Quick answer
What did Seypro build for MERJ Exchange? Production trading platform. Millions in daily volume. Live at merj.com (opens in new tab). Stack: React, Next.js, TypeScript, Node.js, PostgreSQL, Redis. Part of our Fintech & Regulated Systems and Cloud & Infrastructure practice.
18+
Months of continuous development
5
Interconnected platforms shipped
0
Critical security incidents
99.9%
Platform uptime
The brief.
MERJ needed to modernize its exchange infrastructure — a platform where real money moves, regulators watch, and downtime is not an option. The existing systems were aging, fragmented, and difficult to maintain. The brief: rebuild the public-facing platform and internal tooling to match the operational rigor of a licensed national securities exchange, while supporting a new asset class — tokenized securities — that most exchanges haven't touched.
How we built it.
We embedded with the MERJ team as their technical partner, not a vendor shipping features. Every decision was filtered through two questions: does this hold up under regulatory audit, and does this scale when volume spikes. We built incrementally, shipping to production weekly, with full regression and penetration testing on every release.
Scope of work
This wasn't a website redesign — it was platform engineering for a financial institution. The engagement covered the full surface area of a securities exchange: public markets interface, investor portal, issuer dashboard, administrative back-office, and the security infrastructure holding it all together.
- Public exchange platform — real-time market data, listed securities, corporate actions, announcements, and regulatory filings
- Investor portal — account management, portfolio tracking, order history, KYC document submission, and dividend reporting
- Issuer dashboard — listing applications, disclosure management, corporate action scheduling, and compliance document uploads
- Administrative back-office — user management, trade supervision, reporting tools, and audit trail interfaces
- API layer — RESTful and WebSocket APIs for market data, order routing, and third-party integrations
Security as a foundation
An exchange is a target. Every component was built with defense in depth: encrypted data at rest and in transit, role-based access control with granular permissions, session management with anomaly detection, rate limiting on every public endpoint, and input validation that assumes hostile intent. We ran penetration tests before every major release and maintained a rolling vulnerability assessment program.
- TLS 1.3 everywhere, AES-256 at rest, key rotation on schedule
- Role-based access control with per-resource permission matrices
- Comprehensive audit logging — every state change, every access, every admin action
- Automated penetration testing integrated into CI/CD pipeline
- DDoS mitigation at the edge with Cloudflare and AWS Shield
- KYC/AML compliance workflows with document verification and risk scoring
Tokenized securities
MERJ is one of the first regulated exchanges in the world to list tokenized securities. We built the infrastructure to handle digital assets within the same regulatory framework as traditional equities — not as a separate "crypto" silo, but as a native asset class with full clearing, settlement, and custody integration. This required careful coordination with MERJ's compliance team and the Seychelles Financial Services Authority.
Performance under pressure
Market opens don't wait. We optimized for sub-second page loads on the public platform, real-time data delivery via WebSockets with graceful degradation, and database queries that hold up during peak trading hours. The infrastructure is auto-scaling on AWS with multi-AZ redundancy — the exchange doesn't go down because a server does.
The breadth of this engagement — from investor-facing portals to regulatory compliance tooling to real-time market data infrastructure — represents the kind of work where a fragmented vendor approach would fail. One team, one codebase, one architecture. That's how you build an exchange.
Stack
ReactNext.jsTypeScriptNode.jsPostgreSQLRedisAWSDockerCloudflare
Services behind this build