CoreVex · Financial Market Infrastructure

The infrastructure
behind the broker.

CoreVex engineers the execution, risk, automation, data and operational systems that power modern brokerage businesses. The broker owns the client relationship. CoreVex operates the layer underneath it.

<1ms
Bridge hop
99.95%
Data uptime
24/7
Operating coverage
17
Infrastructure modules

Design targets and architecture benchmarks · not independently verified production results · see metric classification

CVX.OS · Infrastructure telemetry Region LD4 · Live
Liquidity venuesTier-1 · PoP · non-bank MM 4 / 4 up
CoreVex operating layerConnect · engine · risk · data Nominal
ExecutionSTP routing · netting · aggregation 0.8 ms
RiskPre-trade clearance · exposure ceilings Within band
OperationsKYC · payments · support · reporting 90% STP
Broker & client surfaceTerminal · CRM · wealth · academy 1 login
Latency · tick to gate
0.82 ms
Uptime · rolling 90d
99.95%
Orders · peak throughput
41.2k/s
Risk state
Nominal
Liquidity · venues
4 connected
System status
Operational

Telemetry panel is an illustrative representation of the operating state · not a live production feed

01 — What CoreVex is

CoreVex sits underneath the visible financial business.

A broker is a customer relationship, a brand and a balance sheet. Underneath all three is an operating system: connectivity to liquidity, an order and risk engine, onboarding, payments, client records, reporting and support. That system is what CoreVex builds, licenses and operates.

We are not a retail broker, a trading platform or a marketing wrapper. We are the infrastructure layer — engineered, documented, auditable and deployed under the operator's own name and permissions.

B2B infrastructure Operator-owned brand No client money held 17 modules
Conceptual hierarchyOne operating layer
ClientRetail · professional · institutional
Broker / financial operatorBrand · relationship · balance sheet · permissions
CoreVex infrastructureExecution · risk · automation · data · operations
LiquidityFIX venues
PaymentsRails · ledger
DataFeed · reports
RiskClearance

CoreVex does not contract with the end client and does not hold client money · the operator retains the regulated relationship

02 — What CoreVex operates

One operating layer.
Multiple financial systems.

Nine layers, one back-end, one login and one audit trail. Select a layer to see what it does, why it matters, its technical surface and the metrics it is held to.

What it does

Owns the connection between the operator's book and external liquidity: FIX sessions to Tier-1 banks, prime-of-primes and non-bank market makers, with aggregation, last-look filtering and dynamic per-tier markup.

Why it matters

A third-party bridge is unobservable latency and a per-lot cost you cannot remove. Owning the connection makes best execution provable rather than asserted.

Technical surface

FIX 4.4FIX 5.0 SP2BinaryREST

Key metrics

Bridge hop<1 ms
Depth levels5 · TOB + VWAP
FailoverHot standby
Co-locationLD4 · NY4

What it does

Holds the book. An in-memory order book with netting, dual-layer booking and a smart router that dispatches cleared flow either externally to liquidity or internally to a bounded risk pool.

Why it matters

Routing is a revenue and risk decision made thousands of times a second. Making it deterministic and logged turns the book into something the risk function can actually read.

Technical surface

WebSocketFIXgRPCEvent stream

Key metrics

Internal latencySub-millisecond
Routing modelA-book / B-book
NettingActive
Symmetric pricingEnforced

What it does

Scores every ticket before routing against market state and session context, classifies accounts continuously rather than statically, and keeps any internalised exposure inside a published ceiling with automated break-even hedging.

Why it matters

Unbounded internalisation is a balance-sheet event waiting to happen. A bounded, hedged pool is a risk decision with a number attached to it.

Technical surface

VaR engineRule setAlerting API

Key metrics

ClearancePer ticket, pre-route
ClassificationContinuous tiers A–E
Hedge modeBreak-even
Ceiling breachAuto re-hedge

What it does

One record per client merging identity, verification state, funding history, trading behaviour, risk tier, support history and revenue contribution — with segmentation, campaign automation and partner hierarchy on top.

Why it matters

A CRM disconnected from the book is a contact list. Connected, it becomes the control surface for retention, suitability and revenue management.

Technical surface

RESTWebhookEvent bus

Key metrics

Profile modelUnified, 360°
Action logImmutable
Partner tiersUnlimited depth
Campaign railsEmail · SMS · push

What it does

Managed-account infrastructure (PAMM, MAM, LAMM) with automated profit share, an investor portal with collateralised portfolio credit, and a treasury layer for firm funds including a digital-asset settlement rail.

Why it matters

Fee revenue that does not depend on client losses is the only structurally durable revenue line a brokerage has. This layer builds it.

Technical surface

RESTWebhookLedger API

Key metrics

Wealth modelsPAMM · MAM · LAMM
Profit shareAutomated · HWM
Credit facilityUp to 70% LTV
Treasury railFirm funds only

What it does

A single data plane for prices, depth, tick history, derived analytics, execution-quality measurement, client statements and regulatory reporting extracts — exposed over WebSocket and REST with scoped keys.

Why it matters

Everything downstream — terminals, risk, reporting, marketing — is only as trustworthy as the data plane feeding it. Consolidating it removes reconciliation disputes.

Technical surface

WebSocketRESTBatch exportOpenAPI 3.1

Key metrics

Availability target99.95%
API latency p9540 ms
SchemaVersioned, generated docs
RetentionConfigurable per jurisdiction

What it does

Runs funding and withdrawals through a single pipeline: rule checks, screening, automatic rail selection, ledger posting with four-eyes, and instant escalation of outliers to a named human with full context attached.

Why it matters

Clients do not judge a broker on spreads. They judge it on the first withdrawal. Every hold must be a logged rule with an owner, never a discretionary retention tactic.

Technical surface

Bank APIPSPCardLedger

Key metrics

Straight-through90% of flow
Settlement target<3.2 s
Coverage24 / 7
ReconciliationDaily, four-eyes

What it does

Document capture and validation, liveness detection, screening against sanctions, AML and PEP sources, client categorisation, appropriateness assessment, promotion approval workflow and a continuously exported evidence trail.

Why it matters

Compliance that lives in a spreadsheet does not survive an audit. Compliance encoded as non-overridable engine parameters does — and it does not slow the standard case down.

Technical surface

Screening APICase mgmtEvidence export

Key metrics

Onboarding target<60 s standard case
EscalationNamed officer, instant
Rule enforcementNon-overridable
Audit exportOn demand

What it does

Places operating leadership around the infrastructure: fractional CTO, CRO and COO capacity, compliance leadership, technology and vendor due diligence, unit-economics modelling and launch governance.

Why it matters

Systems do not make decisions. The layer fails when nobody owns the trade-off between revenue, risk and capital — so ownership is part of the offer.

Technical surface

Architecture reviewBoard reportingDue diligence

Key metrics

EngagementFractional, monthly
ScopeNamed deliverables
ReportingBoard-ready packs
IndependenceNo vendor kickbacks
04 — How the system connects

See the system.

Nothing in the CoreVex stack is decorative. Every node has a protocol, an owner, a failure mode and a documented recovery path. The diagram below is the production topology in simplified form.

Topology · simplified production view Protocols: FIX · REST · WS · Webhook
Tier-1 bank liquidityFX · metals
Prime of primeFX · indices
Non-bank market makersFX · crypto CFD
CoreVex ConnectFIX aggregation · dynamic markup · last-look filter · hot-standby failover
Execution engineIn-memory book · netting · dual-layer booking
Risk enginePre-trade clearance · exposure ceilings · break-even hedge
Web terminalWebSocket · PWA · FIX tier
MetaTrader bridgeMT4 / MT5 side-by-side
Partner APIJS SDK · institutional FIX
CRMLifecycle
KYCOnboarding
PaymentsRails
WealthPAMM/MAM
SupportNLP desk
Data & reporting planeExecution quality · statements · regulatory extracts · analytics API
Every fill timestamped against the venue quote Symmetric pricing across both booking layers Append-only audit log Interactive architecture map

Simplified representation of the CoreVex reference topology · client-specific deployments vary by jurisdiction, tenancy and liquidity configuration

05 — Two readings of the same system

Every section answers two questions.

The person who signs the contract and the person who integrates the system are rarely the same person, and they need different facts. CoreVex publishes both, side by side, without translation loss.

Switch the view to see the same operating layer described in commercial terms and in technical terms.

No marketing layer over the technical layer Same numbers in both views
View dimension
Revenue
Four streams, none above 35%
Spreads, bounded internalisation, managed-account fees and evaluation fees — two of which do not depend on client losses.
Risk
Bounded by published ceiling
Internalised exposure cannot exceed a portfolio limit; breach triggers automatic re-hedge rather than a desk decision.
Capital efficiency
Netted before it is margined
Exposure is netted and hedged at break-even, reducing the margin posted at venues and the own-funds requirement attached to it.
Operating cost
42 FTE floor → 8 specialists
Robotic onboarding, settlement and support remove the manual operations floor; headcount is spent on judgement.
Service level
90% straight-through, 24/7
The standard case never waits for a shift pattern. The exception is routed with context to a named owner.
Time to launch
60–90 days offshore
Licensed programmes are scoped per regulator and are not represented as guaranteed timelines.
Architecture
Layered, stateless at the edge
Connect, execution, risk, operations and data are independently deployable and independently scalable behind one control plane.
API
REST · WebSocket · webhook
OpenAPI 3.1 schemas, versioned endpoints, scoped keys, idempotency keys on every write, generated documentation.
Protocols
FIX 4.4 / 5.0 SP2
Session management with sequence recovery, heartbeat monitoring, heartbeat-level alerting and hot-standby failover.
Latency
<1 ms bridge hop
Co-located in LD4 and NY4; measured at the gateway, not at the venue, and reported per session per day.
Deployment
Four tenancy models
Dedicated cloud, single tenant, on-premises in the operator's data centre, or co-located beside liquidity.
Security
RBAC · segregation · evidence
Role-based access with four-eyes on every override, environment isolation, encryption in transit and at rest, full action logging.
06 — What changes

The operating floor, before and after.

Comparison against a conventional white-label retail brokerage operating model. Right-hand column is the CoreVex design target for a deployed stack.

FunctionConventional white-label modelCoreVex operating layerMechanism
Onboarding1–3 business days, manual review, drop-off at document stage<60 s standard case, screening automated, exceptions to a named officerL08 Compliance
Withdrawals1–5 business days, batch processed, discretionary holds<3.2 s for 90% of flow, 24/7, every hold a logged ruleL07 Payments
Client supportBusiness hours, human queue, inconsistent answers92% resolved by NLP layer, sub-second, 6+ languages, context attachedL04 Client ops
TerminalLicensed third-party platform, per-seat cost, vendor roadmapProprietary browser engine alongside MetaTrader, no licence ceilingL02 Execution
Liquidity accessThird-party bridge, per-lot fee, unobservable latencyOwn FIX connection, no per-lot vendor fee, per-session latency reportedL01 Liquidity
Risk classificationStatic client types set at onboarding, reviewed occasionallyContinuous quantitative tiers recomputed on a short cycleL03 Risk
HedgingManual desk, discretionary, overtime-dependentAutomated break-even hedging inside a published exposure ceilingL03 Risk
Operational headcount≈42 FTE floor across KYC, back office, support, dealing≈8 specialists: risk, compliance, engineering, growthCross-layer
ReportingManual extracts, spreadsheet reconciliation, audit scrambleContinuous export from one data plane, evidence on demandL06 Data

Left column describes a typical retail white-label operating model, not a named competitor · right column figures are design targets from validated operating models · actual results are client-specific and depend on configuration, jurisdiction and volume

07 — How CoreVex is deployed

Four tenancy models. One codebase.

Deployment is a regulatory and commercial decision, not an afterthought. The same modules ship into four isolation models, selected on jurisdiction, data-residency obligation and volume.

D01Fastest

Dedicated cloud

Isolated infrastructure in a shared region, operated by CoreVex. Fastest route to production with the lowest capital commitment.

ProvisioningDays
Operator controlConfig + RBAC
Data residencyRegion selectable
D02Common

Single tenant

A dedicated instance per operator with its own database, keys and network boundary. The standard choice for regulated entities.

ProvisioningWeeks
IsolationFull
EscrowAvailable
D03Sovereign

On-premises

Deployed inside the operator's own data centre or private cloud, for jurisdictions that require in-country processing and custody.

ProvisioningWeeks–months
KeysOperator-held
UpdatesOperator-scheduled
D04Lowest latency

Co-located

Placed beside liquidity in LD4 or NY4 for operators whose execution quality is measured in microseconds and negotiated in rebates.

Bridge hop<1 ms
Cross-connectDirect
FailoverSecond site
Every deployment ships with the same control plane: role-based access, four-eyes on overrides, an append-only audit log, environment isolation, encryption in transit and at rest, and evidence export on demand.
08 — Who it is for

Built for the operators, not the audience.

Segment 01

Retail & multi-asset brokers

Licensed or offshore brokers replacing a white-label stack with infrastructure they control — or launching a second brand on the same back-end.

  • Removal of per-seat and per-lot vendor cost
  • Own terminal roadmap and branding
  • Execution-quality reporting they can publish

Segment 02

Prime brokers & PoPs

Firms whose product is connectivity and credit. They need aggregation depth, FIX tiering, margin and netting logic, and clean reporting to their own introducees.

  • Multi-venue aggregation with dynamic markup
  • Institutional FIX tier and credit controls
  • Introducee hierarchy and settlement automation

Segment 03

Prop firms & trading groups

Evaluation businesses and multi-manager desks that need automated drawdown enforcement, funded-account provisioning and disciplined flow routing.

  • Automated evaluation rules and provisioning
  • Manager vetting against trading history
  • Managed-account infrastructure on the same book

Segment 04

Family offices & wealth managers

Multi-strategy allocators needing consolidated execution, portfolio credit facilities and institutional reporting across asset classes.

  • Collateralised credit without closing positions
  • Consolidated reporting across venues
  • Algorithmic allocation infrastructure

Segment 05

Fintech & payment operators

Businesses adding a trading or treasury capability to an existing customer base, without becoming a technology company.

  • Embeddable terminal and JS SDK
  • Treasury and settlement rails
  • Compliance layer with evidence export

Not a fit

Where we say no

CoreVex does not take engagements that require misrepresenting execution, obscuring routing, holding client money outside segregation, or marketing unauthorised activity.

  • No retail client relationships in our name
  • No client money custody
  • No guaranteed regulatory outcomes
09 — Launch programmes

A launch is an engineering programme, not a product purchase.

Two tracks, one architecture. Offshore compresses time-to-market; licensed compresses regulatory risk. Both are run as scoped programmes with named deliverables, dependencies and gates.

No guarantee is implied. Regulatory authorisation depends on the applicant's own submission, capital, personnel and the assessment of the relevant regulator. Timelines are planning estimates, not commitments.
Full launch programmes

Track A

Offshore launch

60–90 days
Week 1–2Entity
  • Jurisdiction selection
  • Formation & registers
  • Costed obligations
Week 2–5Banking
  • Corporate accounts
  • PSP onboarding
  • Settlement rails
Week 3–8Liquidity
  • Venue selection
  • FIX connectivity
  • Spread & pricing model
Week 5–11Stack
  • Module deployment
  • White-label theming
  • Desk & ops training
Week 10–13Go-live
  • Partner network
  • First live tickets
  • Post-launch tuning

Track B

Licensed launch

Scoped per regulator
Phase 1Jurisdiction
  • Pathway mapping
  • Permission scoping
  • Counsel alignment
Phase 2Capital
  • Own-funds modelling
  • Wind-down costing
  • Treasury design
Phase 3Governance
  • Senior manager mapping
  • Accountability framework
  • Board & committees
Phase 4Client money
  • Segregation design
  • Daily reconciliation
  • Bank acknowledgements
Phase 5Compliance
  • Conduct & conflicts
  • Best execution policy
  • Promotion approval
Phase 6Systems
  • Engine rule enforcement
  • Evidence automation
  • Audit readiness
Phase 7Go-live
  • Post-authorisation ops
  • Reporting cadence
  • Supervisory liaison

Programme structure shown is the CoreVex reference plan · actual sequencing depends on regulator, jurisdiction, banking counterparties and applicant readiness

10 — Technical proof

Control is part of the architecture.

Trust in an infrastructure vendor is not a badge on a footer. It is a set of mechanisms that continue to work when nobody is watching, and that produce evidence when somebody asks.

C01

Append-only audit trail

Every state change carries an actor, a timestamp, a reason and the rule that permitted it. Immutable by design, exportable on demand.

C02

Role-based access

Least-privilege roles per function, per environment and per jurisdiction. Privileged access is time-bound and logged.

C03

Client-money segregation

Client funds are never firm capital. Segregated accounts, daily reconciliation, acknowledgement letters and a documented ledger trail.

C04

Four-eyes on overrides

No single human can silently override a limit, release a payment or reclassify an account. Overrides require a second named approver.

C05

Failover & recovery

Hot-standby sessions, second-site recovery, tested failover and documented recovery point and time objectives per module.

C06

Continuous monitoring

Session health, latency, queue depth, screening hits and settlement failures alert to a named owner, not to a shared inbox.

C07

Environment isolation

Development, staging and production are separated by network, credential and data boundary. Production access is exceptional and recorded.

C08

Data controls & residency

Encryption in transit and at rest, field-level protection for identity data, residency selectable per jurisdiction, retention configurable.

C09

Evidence, on demand

Regulatory and internal-audit evidence packs are generated from the audit trail rather than assembled by hand before a deadline.

Substantiation rule. CoreVex does not publish claims such as "bank-grade security" or "military-grade encryption" without a specific, verifiable mechanism attached. Where a control is asserted above, the mechanism is named.
11 — Measurable operating states

Engineered for measurable operating states.

Every number on this website carries a classification. We do not present design targets as verified production results, and we do not present one client's outcome as a universal benchmark.

Design target Benchmark Illustrative Client-specific
<1 ms
Bridge hop · co-located
Measured at the gateway against the venue quote.
Design target
99.95%
Data plane availability
Rolling 90-day target with published measurement method.
Design target
90%
Straight-through settlement
Share of payment flow cleared without human touch.
Design target
<60 s
Standard-case onboarding
Against a 1–3 business day conventional benchmark.
Benchmark
45k+
Lots per month hedged
Historic profile of the hedging engine under management.
Client-specific
80%
Operating floor reduction
42-person conventional floor to an 8-specialist cell.
Benchmark
17
Infrastructure modules
Individually licensable, jointly deployable.
Validated
4
Tenancy models
Dedicated cloud, single tenant, on-prem, co-located.
Validated

Measurement method, observation window and configuration assumptions are published in the architecture pack · figures marked design target are engineering objectives, not achieved production results · figures marked client-specific relate to a particular deployment and are not generalisable

12 — Advisory

When the system becomes the strategy.

Infrastructure without ownership drifts. CoreVex places operating leadership around the stack it builds: fractional CTO, CRO and COO capacity, compliance leadership, vendor and technology due diligence, unit-economics modelling and launch governance.

This is not consulting delivered in a deck. It is accountability for decisions that have to be made weekly, taken by people who have run the desk before.

Advisory surface

Fractional CTOArchitecture · vendors · delivery
Fractional CRORisk appetite · ceilings · hedging
Fractional COOOperating cell · SLAs · cost
Compliance leadPolicy · evidence · liaison
Due diligenceVendor · stack · acquisition
Unit economicsRevenue mix · concentration
LP negotiationRebates · terms · priority
Launch governanceGates · dependencies · risk
13 — Engagement models

Four ways to work with CoreVex.

Commercial structure follows the decision being made: a single capability gap, a full stack, a route to market, or leadership capacity. Pricing is scoped on volume, jurisdiction and tenancy — published ranges would be meaningless without them.

M01

Module licence

One module, deployed against an existing stack. For operators closing a specific capability gap.

  • Any of the 17 modules
  • API access and documentation
  • Standard SLA and support window
  • Integration engineering included
Priced per module · monthly Request module spec
M02Most deployed

Full stack

All seventeen modules on one back-end, one login and one audit trail, under the operator's brand.

  • Complete operating layer
  • White-label theming and domains
  • Dedicated or single-tenant deployment
  • Priority SLA and named engineering contact
  • Source-code escrow available
Priced on volume + tenancy Scope a full stack
M03

Launch programme

Fixed-scope build-out from entity and banking through to first live ticket — offshore or licensed.

  • Offshore: 60–90 days
  • Licensed: scoped per regulator
  • Entity, banking, liquidity, PSP coordination
  • Operating procedures and desk training
  • Go-live and post-launch tuning
Fixed scope · milestone gated View launch tracks
M04

Advisory retainer

Fractional operating leadership and strategic counsel, scoped to named deliverables each month.

  • Fractional CTO / CRO / COO
  • Compliance leadership
  • Due diligence and vendor assessment
  • Board and investor reporting packs
Monthly retainer Advisory detail

Included in every engagement

  • Architecture documentation
  • Integration engineering support
  • Append-only audit trail
  • Evidence export on demand
  • Migration assistance
  • Named engineering contact
  • 24/7 operating coverage
  • Versioned API and changelog
14 — Questions

What operators ask first.

If your question is not answered here, it is answered in the architecture pack or on a technical discovery call with an engineer — not with a sales script.

Book a technical discovery

No. CoreVex is a technology, infrastructure and advisory provider to brokers, prime brokers, prop firms, family offices and financial operators. We do not hold client money, do not contract with retail clients, do not provide investment advice and do not provide retail execution services in our own name. The operator retains the client relationship and the regulatory permissions.

Yes. Every module is independently licensable and deployable against an existing stack, with API access, documentation and integration engineering included. Most engagements begin with one capability gap — onboarding, settlement, liquidity connectivity or reporting — and extend from there.

No. The CoreVex web engine runs alongside MetaTrader access on the same account and the same book. Operators typically keep MT4/MT5 for the segment that expects it and route new clients, copy-trading and managed-account flows through the proprietary terminal, which carries no per-seat licence ceiling.

White-label theming, domains and branding are standard on every deployment. Source-code escrow, dedicated single-tenant instances and fully on-premises deployment inside the operator's own data centre are available on Full Stack and Launch engagements, selected on jurisdiction and data-residency obligation.

Sixty to ninety days from kickoff to first live ticket is achievable when entity formation, banking and liquidity onboarding run in parallel with the technical build. Banking counterparty responsiveness is usually the critical path, not the technology. We publish the dependency graph at scoping so the risk is visible before commitment.

No, and any provider that does should be treated with suspicion. Authorisation depends on the applicant's own submission, capital, personnel, governance and the assessment of the relevant regulator. We design the systems, evidence and controls to be authorisation-ready, map the pathway, and work alongside your legal counsel — we are not a law firm and we do not provide legal advice.

English, Farsi, Russian, Arabic, Turkish and Vietnamese are live at deployment, with additional locales configurable. Intent classification, escalation rules and compliance guard-rails operate identically across languages, and tickets are routed to language-matched human agents when escalation triggers.

Every figure carries a classification: design target, benchmark, illustrative or client-specific. Design targets are engineering objectives with a published measurement method. Benchmarks compare against a conventional operating model. Client-specific figures relate to one deployment and are not generalisable. The architecture pack contains the measurement definitions.

15 — Next step

Start with the architecture, not the pitch.

A technical discovery is a working session with an engineer: your volume, your jurisdiction, your current stack, and which layers actually need replacing. You leave with a scoped dependency graph — whether or not you engage us.

45 minutes Engineer-led, no sales script NDA available on request
Book a call Architecture