We operate under supervision, not "in a grey area".
The GFSC is a government regulator that checks how a company handles client funds, how it complies with AML/CFT requirements and how it builds corporate governance.
Plaruno security : regulation, technology and asset protection
An investment platform works with people's money — and
that comes with obligations. We don't hide them behind generic words. Plaruno operates under regulatory
supervision, applies industry-standard data protection and builds its infrastructure so that the risk to
the user is minimal.
Regulation and supervision
Plaruno is licensed and regulated by the Gibraltar Financial Services Commission (GFSC) under Distributed Ledger Technology Provider licence No. 287773.
What this means in practice :
The regulator carries out regular supervision.
The GFSC applies a risk-based model : the intensity of checks depends on the scale and risk of operations. This isn't a formal piece of paper, but ongoing oversight.
We comply with the requirements for protecting client assets.
For companies working with client assets, the GFSC sets out principles for asset protection and readiness for an orderly wind-down if necessary.
We operate within the law.
Using DLT to hold or transmit client assets in or from Gibraltar is a regulated activity requiring authorisation. Plaruno holds such authorisation.
Technology and security
Data and infrastructure protection
We apply the standards used in the traditional financial sector : encryption of data in transit and at rest, strict access controls, regular internal and external security audits.
Continuous monitoring
The system runs around the clock. Suspicious activity, anomalous transactions, attempted unauthorised access — all of this is tracked in real time and requires an immediate response.
Segregation of assets
User funds are not mixed with the company's operating funds. This is a basic principle that protects client assets even if the platform runs into trouble.
Access control
Access to systems and data is restricted. We apply the principle of least privilege : an employee sees only what's necessary for their work.
AML/CFT compliance
Plaruno complies with the anti-money laundering and counter-terrorist financing (AML/CFT) requirements set by the GFSC and the Proceeds of Crime Act 2015 (POCA).
This includes :
- Customer identity verification (KYC)
- Transaction monitoring
- Suspicious activity reporting procedures
- Sanctions screening
These measures protect not only the company, but also users : they reduce the risk of the platform being used for illegal operations.
Good to know
No system offers an absolute guarantee. Investing involves risk, including the risk of losing capital. Plaruno's security is about protection from operational, technical and regulatory risks, not insurance against market fluctuations. Past results don't guarantee future returns.
Still have questions about security?
Leave a request — and our consultant will answer your questions about regulation, data protection and how Plaruno works with user assets.