The treasury that
can prove every
hedge it ever made.
ORDR Treasury sizes corporate FX hedges with a deterministic engine, routes every decision through 4-eyes governance, and seals it in a tamper-evident, hash-chained audit trail. One platform from exposure to regulator.
One operating system for the entire hedge lifecycle
Eight coordinated desks take an exposure from raw position to regulator-ready record — no spreadsheets, no handoffs that lose the audit thread.
Exposure Desk
Ingest positions from ERP, FX feeds and manual entry. Net by currency, tenor and entity before a single hedge is sized.
Hedge Engine
A deterministic kernel sizes hedges against the R1–R8 taxonomy and the frozen strategy-to-instrument map. Same inputs, same output, every time.
Cash & Liquidity
Multi-entity cash positions, 13-week and 12-month forecasting, pooling, sweeps and intercompany netting — liquidity gaps surfaced before they bite.
Debt & Rates
Debt facilities, covenants and a maturity calendar alongside IR swaps, swaptions, a DV01 ladder and IFRS 9 interest-rate hedge effectiveness.
Governance Desk
A tri-state pipeline with 4-eyes maker/checker and Separation of Duties. Nothing reaches the ledger without an independent second signature.
Audit Vault
WORM tables and a per-tenant SHA-256 hash chain. Every run, decision and policy revision is append-only and provable to a regulator.
Compliance & Reporting
IFRS 9 / ASC 815 effectiveness, EMIR / MiFID II / Dodd-Frank submissions and a 35-preset Report Studio — an examination becomes an export.
Counterparty & TCA
Counterparty credit limits and PFE exposure, pre-trade transaction-cost analysis, and posting adapters that reconcile the hedge back to the books.
Everything the terminal runs, in one place
From exposure capture to a regulator-ready export — the full module map across six operating areas, all on the same deterministic engine and the same audit spine.
Exposure & hedging
- ›Position desk & lifecycle
- ›Deterministic hedge engine · R1–R8
- ›Hedge templates
- ›Natural hedging — AR/AP offset
- ›Pre-trade TCA + reconciliation
Cash & liquidity
- ›Multi-entity cash positions
- ›13-week / 12-month forecasting
- ›Cash pooling & sweeps
- ›Intercompany netting
- ›Bank connections & statements
- ›Payments · SWIFT / pain.001
Debt & interest rate
- ›Debt facilities & covenants
- ›Maturity calendar
- ›IR swaps & swaptions
- ›DV01 ladder
- ›IFRS 9 IR hedge effectiveness
Governance & audit
- ›Tri-state pipeline · 4-eyes
- ›WORM audit vault
- ›Per-tenant SHA-256 hash chain
- ›Audit Lab — markup forensics
- ›Lineage & provenance
Compliance & reporting
- ›EMIR / MiFID II / Dodd-Frank
- ›IFRS 9 / ASC 815 effectiveness
- ›Committee packs
- ›Report Studio — 35 presets
- ›Counterparty hub & PFE limits
Intelligence & integrations
- ›Advisory AI · CMD+K
- ›5 ERP connectors
- ›Live market data + snapshots
- ›WorkOS SSO
- ›RBAC — 9 roles × 63 permissions
Same inputs. Same hedge. Every single time.
The hedge kernel is a set of pure, deterministic functions — 46 modules under a 14-module orchestrator. No ML, no auto-learning, no hidden state. A fail-closed validator rejects bad input before it can reach a calculation, and every run is reproducible from its envelope.
Each risk class maps to a strategy and a permitted instrument set. The mapping is part of the frozen v1 contract — it cannot drift between runs.
Nothing reaches the ledger on one person’s signature
A tri-state pipeline with maker/checker control and Separation of Duties. The person who builds a proposal is structurally barred from approving it.
Model and test hedge proposals in full isolation. No effect on books, no audit weight.
→Proposal submitted for review. The maker is locked out of approving their own work by Separation of Duties.
→An independent checker signs off; the run is committed, hash-chained and immutable forever.
Each block commits the SHA-256 of the one before it. Alter any record and every downstream hash fails verification.
Append-only by law of the database, not the app
Three tables — audit_events, calculation_runs and policy_revisions — are WORM: append-only, with no UPDATE and no DELETE path. Every entry is chained with per-tenant SHA-256 from a fixed genesis, so the record is not just stored — it is provable.
Mapped to the frameworks your auditors already cite
Hedge-accounting effectiveness and trade-reporting obligations modelled against the artifacts each regime expects — so an examination is an export, not a fire drill.
Fail-closed at every layer that touches tenant data
Isolation, authorization and integrity are enforced structurally — in the database and at startup — not left to a developer remembering to check.
Forced row-level security
PostgreSQL RLS is forced on every tenant-scoped table. A request without a tenant context returns zero rows — fail-closed by construction.
RBAC — 9 roles, 63 permissions
Hierarchy levels 0–15. Missing permission is denied, never defaulted. Superuser paths are explicitly gated.
JWT + API-key auth
HS256 access/refresh tokens for users; bcrypt-hashed HK_live_ keys for machine access, route-allowlisted at startup.
Tamper-evident audit
SHA-256 hash chain per tenant from a fixed genesis. Any altered record breaks the chain and is detectable on verification.
Rate limiting & headers
60 req/min token-bucket per principal. nosniff, frame-deny, strict referrer and per-environment CORS — no wildcards in production.
WORM data integrity
audit_events, calculation_runs and policy_revisions are append-only. No UPDATE, no DELETE — enforced at the database, not just the app.
Reconcile the hedge back to the books
Posting adapters for QuickBooks, Xero, NetSuite, Sage Intacct and Dynamics 365, plus SWIFT / pain.001 payment messaging and live market-data feeds. ERP posting currently runs in paper mode — journals are generated and validated end-to-end, ready to switch to live credentials per tenant.
Deploy at the scale of your mandate
From a single treasury desk to a sovereign, fully-isolated deployment. The engine and governance are identical at every tier — only the perimeter changes.
One treasury team, the full deterministic engine and governance.
- ✓Exposure, hedge & cash desks
- ✓Tri-state governance + 4-eyes
- ✓WORM audit & hash chain
- ✓IFRS 9 / ASC 815 effectiveness
- ✓Report Studio · 35 presets
Group treasury across entities with full regulatory reporting.
- ✓Everything in Desk
- ✓Multi-entity RLS isolation
- ✓Debt, IR & counterparty risk
- ✓EMIR / MiFID II / Dodd-Frank reporting
- ✓Pre-trade TCA & natural hedging
- ✓ERP posting adapters
- ✓Advisory intelligence · CMD+K
- ✓SSO / WorkOS
Isolated deployment for the most demanding mandates.
- ✓Everything in Enterprise
- ✓Dedicated database & tenancy
- ✓Custom retention & residency
- ✓Named onboarding & SLAs
Bring your treasury into the record.
Sign in to the ORDR Treasury terminal, or request access for your institution.