Skip to content
Broker news. Connected. RSS feed
FXBROKERS

A clearer view of the broker industry.

Industry ProvidersProvider profile

AutoRek: reconciliation, financial controls and regulatory evidence

AutoRek controls cash and securities data through matching, exception handling, attestation and reporting. Its offering spans brokers, asset managers and payments firms, with CASS and safeguarding workflows, ARIA assistance and the Grath and Topa routes added through acquisition.

By FXBrokers.ai ResearchOperating status: ActivePublished Sources checked

Services & customers

Sections ↑

AutoRek provides financial-data controls and reconciliation software for brokers, banks, asset and wealth managers, payments firms, insurers and other financial businesses. Its capital-markets offering explicitly includes FX and CFD firms. The operating job is to bring records together, identify differences, assign exceptions and produce a controlled sign-off. For a broker, that makes the product relevant to cash, positions, settlement and client-asset oversight rather than to the trading terminal itself.[2][3]

Reference table01

Core control workflows

Core control workflows
WorkflowPublished scopeOperational record
Cash reconciliationMatches bank statements, general ledgers and subledgers across accounts and currencies, including many-to-many matching.Reconciled and unreconciled balances, identified differences and investigation records.Source 3
Securities reconciliationCovers equities, fixed income, ETFs and derivatives, with pre- and post-trade checks.Position and transaction differences across accounting records, investment records and NAV processes.Source 4
Data managementIngests, validates, transforms and enriches financial information under configurable rules.A standardized dataset with lineage and drill-down views for downstream controls.Source 5
CASS workflowsInternal and external custody-asset and client-money reconciliations, calculations and reporting.Shortfalls, surpluses, sign-offs and governance evidence within the configured CASS process.Source 6
SafeguardingReconciliation and relevant-funds calculations, with exception and breach handling.Safeguarding positions and records supporting internal or external reporting.Source 7
Regulatory reportingCollects, validates and reconciles data for reporting and downstream systems.Signed-off data, retained evidence and configured reporting exports.Source 8

The securities functions distinguish an accounting book of record, or ABOR, from an investment book of record, or IBOR. AutoRek compares the positions, cash and transaction activity used by those records and by NAV processes. A break can be routed to the responsible team for investigation. Reconciliation identifies and tracks a difference; it does not by itself explain which upstream record is correct.[4]

Reference table02

Product routes after the Grath acquisition

Product routes after the Grath acquisition
RoutePublished positioningDelivery distinction
Core AutoRekEnterprise financial-control platform with ARIA assistance.Dedicated enterprise deployments for more complex operating requirements.Source 13
GrathCloud reconciliation product added through acquisition.Multi-tenant SaaS route.Source 13
TopaEmbedded reconciliation and AI infrastructure.API-based capabilities operating inside a client’s own application environment.Source 13

Platforms & integrations

Sections ↑
Reference table03

Inputs, connections and output routes

Inputs, connections and output routes
RouteWhat the public material describesOperational scope
File and message intakeSWIFT MT/MX, Excel, XML, JSON and structured or unstructured information.Source formats can differ; the data model and mapping still determine how records are compared.Source 2
API intakeREST APIs support real-time data transfer.This establishes an API capability, not a completed connection to every upstream ledger or bank.Source 11
CalastoneThe capital-markets page identifies Calastone integration.A named connection for the fund ecosystem, distinct from generic API compatibility.Source 2
Data preparationConfigurable validation, enrichment, aggregation and disaggregation.The same source data can be shaped for reconciliation and other controls.Source 5
Reporting-system outputConfigurable exports and integration with existing regulatory-reporting systems.AutoRek can prepare downstream data without replacing the final reporting application.Source 8

A separate operating connection was announced with Linedata on 29 September 2026. In that arrangement, Linedata makes AutoRek available as a managed service within its co-sourcing offer, with trained staff operating the platform. It is a service partnership and sits alongside Linedata’s own reconciliation capabilities.[14]

Pricing & commercial structure

Sections ↑

AutoRek’s core product describes a pay-as-you-use SaaS model with maintenance included. The reviewed public material does not disclose the monetary rate, billing units, minimum commitment, onboarding charge or overage schedule. A price comparison therefore requires a scoped commercial quote; the published model is not enough to calculate a cost per transaction.[1][16]

The facts04

Commercial models that should remain separate

Commercial models that should remain separate
MeasureValueContext
Core platformEnterprise AutoRek serviceThe public acquisition material distinguishes the core enterprise product from the newer delivery routes.Source 13
GrathMulti-tenant SaaSIts delivery model should not be treated as the same licence or infrastructure arrangement as every AutoRek deployment.Source 13
TopaEmbedded API infrastructureThe public description establishes a separate product route, not a published universal API rate.Source 13

Implementation & operating workflow

Sections ↑
Process05

From source records to a signed-off result

From source records to a signed-off result
StagePlatform operationControl outcome
1. IntakeReceive source information through files, messages or APIs.Bring the relevant financial records into the control process.Source 5
2. PrepareValidate, normalize and enrich records using configured rules.Retain a traceable relationship between source and processed information.Source 5
3. MatchApply matching rules, including cascading and one-to-many logic.Separate matched activity from differences requiring investigation.Source 1
4. InvestigateAssign and escalate exceptions using materiality, priority and due dates.Give unresolved differences an owner and a workflow.Source 1
5. AttestRecord ownership and approval across account, transaction, entity or business-unit levels.Document responsibility for the reviewed position.Source 1
6. Post journalsGenerate configured journal adjustments and deliver them to ERP or general-ledger systems.Capture accounting adjustments separately from the underlying match result.Source 1
7. ReportProduce reconciliation records with timestamps, resolutions and sign-offs.Make the review process available through reporting and standard-format exports.Source 3
8. DeliverExport validated information to an existing reporting process.Preserve the downstream application’s distinct role.Source 8

Configuration is exposed through a low-code or no-code interface. The provider identifies permission groups, source ingestion, mappings, schedules, matching rules and management information as configurable elements. The core workflow also separates rule creation, approval and execution. These controls matter because a change to a matching rule can change which differences are automatically cleared.[11][1]

Reference table06

Hosting and operating options

Hosting and operating options
OptionPublished arrangementScope to preserve
AutoRek SaaSHosted on Microsoft Azure, with residency in Azure-supported geographic regions.The location is a deployment choice; a public list does not identify a particular client’s contracted region.Source 11
Preferred private cloudThe product FAQ names AWS and Google Cloud as options.The agreed deployment determines the infrastructure and operating responsibilities.Source 11
Grath and TopaMulti-tenant SaaS and embedded API routes respectively.The acquisition announcement does not establish that all three products have one consolidated configuration or support contract.Source 13

Support & service operations

Sections ↑

For the SaaS service, AutoRek advertises round-the-clock managed infrastructure covering maintenance, upgrades and support. This describes the managed environment; no numerical case-response or resolution SLA is published in the reviewed pages. ARIA adds product guidance and configuration assistance, but it is a software capability rather than a published replacement for an escalation team.[11][10]

Published enquiry and assurance routes

Product and implementation enquiriesWebsite
https://autorek.com/about/contact-us/Source 16

Scope Business contact form and office information.

Security assurance documentsWebsite
https://autorek.secureframetrust.com/Source 12

Scope Trust Centre with requests for audit and certification documents.

The company lists offices in Glasgow, Edinburgh, London, New York and Miami. Those locations establish an operational presence, but do not define a universal time-zone schedule for every customer-support contract. The published enquiry form is the verified general contact route used here.[16]

Regulatory scope, controls & records

Sections ↑

AutoRek’s regulatory modules provide calculations, monitoring, evidence and workflow. A CASS or safeguarding product description does not establish that the vendor holds a firm’s client money, acts as its safeguarding bank or has certified the firm’s compliance. The firm’s own regulated activities and control responsibilities remain distinct from the supplied software.[6][7]

Reference table07

CASS and regulatory-governance functions

CASS and regulatory-governance functions
AreaPublished functionOperating significance
Client moneyIndividual-client-balance or net-negative-add-back calculation methods, plus internal and external reconciliations.The configured method determines the calculation and its evidence.Source 6
Custody assets and reportingCASS 6 controls and monthly CMAR production are included in the product description.Reconciliation and reporting remain distinct parts of the workflow.Source 6
Rule applicabilityRegToolkit ingests FCA rule content through a monthly API/JSON process and records entity applicability and interpretation.The rule library is linked to an entity-level control framework.Source 9
Rule-risk-control mappingControls can have owners, review dates and attestations, with breach and remediation records.A rule can be followed through to a control, accountable owner and recorded action.Source 9
Resolution packsRegToolkit supports CASS resolution-pack documentation and retrieval testing.The product records evidence and document availability rather than replacing the firm’s own responsibility.Source 9
Reference table08

Security and evidence with a stated source

Security and evidence with a stated source
AreaPublished detailScope
Assurance documentsThe Trust Centre lists SOC 1 Type 2, SOC 2 Type 2 and ISO 27001:2022 documents for request.The underlying reports were not publicly retrieved; their audit periods and exact service boundaries are not asserted here.Source 12
Availability and environment controlsThe Trust Centre describes distinct development, staging and production environments and at least annual backup-restoration testing.These are published controls, not a numerical uptime or recovery-time commitment.Source 12
Access and data handlingEncrypted transmission, unique personnel access IDs and a retention/disposal policy are listed.The public page does not disclose a universal customer-data retention term.Source 12
Reconciliation recordsCash-reconciliation reports include timestamps, exception resolutions and sign-offs.Standard-format exports supply evidence of what was investigated and approved.Source 3

The reporting offering supports an evidence repository, electronic sign-off and retained information, and can supply data to existing regulatory-reporting systems. This separates the reconciliation record from the ultimate regulatory return. Its product page names regimes including MiFID II, EMIR and SFTR as reporting contexts, but does not establish blanket coverage of every reportable transaction or an unconditional direct-filing service.[8]

Company & ownership

Sections ↑
The facts09

Corporate identity and portfolio changes

Corporate identity and portfolio changes
MeasureValueContext
Legal operatorAPI Software Limited, trading as AutoRekA Scottish limited company, registration SC154934.Source 15
Registered office4th Floor, The Garment Factory, 10 Montrose Street, Glasgow G1 1RESource 15
Established1994The current corporate acquisition announcement gives the founding year.Source 13
Grath acquisitionAnnounced as completed in the company’s 2026 news coverageThe acquired business adds the Grath and Topa product routes described above.Source 13
Operator
API Software Limited, trading as AutoRek
Service scope
Financial data controls, cash and securities reconciliation, exception management, attestation and regulatory reporting for financial institutions. The product portfolio also includes ARIA assistance, Grath SaaS and Topa embedded infrastructure.
Customer types
Brokers; FX and CFD firms; Asset managers; Wealth managers; Banks; Payment institutions; E-money firms; Insurers; Pension funds; Crypto businesses
Delivery
SaaS; Hosted; API; Managed service
Pricing publication
Not disclosed
Headquarters
Glasgow, United Kingdom
Platforms
AutoRek; ARIA; RegToolkit; Grath; Topa
Integrations
REST API; SWIFT MT and MX messages; Calastone; Linedata co-sourcing
Pricing scope
The core platform describes a pay-as-you-use SaaS model without a monetary rate, billing-unit schedule or published minimum.
Implementation
Data sources, rules, permission groups, schedules and exception workflows are configured for the operating process. AutoRek publishes Azure SaaS and private-cloud routes; Grath and Topa have distinct delivery models.
Support
The SaaS offering includes 24/7 managed infrastructure for maintenance, upgrades and support. Product contact is available through the official business form; no universal case-response SLA is published.
Permissions and regulatory scope
AutoRek supplies controls, calculations, evidence and reporting workflows. Its CASS and safeguarding modules do not themselves hold client money or establish that a customer satisfies its regulatory obligations.

Provider metadata checked 21 Oct 2026Source 1Source 2Source 5Source 6Source 7Source 11Source 10Source 13Source 14Source 15Source 16

Additional Information

Sections ↑

ARIA is described as assistance for users and managers: it can guide configuration, suggest matching rules, identify anomalous feeds and help explain exceptions. The provider also describes learning from user actions. Those are vendor capability claims; no independent match-rate or accuracy result was measured for this profile. The documented rule-approval and attestation workflow is the more concrete evidence of how operational responsibility is recorded.[10][1]

Public assurance wording is not fully consistent. The securities-reconciliation and data-management pages retain references to SOC Type 1, while the current Trust Centre lists SOC 1 Type 2 and SOC 2 Type 2 documents available on request. This profile preserves that difference and does not substitute the public labels for the underlying reports or their periods.[4][5][12]

AutoRek’s cash records give a practical distinction between a financial break and its resolution: the balance view shows what remains unreconciled, while the audit report records the action, timing and sign-off. Data-management views can aggregate or drill down into the same underlying activity. Those records make an investigation traceable without implying that a high automatic matching percentage proves every source record was correct.[3][5]

Follow the evidence

Sources & further reading

  1. AutoRek financial-control platform AutoRek · Accessed 21 Oct 2026
  2. Cash reconciliations AutoRek · Accessed 21 Oct 2026
  3. Securities reconciliations AutoRek · Accessed 21 Oct 2026
  4. Data management AutoRek · Accessed 21 Oct 2026
  5. CASS reconciliation AutoRek · Accessed 21 Oct 2026
  6. Safeguarding and Banking-as-a-Service AutoRek · Accessed 21 Oct 2026
  7. Regulatory reporting for asset management AutoRek · Accessed 21 Oct 2026
  8. AutoRek RegToolkit AutoRek · Accessed 21 Oct 2026
  9. AutoRek ARIA AutoRek · Accessed 21 Oct 2026
  10. AutoRek for payments and e-money firms AutoRek · Accessed 21 Oct 2026
  11. AutoRek Trust Centre AutoRek · Accessed 21 Oct 2026
  12. AutoRek acquires Grath AutoRek · Accessed 21 Oct 2026
  13. Linedata and AutoRek announce a strategic partnership Linedata · 29 Sep 2026 · Accessed 21 Oct 2026
  14. AutoRek website terms and conditions AutoRek · Accessed 21 Oct 2026
  15. Contact AutoRek AutoRek · Accessed 21 Oct 2026

This profile reports dated public information, including provider-published services and terms. It does not independently test or guarantee service delivery, integrations or performance. Inclusion is not an endorsement. Permissions and protections apply only to the named legal entity, service and client category; check the current official records and your contract.

Report an error or submit an update