Security & resilience

Built so a failure never puts money at risk.

What MARBIN can do in an account, what it can't, who it lets in, and what happens if it stops.

Security & resilience

Built so that a failure
never puts your money at risk.

MARBIN can buy and sell inside your account, and nothing more. If MARBIN stops, your money stays where it is, your stops keep working at the broker, and you can pause or disconnect yourself at any time.

Your money stays yours

It sits in your own account at a regulated broker, in your name, protected by the broker’s own safeguards. MARBIN never holds, pools or moves it.

A key that can’t withdraw

MARBIN works through your broker’s official API, with access that can buy and sell inside your account, never withdraw or transfer. You can revoke it at your broker at any moment.

Checked, then locked

Your key is checked with your broker the moment you submit it, then encrypted (RSA-3072 with AES-256). The page you type it into can lock it but never read it back; only the trading server can open it, and it is never shown again.

Invite-only sign-in

Members’ pages sit behind Cloudflare Access: only invited addresses get in, with a one-time code emailed to you (or your Google account), and every request is checked again by MARBIN itself. No passwords to steal.

Every member approved, one by one

Nobody joins by themselves. Each new member answers a short suitability check, so MARBIN only invests in a way that suits them, has their identity verified (being introduced), and is approved personally by MARBIN before anything is bought.

Your identity, verified

Being introduced: an ID document check, run by our identity partner on its own secure page, with a selfie video and sanctions screening to follow. MARBIN keeps the result, never your photos. How it works.

Protected even if MARBIN is offline

Every share bought gets its own stop, resting at the broker itself, so it still protects you if MARBIN’s server is off.

When in doubt, it doesn’t buy

MARBIN is built to fail closed: if a figure is missing, a check can’t be completed or something doesn’t add up, the answer is no. Safety switches stop new buying on their own; selling and stops always keep working.

Backed up every night

MARBIN’s records are encrypted (AES-256) and copied off-site every night, so the system can be rebuilt on new hardware from the last night’s state.

Every change checked before it reaches you

No change to MARBIN goes live until it has passed a full set of automatic checks — every test, then every account compared with its broker and every holding’s stop confirmed — first on a separate practice system, then on the live one, before and after the release.

Every holding’s history, kept

Your page shows every holding MARBIN has had for you: when and why it was bought, when and why it was sold, how long it was held and what it made. Your trading record is kept for six years.

Books sealed every day

Each night your account’s books are written down — every holding, trade and pound — checked against your broker’s own figures, and sealed, so any later change to a past day would show.

An app that locks itself

MARBIN’s members’ app opens with Face ID or your fingerprint. It keeps no copy of your account on the phone — your figures come fresh each time — and the phone’s app switcher never shows your balances.

Your data, under UK GDPR

MARBIN keeps only what it needs to run your account, for as long as the law asks, and never sells or shares it for anyone’s marketing. Each account’s records sit in their own folder. Privacy.

Shariah-screened, every night

Every company is screened before it can be bought, and every holding is checked again each night. The Shariah screen.

Watched through the day

A separate guard checks every account throughout the trading day — that MARBIN’s record matches the broker’s, that every holding’s stop is in place — and pauses trading if anything doesn’t add up. If MARBIN itself ever stops responding, an independent check raises the alarm.

A stop button in your pocket

Trading can be paused instantly from a phone, for every account at once; nothing restarts it by itself. You can pause your own account on your page at any time.

Only what each person needs

Every person sees only what their role requires: you see your own accounts, a partner sees only its own customers, and MARBIN’s internal systems and documents are open to its owners alone. Every sign-in is checked twice — at the door and again by each application.

Honest about the limits: MARBIN runs on one dedicated server, not a data centre, so it can be briefly offline. While it is, nothing new is bought and the stops at the broker keep protecting what you hold; when it’s back, it reconciles with the broker before doing anything else. You can stop it yourself at any time: pause on your page, or revoke MARBIN’s access at your broker. MARBIN is a private, invite-only service; it is not authorised or regulated by the FCA, and your account’s own protections are the broker’s, not MARBIN’s.

Identity checks

Knowing who we work for,
before anything is traded.

UK anti-money-laundering rules ask anyone managing investments to know who they work for. So MARBIN is introducing identity checks for every member: you will verify your identity after you connect your broker account and before MARBIN starts trading for you. It will take about two minutes, with a passport or driving licence and a phone or computer camera.

Your document

You will photograph your passport or driving licence. The check confirms the document is genuine and reads your name, date of birth and country from it.

Then a selfie and sanctions screening

As the checks are switched on in full, a short selfie video will confirm that a real person matches the photo, and your name will be checked against international sanctions lists and lists of politically exposed people.

We keep the result, not your photos

The check runs on the secure page of MARBIN’s identity partner, Didit, which holds the images under its own data agreement. MARBIN keeps only the outcome, and the name, date of birth and country read from your document.

If the check can’t verify you — a blurred photo, say — you can simply try again, or write to us. Your identity data is handled under UK GDPR: see Privacy.