Scope & integrator responsibilities
What Open Exchange provides, what you bring, and where your responsibility begins.
In one line
Open Exchange is the infrastructure you build an exchange on. It gives you a matching engine, clustering, a risk pipeline, an internal ledger, and market data. Identity, custody, fiat, and compliance sit on top, and those are yours to build and own.
Provided vs. owned
Open Exchange provides
The infrastructure layer.
- Matching engine & array-backed order book
- Raft-consensus clustering & failover
- OMS pre-trade risk pipeline (7 checks)
- Deterministic money ledger on its own Raft cluster (Assets Engine)
- Real-time market data (WebSocket)
- Admin / ops gateway & runbooks
- Reference trading UI
- Configurable markets (demo ships BTC/ETH/SOL/XRP/DOGE-USD)
You (the integrator) own
Your product & regulatory responsibility.
- KYC / AML & sanctions compliance
- Custody & wallets (hot/cold, key management)
- Fiat on/off ramps & bank/PSP integration
- User identity, login & account opening (IAM)
- Regulatory licensing & compliance
- Real-money settlement (on/off-chain)
- Market surveillance
- Tax & regulatory reporting
What you bring
These pieces are yours to integrate:
- KYC / AML / sanctions screening: you provide identity verification and watchlist checks.
- Custody & wallets: you handle key management, hot/cold storage, and on/off-chain movement.
- Fiat rails: you integrate banks, PSPs, and payments.
- User IAM: you own login, account opening, and session management. The OMS ships a pluggable auth SPI (api-key and JWT providers included), so your identity system plugs in rather than forks in.
- Network perimeter: TLS termination, DDoS protection, edge rate limiting, and network segmentation are yours; the stack deliberately terminates none of them.
- Regulatory cover: you hold licensing, market-surveillance, and tax reporting.
- Security audit: arrange one before production; none has been performed yet.
On the ledger
The money ledger — the Assets Engine, a Raft cluster of its own — is internal accounting: it tracks holds, releases, and settlements in internal units, with a replayable per-node money journal, so the engine and OMS agree on balances. Bridging those internal units to real custody and movement of funds is the integrator’s responsibility, and is where regulatory and security obligations attach.