Security
How we protect your money, your account, and your data. The short version: we treat security as the foundation of everything else, and we partner with regulated institutions that hold the same standard.
Regulated partners
Payment services are provided by Sciopay Ltd (HMRC MSB licence XCML00000151326, FCA Firm Reference 927951) and Equals Connect Limited (FCA Firm Reference 671508). Client funds are safeguarded in accordance with the Payment Services Regulations.
Encryption in transit and at rest
All traffic to and from our platform is encrypted with TLS. Sensitive data is encrypted at rest. Payment instructions move over secure rails between regulated counterparties.
Account security
Strong password requirements, optional multi-factor authentication, and session controls. We will never ask you to share your password by phone or email.
Operational controls
Access to client information is on a least-privilege basis. We log administrative actions, monitor for unusual activity, and run regular reviews against our compliance framework.
Reporting concerns
If you spot something that looks wrong, email info@xratecapital.com or call us. We treat every report seriously and confidentially.