OK
JWT protected routes
Dashboard sessions are checked before private routes load.
Security
Protection across identity, payments, and account access.
BSX security is layered around verified users, protected sessions, controlled role access, and auditable account workflows.
Create secure accountOK
KYC verification
Identity status can control access to account actions.
OK
Provider secrets
MongoDB and JWT secrets stay in environment variables.
OK
Webhook signing
Payment callbacks can be verified before account updates.
OK
Notifications
Account activity can trigger email or dashboard alerts.
OK
Admin controls
Broker and admin roles can review sensitive account events.