Skip to content
AtheronLABS

You're visiting from the United States. Prices are shown in US dollars. Not right?

labs@atheron:~/industries/digital-assets/apps$ build app --web --mobile

Crypto back office

Compliance cases and an audit trail for crypto exchanges.

A crypto platform's compliance work is spread across screening vendors, travel rule providers, the exchange database and a spreadsheet. We build the back office that brings them into one case view with an audit trail, so a regulator's question is answered from the system rather than reconstructed.

// what matters here

What is different in this industry.

01

One view per customer

Screening hits, transfers, travel rule messages and documents for a customer sit in one case, so an analyst sees the whole picture before deciding.

02

Your vendors, behind one interface

We connect the screening and travel rule providers you already use and keep each behind its own adapter, so changing one is not a rebuild.

03

Every decision recorded

Who cleared, escalated or reported a case, when and why, is written to an audit trail that cannot be edited from the screens.

04

Built to the rules you report under

We build to the requirements your compliance team sets out, such as FINTRAC obligations for virtual currency dealers and your securities regulator's terms. We do not give legal advice.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb app

Compliance back office

Hypothetical. Not a client, not a result.

// The problem

A crypto trading platform runs wallet screening, travel rule messages and transaction reports in separate tools and a spreadsheet, so no one sees a customer's whole picture.

// What we would build

A web back office that brings wallet screening results, travel rule exchanges, customer due diligence and reportable transactions into one case view, with a full audit trail and exports in the formats your reports need.

// What is in it

  • One case per customer, with screening hits, transfers and documents together
  • Travel rule messages sent and received through your chosen provider
  • Queues for reportable and suspicious transactions, with reviewer sign-off
  • An audit trail of every decision and every change to a case
  • Exports for regulator requests and the external auditor

// Stack

  • Next.js
  • PostgreSQL
  • Wallet screening API
  • Travel rule provider API
  • AWS

// estimate

Build
≈ US$130,000 to US$199,000, delivered within 25 weeksCAD 185,200 to 283,300
Hosting
≈ US$492 a monthCAD 700 a month
Support
≈ US$5,010 a monthCAD 7,135 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Design approved
3.4 to 5.9 weeks
Core features
2.9 to 4.9 weeks
Full build
1.9 to 3.4 weeks
Testing and fixes
0.4 to 0.9 weeks
Controls built and evidenced
0.4 to 0.9 weeks
Readiness review
0.4 to 5.4 weeks
Launch
0.9 to 1.4 weeks
Observation window (auditor)
26 weeks
Auditor report (SOC 2 Type II)
4 to 8 weeks

Outside our hands, and added to the calendar

API access from your custody provider
1 to 4 weeks
Booking a penetration tester and their report
2 to 4 weeks

How it is paid

Deposit 20%
CAD 37,040 to 56,660
Discovery 6%
CAD 11,112 to 16,998
Design approved 6%
CAD 11,112 to 16,998
Core features 18.1%
CAD 33,521.20 to 51,277.30
Full build 12%
CAD 22,224 to 33,996
Testing and fixes 6%
CAD 11,112 to 16,998
Controls built and evidenced 7.7%
CAD 14,260.40 to 21,814.10
Readiness review 7.7%
CAD 14,260.40 to 21,814.10
Launch 6.5%
CAD 12,038.00 to 18,414.50
Holdback, 30 days after launch (10%)
CAD 18,520 to 28,330
Example projectWeb appAIOpen-source model

Investigation assistant

Hypothetical. Not a client, not a result.

// The problem

Analysts spend hours tracing flows between addresses and writing up the same background on each case before they can judge it.

// What we would build

An assistant on an open-source model, served on GPUs the business controls so customer and case data never reach a model provider, that gathers on-chain history and internal records for a case and sets out the facts with their sources for the analyst to judge.

// What is in it

  • Tools to pull an address's on-chain history and linked internal records
  • A case summary where every statement links to the transaction or record behind it
  • The analyst concludes and files; the assistant never makes a determination
  • An evaluation set built from closed cases, run before every change
  • An open-source model on rented GPUs, with no data sent to a model provider

// Stack

  • Qwen or Llama (open-source)
  • vLLM
  • Blockchain indexer
  • PostgreSQL
  • Next.js
  • DigitalOcean GPU

// estimate

Build
≈ US$127,000 to US$195,000, delivered within 23 weeksCAD 181,400 to 277,300
Hosting
≈ US$4,530 a monthCAD 6,450 a month
Support
≈ US$2,500 a monthCAD 3,565 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

AI route
Open-source model
Model running cost
≈ US$4,190 a monthCAD 5,960 a month

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Specification and evaluation plan
0.4 weeks
Design approved
2.4 to 3.9 weeks
Core features
1.4 to 2.4 weeks
Full build
0.9 to 1.4 weeks
Working pilot
4.4 to 7.4 weeks
Testing and fixes
1.4 to 1.9 weeks
Launch
0.9 to 1.4 weeks
Production
0.9 to 1.4 weeks

How it is paid

Deposit 20%
CAD 36,220 to 55,400
Discovery 1.8%
CAD 3,259.80 to 4,986.00
Specification and evaluation plan 10.5%
CAD 19,015.50 to 29,085.00
Design approved 1.8%
CAD 3,259.80 to 4,986.00
Core features 5.6%
CAD 10,141.60 to 15,512.00
Full build 3.7%
CAD 6,700.70 to 10,249.00
Working pilot 31.7%
CAD 57,408.70 to 87,809.00
Testing and fixes 1.8%
CAD 3,259.80 to 4,986.00
Launch 1.8%
CAD 3,259.80 to 4,986.00
Production 11.3%
CAD 20,464.30 to 31,301.00
Holdback, 30 days after launch (10%)
CAD 18,110 to 27,700
GPU time for training and testing, at cost
CAD 300. Billed up front, at cost, outside the milestones

// questions

Questions we get about this.

Which screening and travel rule providers can it use?

The ones you have contracts with. The main providers all offer APIs, and we keep each behind an adapter so the back office does not depend on any one of them.

Can the back office file reports to FINTRAC for us?

It prepares the reports in the required format and tracks what was filed and when. Filing and the decision to file stay with your compliance officer.

Does the back office touch customer funds?

No. It reads from the exchange and custody systems and records decisions. Moving funds stays with the systems and controls built for that.

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Crypto exchange compliance back office development | Atheron Network Labs