01
The perimeter
DAPL is deployed inside the client's own regulatory perimeter or a licensed partner's. Arrel is a technology provider: it does not hold client assets and is never the regulated party.
Trust, built for African financial institutions.
Certifications, the perimeter Arrel works within, and how compliance runs on every transfer.
Independently audited against recognised standards.
ISO 27001Certified
SOC 2 Type IIExamined
ISO 27001 covers how Arrel manages information security risk. SOC 2 Type II is an independent examination of how Arrel's security controls operated over time.
Operational track record.
What DAPL runs in production today.
$5B+
in orchestrated volume
50M+
fully automated trades
$300M
of transactional flows since 2024
99.9%
server uptime
How trust works on DAPL.
02
Compliance on every transfer
KYT screening with Chainalysis or LedgerBrain, KYC checks with Sumsub, AML monitoring and approvals run before funds move, under the institution's rules.
03
Data protection
Client data stays within the client's perimeter. Each institution's records are kept to its own controls and agreements.
04
One record per movement
Every transfer records who requested and approved it, which checks ran and which provider handled it, ready for auditors and regulators.
Request reports for your due diligence.
For risk, security and procurement teams at institutions evaluating DAPL.
Security and compliance, answered.
Is Arrel ISO 27001 certified?
Yes. Arrel is certified to ISO 27001 for information security management.
Has Arrel completed a SOC 2 examination?
Yes. Arrel has completed a SOC 2 Type II examination, which tests how its security controls operated over a period of time. The report is available on request.
Does Arrel hold client assets?
No. Assets stay with the custody technology the institution chooses. Arrel is a technology provider and is never the regulated party.
How are compliance checks enforced?
Screening (KYT), identity checks (KYC) and approvals run before funds move. A transfer that fails a check is held in the institution's custody.
Where does client data stay?
Client data stays within the client's perimeter, under the institution's own controls and agreements.