A complete white-label exchange with spot trading, an order book, custody wallets, KYC and a backoffice, branded as yours and owned 100% by you.
The product
The screens your customers use, in the order they meet them, shown with demo data. Your logo, colours and domain go on top.
Web app, plus iOS and Android apps
Users pick a document and verify in about three minutes, in the app or on the web. Deposits and trading open as soon as KYC passes.
The total balance and allocation, and every asset with its price and change, beside the 24-hour markets.
Candlestick charts, the live order book and an order ticket for limit, market and stop orders, on one screen.
The app trades the same order book: chart, buy or sell, limit or market, with the fee shown before the order goes in.
Each fill lands on the ledger with its ID, price, fee and time, ready for the user's history and for your reports.
Delivery
~30 days
Time to launch, on a 12-month scale
The exchange exists in production form. We apply your brand, configure markets and pairs, connect liquidity, deploy, and hand over the source code.
2–3 months
Time to launch, on a 12-month scale
A unique trading flow, such as derivatives, P2P or a launchpad, built as a custom flow around the same proven core.
Licensing
Running an exchange means operating a trading platform and holding customers' crypto, and both need a regulator's approval in each of these markets. Which licence you need, and who grants it, depends on where you operate.
Your home regulator authorises each service, such as operating a trading platform and custody, and the authorisation is valid across the EU. MiCA asks for a registered office and management in the EU with an EU-resident director, capital of at least its highest minimum or a quarter of fixed overheads, whichever is more, segregated client assets and clear rules for admitting tokens. The transitional period for existing firms ended on 1 July 2026 at the latest; the Travel Rule has covered transfers of any amount since 30 December 2024.
Today an exchange doing business in the UK must register with the FCA under the Money Laundering Regulations, as a cryptoasset exchange provider and, if it holds customers' crypto, a custodian wallet provider. From 25 October 2027, operating a cryptoasset trading platform and safeguarding cryptoassets need FCA authorisation, with rules on capital, client assets and market abuse. The application window closes on 28 February 2027, registrations do not convert automatically, and the FCA now steers new firms to authorisation.
In Dubai outside DIFC, VARA licenses exchanges in two stages: an approval to incorporate, which does not allow trading, then the licence. It asks for paid-up capital, insurance, client reserves held one to one, a compliance officer living in the UAE or holding its passport, and custody in a separately licensed company. The DFSA in DIFC and the FSRA in ADGM authorise exchanges as multilateral trading facilities; elsewhere onshore, the Capital Market Authority (formerly the SCA) issued a new virtual assets framework on 13 April 2026, and stablecoin trading outside the financial free zones also needs a Central Bank (CBUAE) licence or registration.
Whoever operates the order book needs the licence for it, so your own exchange means your own licence. Custody can sit with a licensed partner: MiCA lets an authorised provider use another authorised custodian, and VARA asks less capital of an exchange using a VARA-licensed one. Some companies first offer buying and selling through a licensed provider serving customers under its own authorisation, then add their own order book once licensed.
The exchange ships with the controls regulators look for: KYC and sanctions screening, wallet screening, transaction monitoring with suspicious activity reports, Travel Rule messaging, MiCA, DAC8 and CRS reports, proof of reserves reporting, market surveillance and a full audit trail. We configure it for your licence and help you choose licensed partners. We are not lawyers: your counsel decides which licence you need.
Applying for the licence yourself? Paynoramic Consulting prepares its technical side with you
General information, not legal advice. Checked against the sources above on 6 October 2026.
Launch
The software takes about 30 days on the ready path. The licence and the partners alongside it usually set the date customers can trade, and they often take longer.
Assembled from
Each one running in production before it reaches your platform. See the whole library
How it works
One call. Tell us the product, the market and the launch date. We map it to the modules that already exist.
We pick the modules, apply your brand and set up your infrastructure. Every piece is already proven in production.
Your platform goes live on your domain, with your data, under your control.
Source code, documentation and the keys. The platform is yours, with no licence and no revenue share.
Questions
A one-off fee, scoped and priced per module, in writing, with no licence fee, no revenue share and no lock-in. Plan separately for your licence and the capital your regulator requires you to hold, hosting, and liquidity for your markets. We help you get the contracts with the custody, KYC and Travel Rule providers you choose. Custom flows such as derivatives are scoped the same way.
Yes, if you operate in or from Dubai outside DIFC, wherever your customers are. You apply through Dubai Economy and Tourism or a Dubai free zone: first an approval to incorporate, which does not allow trading, then the Exchange Services licence. Custody needs its own licensed company, and the exchange may not trade for its own account. In DIFC the DFSA licenses instead, in ADGM the FSRA.
You do, as the licensed exchange, or a custodian you appoint; not Paynoramic. Keys are held through Fireblocks, BitGo, Copper, Cobo or Ledger Enterprise, or in your own HSMs or MPC cluster, and withdrawals pass your approvals before signing. MiCA requires client crypto kept apart from yours, on-chain too, and client money at a bank by the end of the next business day; VARA requires one-to-one reserves.
The software is ready in about 30 days on the ready path. Real trading starts once you hold your licence and your custodian, bank and liquidity providers have onboarded you, all in parallel. In the EU, MiCA gives regulators fixed deadlines once an application is complete; the FCA's new UK regime starts on 25 October 2027. You can test the exchange meanwhile.
Transfers to and from other providers carry sender and recipient data through Notabene, Sygna, 21 Analytics or TRP, and incoming data is checked before funds are credited. Deposits and withdrawals are also screened with Chainalysis, Elliptic or TRM Labs. In the EU the rule has covered transfers of any amount since 30 December 2024, self-hosted wallets included; the UK has had its own since 1 September 2023; VARA reviews yours at licensing.
Custody runs on Fireblocks, BitGo, Copper, Cobo or Ledger Enterprise, with nodes from Infura, Alchemy or QuickNode. Quieter pairs can mirror liquidity from Binance, Kraken, OKX, Coinbase Prime, B2C2 or Wintermute while market makers connect over FIX and WebSocket. Identity checks run on Sumsub, Onfido, Veriff and others; surveillance on Solidus Labs or Eventus. Your own keys, nodes and providers connect too.
All of it. On launch you receive the full source code of the matching engine, custody and wallets, ledger, web and mobile apps and backoffice, with infrastructure configuration and documentation. It runs on your infrastructure, under your licence. There is no licence fee, no revenue share and no lock-in: the exchange is a deliverable, not a subscription, and your developers can change any part.
Yes. A new pair is configuration, another EVM chain mostly so; other chains need a new connector. Each token must first pass your listing rules: under MiCA, a suitability assessment and, where required, a white paper; in DIFC, your own assessment since 12 January 2026, except fiat stablecoins; in ADGM, a notice to the FSRA at least five business days before use. Derivatives, P2P or a launchpad come as custom flows, and may need their own approval, as VARA requires for margin trading.
Guides
What the EU's Markets in Crypto-Assets Regulation asks of an exchange: authorisation, capital, governance, client assets, the trading platform rules, and the laws that sit beside it.
Paynoramic's Head of IT4 min read
What Dubai's virtual assets regulator asks of a crypto exchange: the two-stage licence, the rulebooks, capital and fees as VARA publishes them, local staff and the Travel Rule.
Paynoramic's Head of IT7 min read
Who licenses crypto in the UAE: VARA in Dubai, the DFSA in DIFC, the FSRA in ADGM, the Capital Market Authority elsewhere, and the Central Bank when tokens are used to pay.
Paynoramic's Head of IT6 min read
More platforms
Start your project
One call is enough to map your product to the modules that already exist.
