Security isn't a feature. It's the foundation.
We protect capital with the same discipline we use to set fixed rates: in writing, independently held, and never blurred with the business.
Custody & segregation
Client funds are held in segregated accounts with independent custodian Hex Trust [DUMMY] — never co-mingled with company funds, never used to finance operations.
Regulatory oversight
Structured to VARA standards across client money, disclosure, and AML. VARA Licence No.: pending. Until authorisation is confirmed, no regulated activity is offered.
Identity & AML
Every account passes identity verification and a source-of-funds check before any investment is accepted.
Independent audit
Financials reviewed annually by Grant Thornton UAE [DUMMY]. Audit summaries available to investors.
Account security
Two-factor authentication on every account. Email and login alerts. Strong password policy enforced.
Platform security
Encryption in transit and at rest. 95% of digital assets in cold storage [DUMMY]. Quarterly third-party penetration testing [DUMMY].
An honest note on limits
VA Capital is an investment provider, not a bank. Investments are not covered by a deposit-protection or government compensation scheme. The measures above are designed to reduce risk — they cannot remove it. Capital is at risk.