Your tenancy, your keys, your audit trail.
Mercury builds AI for wealth management the way it should be built — transparent, private, answerable.
Isolation, independent testing and tested recovery.
Each firm runs in its own isolated environment. No shared databases, no pooled storage.
Third-party penetration testing on a recurring cycle, with findings tracked to closure.
Encrypted point-in-time backups with recovery objectives agreed per deployment and tested.
Encryption, retention you set, residency you choose.
TLS 1.3 in transit, AES-256 at rest, with customer-managed keys where your policy requires them.
Retention and deletion windows are configured to your policy, and deletion is verifiable.
Your data stays in the region you choose, Hong Kong or Singapore, and is never replicated outside it.
Single sign-on, scoped roles, four-eyes approval.
SAML or OIDC single sign-on with directory-driven provisioning and deprovisioning.
Access scoped by book, household and function, so a banker sees the clients they cover.
Material actions require a second named approver, recorded against the action they cleared.
No training on your book, full logging, human approval.
Client data is never used to train or fine-tune models, and never pooled with another firm's.
Every model call is logged with its inputs, outputs and the record it ran against.
Nothing executes on its own. Proposals arrive as drafts and wait for a named approval.
Answered here rather than in a questionnaire six weeks into the process.
In the region you choose — Hong Kong or Singapore — and never replicated outside it. Retention and deletion windows are configured to your policy rather than ours, and deletion is verifiable: you can ask us to prove a record is gone and we can show you.
No. Never used to train or fine-tune a model, and never pooled with another firm's book. Your data is read to prepare your day and stays inside your tenancy. This is a structural property of how Mercury is deployed, not a setting someone could switch off by accident.
Each firm runs in its own single-tenant environment. No shared databases, no pooled storage. Encrypted with TLS 1.3 in transit and AES-256 at rest, with customer-managed keys where your policy requires them.
No. Rebalancing, trade preparation and settlement run end to end, but every regulated decision point stops for four-eyes review and a named human approval. Software decides what deserves attention; a person decides what happens. Nothing reaches a client without that signature.
Call reports, approvals and reviews are captured when the work happens rather than reconstructed afterwards, each bound to the household, proposal version and approver it belongs to. Filter to the date range a questionnaire asks about and export it. Records can be read and exported, never edited or deleted.
Mercury is built to align with the data-handling and outsourcing expectations set out in HKMA and MAS guidance, and with SFC requirements on record keeping and electronic data. One clarification worth making plainly: Mercury is a software provider, not a licensed financial institution. Your firm remains the regulated entity. Mercury is designed to make your existing obligations easier to evidence — never to assume them on your behalf.
