Surveillance · Prediction Markets · CFTC-Ready

Market surveillance that speaks binary.

Legacy surveillance treats every price gap as manipulation. In a $0.00–$1.00 contract, a gap is usually just news arriving. DataTap natively understands binary math, fuses real-world event feeds into the order book, and maps hidden syndicates with graph entity resolution — so your compliance team chases insiders, not false positives.

integrity feed · live gateway p99 0.4ms
12:56:46 GODMODE

94.7% settled win-rate outlier · ACCT-88214

12:56:33 NEWS

Catalyst ingested · Sportradar injury wire · 214ms

12:56:20 PARITY

YES+NO implied $1.03 rejected at gateway · SENATE-GA

12:56:07 OTR

Quote-stuffing throttle · MM-ALGO-7 · 41:1 msg/trade

12:55:54 SUPPRESSED

Info-shock reprice absorbed · FED-CUT-SEPT · no action

12:55:41 MNPI

Pre-news volume cluster · 3 linked accounts · CHIEFS-WIN-SB

2,412,384 messages / second · live ingest
<1mspre-trade gateway latency
T+1automated post-trade forensics (CFTC 38.156)
$0–$1native probability-bounded logic
Built for CFTC-Regulated DCMs & SEFs Decentralized Prediction Markets Sportsbooks Institutional Market Makers
The differentiator

Information shock or front-running? Sequence is everything.

DataTap's Event-Aware Context Engine ingests news, social, and sports-data firehoses directly beside the order book. The same price move is innocent or criminal depending on when it happened relative to the world.

Alert suppressed

Efficient market

News breaks, then the book reprices. An equity-era engine would page your team. DataTap stays quiet.

News breaks
on the wire
1:00:00 PM
Volume spike,
price gaps to $0.94
1:00:02 PM
Verdict: information shock. The market absorbed public news in 2 seconds — that's a healthy binary market doing its job.
MNPI alert · P1

Suspicious front-running

The book repriced before the world knew. Someone traded on information that wasn't public yet.

Volume spike,
price gaps to $0.91
12:55:41 PM
News breaks
on the wire
1:00:00 PM
Verdict: potential misappropriation of MNPI under CFTC 180.1. Case opened, accounts linked, Order Book DVR queued at 12:55:41.
$Yes + $No = $1.00

Every rule in DataTap is derived from binary settlement microstructure — parity constraints across mutually exclusive outcomes, probability-bounded spoofing at $0.01/$0.99, and fat-finger rejection outside logical bounds. Retrofitted equities engines simply don't have this arithmetic.

Platform

Five modules. One integrity engine.

Deploy the base platform in days via API, then enable modules as your regulatory posture demands.

MOD·01

Pre-Trade Risk & Kill Switches

Sub-millisecond gateway guardrails: dynamic restricted lists auto-built from league rosters and campaign staffs, binary bounding, parity checks, and quote-depletion protection that fires Cancel-on-Disconnect before delayed news wires arb your market makers.

<1ms gateRestricted listsOTR throttle
MOD·02

Contextual KYC & Syndicate Graph

ID-scan KYC can't catch an insider. DataTap tags accounts with employment OSINT risk profiles — Athlete, Political Operative, Journalist — and resolves hidden entities across device hashes, IP subnets, and shared funding in a native graph database.

Neo4jEmployment OSINTSmurfing
MOD·03

Event-Aware Context Engine

Direct firehose ingestion from X, AP, Reuters, and sports-data oracles, correlated tick-by-tick against the book. Suppresses news-shock noise, escalates pre-news repricing, and detects coordinated rumor-driven pump-and-reversal patterns.

Catalyst APIMNPI detectionNarrative reversal
MOD·04

Post-Trade Forensics (T+1)

Abuse alerts tuned for binary microstructure — probability-bounded spoofing, layering at the bounds — plus the "God Mode" scan: ex-post settlement profitability that flags statistically impossible win rates on obscure long-shot events.

CFTC 38.156God Mode scanSAR export
MOD·05

On-Chain & Wallet Screening

Wallet clustering on L2 USDC rails with Chainalysis/TRM screening, decentralized-oracle bribery surveillance for UMA-style resolution, and Sybil detection across hundred-wallet wash-trading farms.

OFAC screeningOracle integritySybil detection
MOD·06

Regulatory Reporting

One-click CFTC Large Trader Reports and FinCEN SARs mapped to required SFTP formats, backed by WORM-compliant immutable audit trails and read-only regulator seats.

FinCEN SARWORM auditRegulator RBAC
Entity resolution

Twenty accounts. One bank. One insider.

The Syndicate Graph links what tabular KYC keeps separate. Click any node — a smurfing ring routing one funding source through retail accounts to dodge position limits under Core Principle 5.

CASE-2917 · syndicate cluster · live 14 nodes · 19 edges
Funding source

Bank ····4417

Entity type
ACH origin
Linked accounts
8
First seen
2026-07-02
Net deposits (30d)
$412,900
SMURFINGPOSITION-LIMIT EVASIONSTRUCTURED DEPOSITS

Why it matters: eight "unrelated" retail accounts share this single funding source and take the same side of the same contract within minutes of each other. Aggregated, they exceed the position limit by 6.4×.

Investigation

The Order Book DVR. Scrub the market like game tape.

Replay any market tick-by-tick: the L2 book, the execution tape, and the synchronized world-event feed side by side. When the regulator calls, you show them the moment — not a spreadsheet.

Tick-level truthBillions of book events in ClickHouse, queryable in sub-seconds — scrub backward through any market's life.
Context in-frameNews and social catalysts render on the same clock as the tape. No alt-tabbing between systems.
Case-ready exportOne click packages the replay window into a WORM-sealed evidence bundle for the CFTC.
Under the hood

Purpose-built stores for every shape of evidence.

High-frequency ticks, graph relationships, and SaaS state each live in the engine designed for them — stitched together by a fault-tolerant real-time core.

Real-time UI
Phoenix LiveView

Server-pushed dashboards over WebSockets. Millions of BEAM processes isolate every data stream.

Ingestion
Redpanda

Kafka-compatible C++ broker moving FIX drop-copies and on-chain RPC feeds in the millions of messages per second.

Risk engine
Rust NIFs

Binary bounding math executed natively in-VM — zero network hops on the pre-trade path.

Tick store
ClickHouse

Billions of order-book events with sub-second analytical queries powering the DVR.

Graph store
Neo4j

Wallets, devices, IPs, and bank accounts as first-class nodes for syndicate resolution.

System of record
PostgreSQL

ACID state for tenants, RBAC, case management, and immutable audit logs.

Deployment & pricing

Integrated in days, priced by throughput.

Modular pricing on enabled features and message throughput. Both tiers ship SSO/SAML, API-first integration, and automated regulatory reporting.

Multi-Tenant Cloud

Shared infrastructure with strict row-level data isolation. For decentralized prediction markets, sportsbooks, and emerging liquidity providers.

  • Base platform: real-time dashboards, case management, T+1 forensics
  • REST configuration APIs + WebSocket drop-copy streaming
  • Okta / Azure AD / SAML 2.0 SSO
  • Priced by MPS band — scale as you grow
Start integration
Pre-Trade Risk Engine

Sub-millisecond guardrails, dynamic restricted lists, and real-time kill switches at the gateway.

Contextual KYC & Graph

Neo4j syndicate mapping with employment-OSINT risk profiling and smurfing detection.

Web3 & On-Chain Analytics

Wallet clustering, OFAC screening, and decentralized-oracle manipulation surveillance.

Regulatory anchor

Mapped to the rulebook, not bolted on.

Every detection model traces to a specific obligation under the Commodity Exchange Act — so your annual DCM system safeguards review writes itself.

CFTC 38.156Automated trade surveillance, T+1 investigation CFTC 38.157Real-time market monitoring & disorderly trading CFTC 40.11Event-contract gaming restrictions, three-step inquiry CFTC 180.1Anti-manipulation & MNPI misappropriation Core Principle 5Cross-account position-limit aggregation FinCENSAR generation in required SFTP formats WORMWrite-once recordkeeping for audit trails
Get started

Your market runs on information. So should your surveillance.

Connect a drop-copy feed and see your own order flow in the DVR — most integrations complete in under a week.