Product

Decision supervision for discretionary desks.

Every control fires at order entry or after the fact — the decision happens before both. DojiPad Institutional evaluates trading plans against the firm's actual mandate while the trade is still a plan, and seals an evidence chain on every decision.

The intent stage

Every control a firm runs fires at order entry or after the fact. DojiPad Institutional operates earlier — while the trade is still a plan, at the only point where evidence and influence coexist.

Mandate register

Every plan is evaluated against the firm's actual limits at planning time, before an order exists — configured with real mandate values, not demonstration ones.

Two planes, structurally separated

The firm plane carries mandate evaluations, observations, and evidence chains for risk and compliance. The trader plane carries the coaching dialogue — never summarized, scored, or flagged across.

An engine that grades itself

Each trader's failure patterns are modeled from their own history. The engine issues falsifiable predictions before a session and grades them against actual fills — the scoreboard is part of the product.

Sealed evidence chain

Append-only records of plan, evaluation, observation, and outcome — exportable, retained in the firm's own storage under the firm's retention policy, in a format built for examination.

Single tenant, zero egress

Deployed inside the firm's own Azure subscription, under the firm's keys and Entra ID. No external calls, no telemetry, no vendor endpoint — the vendor cannot see the firm's trades.

Architecture

What moves, and what never moves.

Market data and fills flow in. The dialogue circulates between trader and coach and never leaves that plane. Committed plans cross one boundary, to the officer register. Orders travel the firm’s own execution path, which runs around this system entirely. And nothing, of any kind, leaves the tenant.

FIRM TENANT · MICROSOFT AZUREMARKETDATATRADERAT THE DESKDOJIPAD INSTITUTIONALTRADER PLANEDIALOGUE · PRIVATEFIRM PLANEPLANS · EVALUATIONS · CHAINRISK &COMPLIANCEOMS / BROKERTHE FIRM’S OWN EXECUTIONIN ONLYDIALOGUECOMMITOBSERVATIONS · RECORDSORDERSFILLS, FOR GRADINGDOJIPAD HOLDS NO ORDER ROUTING OR BLOCKING CAPABILITY. THE EXECUTION PATH RUNS AROUND IT.×EGRESSNONE
Never leaves the trader planeFirm records, in tenantInbound data onlyNo route out of the tenant

Deployment profile

The vendor cannot see the firm’s trades. That is a property of the architecture, not a contractual promise.

  • Deployment

    Single tenant in the firm's cloud subscription — Microsoft Azure, firm region, firm keys

  • Identity

    Microsoft Entra ID — firm directory, role separation between officer and trader surfaces

  • Data egress

    None — no external calls, no telemetry, no vendor endpoint

  • Execution path

    Not in it — the system holds no order routing or blocking capability

  • Records

    Append-only evidence chains — plan, evaluation, observation, outcome

Built at ARQNXS

The behavioral engine was proven on DojiPad, the retail platform: model a trader’s specific failure patterns, evaluate plans before execution, grade every prediction against fills. The institutional system wraps that engine in the deployment architecture professional desks require — and in the design decisions their traders will accept.

DojiPad Institutional is supervision and record-keeping software, licensed to firms and deployed in their own environment. It does not provide investment advice or trade recommendations, does not route or block orders, and ARQNXS does not manage assets.

The retail platform →

Request a briefing

The system running live on a seeded demonstration firm, viewed from the officer register and the trader plane in turn. Pilots run ninety days, on one desk, in the firm’s own tenant.

DojiPad Institutional