Controls and security
Segregation of duties, a signed audit trail, second factors for approvers and encrypted originals are part of how FundAgent works, not settings someone has to remember. What it does not claim is stated just as plainly.
Four eyes
The rule is checked by the server at submission, approval and posting, not by the screen. Approval re-checks the amounts, allocations and conditions; a proposal whose inputs changed must be recalculated and reviewed again.
Debits equal credits
| Account | Debit | Credit |
|---|---|---|
6100 Advisory and monitoring fees | 12,500.00 | |
2000 Suppliers | 12,500.00 |
You prepared this entry. Another person must approve it.
Approvers confirm with a second factor.
Checking second factor…Audit trail
entry.preparedCamille Laurent9b1d4e…07aaentry.submittedCamille Laurentc40f2a…5e13entry.approvedAlexandre Weber3f9a7c…c21eChain verified · HMAC-SHA-256
Audit trail
Each event records who acted, on what, when and with which details, and is chained to the one before. Signatures use HMAC-SHA-256 under a key held outside the database, so whoever can write to the database still cannot forge history.
Administrators and auditors recompute every signature and every link in one ordered pass. A changed field, a deleted event or a broken link is reported as invalid.
Keep the head hash outside FundAgent; checking against it detects even a history rewritten from start to end.
Older events whose signatures cannot be reconstructed are reported as unverifiable, never certified as intact.
entry.submittedCamille LaurentHMAC c40f2a…5e13 · previous 9b1d4e…07aaentry.approvedAlexandre WeberHMAC 3f9a7c…c21e · previous c40f2a…5e13entry.postedAlexandre WeberHMAC a17e03…6d90 · previous 3f9a7c…c21eperiod.close.preparedCamille LaurentHMAC e5b2c9…1f47 · previous a17e03…6d90Chain intact · every signature recomputed · head matches the external checkpoint
Identity and access
Roles and per-fund grants decide who sees and does what; an investor sees only their own positions. Approvers must enrol a time-based second factor before they can approve anything.
TOTP with ten single-use recovery codes stored as hashes; a reused code is rejected, and eight failed checks lock verification for fifteen minutes.
No administrator can quietly remove someone’s second factor, and the last active administrator is protected.
Accounts start from single-use links; rights changes revoke earlier sessions, links and tokens.
| Person | Role | Scope | Second factor |
|---|---|---|---|
| Sophie MeyerAdministrator | Administrator | All funds | Enrolled |
| Alexandre WeberReviewer | Reviewer | 3 funds | Enrolled |
| Camille LaurentPreparer | Preparer | 3 funds | Optional |
| Thomas FischerAuditor | Auditor | Read and verify | Enrolled |
| Émilie BernardInvestor | Investor | Own positions only | Optional |
Approvers cannot approve until they enrol. Changing someone’s rights revokes their sessions and tokens.
Data protection
Assurance
Controls are only as good as the evidence that they operated. FundAgent produces it as a by-product of the work.
Run beside your current administrator; NAV and capital accounts are reconciled line by line and every difference explained.
9 of 9 capital accounts agree to the cent
Shared with the AIFM’s functions, the administrator and the auditor you designate. Each control has an owner and a tester, is attested under four eyes and carries its live evidence; the auditor sees only what is shared with them and records findings, tracked to closure.
SOD-01The preparer is never the approverEvidence today, 09:12OperatingAUD-02Audit chain verifies end to endHead hash checkpointedOperatingCLS-04Closing checks pass before a closeQ3 2026 · 44 checksOperatingBCK-03Backups restore and verifyRestore tested 28 OctOperatingLedgers, reconciliations and evidence in one export, with a manifest of SHA-256 file hashes.
9f2c07…41abgeneral-ledger-2026Q3.xlsx51d0b2…e87ccapital-accounts-2026Q3.pdfc3a7f5…0b19bank-reconciliations-2026Q3.xlsxd81e60…7c2fcontrols-register-2026Q3.pdf8c65c8…9b34sources/OAD-2026-1042.pdfmanifest.sha256 · 214 files
Prepared for these reviews. Not certified.
Stated limits
In a demo, we trace a NAV to its source documents, prepare a quarter close and show the controls at work, with your questions and at your pace.
Information and evidence
€12,500.00
The invoice amount, recognised as an expense and owed to the supplier until it is paid.
The 1 items add up to this figure to the cent.
Debits equal credits
Orion-Advisory-OAD-2026-1042.pdfp. 1
Supplier: Orion Advisory SA Invoice reference: OAD-2026-1042 Amount: 12500.00 EUR Due date: 2026-11-30
Information and evidence
€18,402,551.20
Contributions plus the position’s share of the fund’s result, read from FundAgent’s ledger.
The 2 items add up to this figure to the cent.
Difference: €0.00. Both figures agree to the cent.
Incumbent administrator · capital account statement Q3 2026.pdf
Capital account at 30 September 2026 18,402,551.20
Information and evidence
€31,880,104.75
Contributions plus the position’s share of the fund’s result, read from FundAgent’s ledger.
The 2 items add up to this figure to the cent.
Difference: €0.00. Both figures agree to the cent.
Incumbent administrator · capital account statement Q3 2026.pdf
Capital account at 30 September 2026 31,880,104.75
Information and evidence
€24,116,903.02
Contributions plus the position’s share of the fund’s result, read from FundAgent’s ledger.
The 2 items add up to this figure to the cent.
Difference: €0.00. Both figures agree to the cent.
Incumbent administrator · capital account statement Q3 2026.pdf
Capital account at 30 September 2026 24,116,903.02
Information and evidence
€40,233,718.66
Contributions plus the position’s share of the fund’s result, read from FundAgent’s ledger.
The 2 items add up to this figure to the cent.
Difference: €0.00. Both figures agree to the cent.
Incumbent administrator · capital account statement Q3 2026.pdf
Capital account at 30 September 2026 40,233,718.66