1. Licenses
- UK / EU: 01LOT Markets Ltd. — FCA-authorized Electronic Money Institution, Ref. 980012.
- US: 01LOT US LLC — Money Service Business registered with FinCEN; state-by-state MTL coverage in progress.
- Singapore: 01LOT APAC Pte Ltd. — MAS payments-institution licence (Standard).
2. Audits
- SOC 2 Type II · annual · auditor: A-LIGN. Latest report 2026-Q1, available on request.
- Match-engine fairness · quarterly · auditor: Stillwater Markets Audit. Reports public; latest 2026-Q1 (PDF).
- Penetration testing · semi-annual · firm: Trail of Bits. Summary public, full reports under NDA.
3. Sub-processors
Companies that process personal or financial data on our behalf:
- Cloud: AWS (us-east-1, eu-west-2, ap-southeast-1), Cloudflare (edge, WAF).
- KYC / AML: Sumsub, Persona, ComplyAdvantage (sanctions screening).
- Payments: Stripe, Modulr, Circle, Fireblocks.
- Email / messaging: Postmark (transactional), Customer.io (lifecycle).
- Analytics: Plausible (privacy-friendly, no cookies). We do not use Google Analytics.
4. Law enforcement requests
We respond to lawful requests from law enforcement and regulators. We require valid subpoenas, court orders, or equivalent in your jurisdiction. We notify affected users unless legally prohibited. Send requests to legal@01lot.example — we acknowledge within 1 business day.
We publish a transparency report each January summarizing the prior year's requests (number, jurisdiction, outcome). 2025 report: 47 requests received, 31 produced, 16 declined, 0 gag orders.
5. AML & global availability
01LOT is open to traders worldwide — there are no country restrictions on account creation. Standard identity verification applies to every signup. Suspicious transaction reports are filed where required by applicable law, and we will freeze funds where we have a reasonable basis to suspect proceeds of crime, consistent with our regulatory obligations.
6. Cookie policy
We use a small, audited set of cookies. None for advertising, none for tracking across third-party sites.
Strictly necessary
01lot_session— keeps you signed in. Session duration.01lot_csrf— CSRF protection. Session duration.
Preferences (optional)
01lot_theme— remember theme choice. 365 days.01lot_locale— remember language. 365 days.
Analytics (optional, no PII)
- Plausible cookieless analytics. No fingerprinting, no third-party sharing.
Manage preferences any time in Settings → Privacy inside your account.
7. Contact
Compliance team · compliance@01lot.example · Response inside 1 business day.