security testing proportionate to risk
• 3.1.6. Infrastructure monitoring
• 3.1.7. Suspicious-activity alerts
• 3.1.8. Incident-response procedures
• 3.1.9. Business-continuity and recovery planning

4.1. Financial and cryptoasset services may be targeted by fraud, account takeover, scams and social-engineering attacks. FastXE and its service providers may use the following measures to protect customers and comply with applicable law:

• 4.1.1. Identity verification
• 4.1.2. Customer and business verification
• 4.1.3. Sanctions screening
• 4.1.4. Fraud monitoring
• 4.1.5. Transaction monitoring
• 4.1.6. Blockchain-analytics tools
• 4.1.7. Device and behavioural signals
• 4.1.8. Manual compliance reviews
• 4.1.9. Source-of-funds or source-of-wealth checks

4.2. Transactions may be delayed, rejected or reviewed where activity appears suspicious, unusual or inconsistent with a customer's profile.

5.1. FastXE works with service providers that support areas including infrastructure, identity verification, payments, cards, banking connectivity, communications, analytics and security.

5.2. FastXE applies risk-based due diligence and contractual requirements to relevant providers. Providers may also apply their own security, verification and compliance controls.

6.1. Customers play an important role in keeping their accounts secure. You should:

• 6.1.1. Use a strong and unique password
• 6.1.2. Enable multi-factor authentication where available
• 6.1.3. Never disclose passwords or one-time verification codes
• 6.1.4. Never disclose private keys or wallet recovery phrases
• 6.1.5. Verify the FastXE website address before signing in
• 6.1.6. Check payment and wallet details carefully before confirming a transfer
• 6.1.7. Keep your devices, browser and operating system updated
• 6.1.8. Avoid accessing your account through unsecured devices or networks
• 6.1.9. Contact FastXE immediately if you notice unfamiliar activity

6.2. FastXE will never ask you to disclose your complete password, private key or seed phrase.

7.1. If you believe you have identified a security vulnerability affecting FastXE, contact us at: [email protected]

7.2. Please include:

• 7.2.1. A clear description of the issue
• 7.2.2. The affected page, application or feature
• 7.2.3. Steps required to reproduce the issue
• 7.2.4. Relevant screenshots or supporting evidence
• 7.2.5. Your contact information

7.3. You must not:

• 7.3.1. Access information that does not belong to you
• 7.3.2. Download, alter or delete customer information
• 7.3.3. Disrupt FastXE services
• 7.3.4. Perform denial-of-service testing
• 7.3.5. Use social engineering
• 7.3.6. Attempt to obtain employee credentials
• 7.3.7. Publicly disclose an issue before FastXE has had a reasonable opportunity to investigate it

7.4. Submission of a report does not create an entitlement to compensation and does not mean FastXE operates a formal bug-bounty programme.

8.1. FastXE maintains processes designed to assess, contain, investigate and respond to suspected security incidents.

8.2. Where legally required, FastXE will notify affected individuals, service providers, regulators or authorities and provide relevant guidance.

9.1. To report a security concern or suspicious account activity, contact us: [email protected]

9.2. Do not send passwords, one-time codes, private keys or recovery phrases by email.