Database Schema

Primary identity table for all platform users (investor, issuer, admin, staff).

KYC submissions and review tracking. One user can have multiple applications (resubmit after rejection).

Issuer business profiles. One issuer → one business (MVP).

Security tokens listed on the platform. Each linked to a business. ERC-3643 on Polygon.

Primary offering subscriptions and payment tracking.

Off-chain cache of token holdings per user. One row per (user, token) pair. Blockchain is source of truth.

Every fiat and token movement. Immutable ledger.

Buy/sell orders on the secondary market. Managed by trading-server matching engine.

Matched trades from the order book. Created when buy and sell orders match.

Granular RBAC for admin and staff users. 23 possible permissions.

Platform-wide immutable audit trail for all sensitive actions.

One business → one data room. Auto-created on business activation.

Documents inside data rooms. Whitepapers stored as structured JSON (content_type=form_data).

Access grants: who can access which data room, at what level, for which folders.

Immutable audit log for every action in a data room.

Dividend declarations by issuers. Lifecycle: draft → pending_approval → approved → distributing → distributed.

PDPL consent tracking. Records consent for terms, privacy, data_processing, marketing.

PDPL data subject requests: export, erasure, restriction, correction, portability. 30-day SLA.

PDPL breach incident tracking with 72-hour regulator notification SLA.

Audit trail for order status transitions — tracks every status change with reason and actor.

Audit trail for trade settlement status transitions — pending to settled/failed.

Audit trail for wallet transaction status transitions — deposit/withdrawal confirmations.

Individual dividend payments to token holders, linked to dividend declarations.

Fee tier definitions (Bronze, Silver, Gold) with discount percentages per fee type.

Assigns users to fee tiers with optional custom discount overrides.

Per-issuer fee configuration with custom rates for trading, listing, custody, and dividend fees.

One-time listing fee invoices for token issuance (due diligence, deploy, legal review).

Quarterly custody fee invoices based on AUM for each token.

Premium service subscriptions (API access, priority support) with billing cycles.

Gas cost tracking for all on-chain operations (deploy, mint, transfer, freeze).

Indexed blockchain events from ERC-3643 contracts (TokenDeployed, Transfer, etc.).

Key-value store for blockchain indexer state (last synced block, etc.).

JWT refresh token storage for session management with device tracking.

Key-value store for platform-wide configuration (fee rates, limits, feature flags).

In-app notification messages sent to users (system alerts, order fills, dividends).

Per-user per-token trading limits for position sizing and volume caps.

Over-the-counter block trade requests requiring admin approval before settlement.

Status change audit trail for OTC orders.

Unique referral codes generated by users with commission rate and referral limits.

Tracks each referred user signup with commission tracking and volume data.

Automated reconciliation execution records comparing trade and settlement systems.

Detected accounting discrepancies (breaks) with severity, investigation, and resolution tracking.

Corporate action records (stock splits, reverse splits, bonus issues) with multi-step approval workflow.

Per-holder entitlement records for corporate actions showing old/new quantities.

Multi-signature approval requests for sensitive operations (corporate actions, large transfers).

Individual approval/rejection signatures on approval requests.

Multi-currency fiat balances per user (USD, AED, USDC) with locked amount tracking.

Foreign exchange rate history for multi-currency conversions.

Multi-round primary offering structure (strategic, institutional, retail) per token.

Net Asset Value history per token with calculation type and auditable timestamps.

Blackout and restricted trading periods per token for compliance enforcement.

Token vesting schedules for founders, team members, and early investors with cliff and linear release.