What's included

The company is the account

Not a personal login with a company name attached.

A trading desk is not one person. The director who signs the contract is rarely the person chasing the export permit, and neither of them should be the only route into the account. Nelum is built around the company: you register the business, then invite the people who act for it.

Roles carry real authority. An owner or director administers the company and its team. A trader works the commercial side — posting demand, making offers, signing. Logistics handles the order's documents without needing sight of the commercial terms. A viewer sees the order without being able to move it.

Authority to confirm settlement is deliberately separate from role, because seniority and money are different questions. A trusted trader may hold it and a director may not. It is granted explicitly, one person at a time, and every grant or revocation is recorded.

The system will not let you strand yourself. Every company must keep at least one active owner and at least one active member able to confirm settlement — enforced as a database constraint, so a badly-timed role change or a departure cannot lock a company out of its own orders.

Owner

Full administration, ownership transfer

Director

Team and company administration, signing

Trader

Demand, offers, contracts

Logistics

Shipment and order documents

Viewer

Read-only

Settlement confirmation

Separate privilege, granted per person

Business verification

The gate everything else sits behind.

Incorporation and registration documents, tax registration, proof of registered address, ownership and control structure including beneficial owners, bank confirmation, and any export or trading licence. Submitted once, checked, and then in force for every counterparty you meet on the platform.

Documents go into storage with no read path back through the product. Once filed, they cannot be retrieved — not by a counterparty, not by you. What is disclosed to the other side of an order is your verification status, your country, and how long you have been registered. Not your incorporation certificate.

Verification is live state rather than a permanent badge. If a verified company later changes its registered details, the change is flagged and settlement pauses pending review while the rest of the process continues — proportionate, and visible to the counterparty rather than silent.

Representative credentials

For the part of this trade that still happens in a room.

Doré is bought and sold face to face more often than the technology in this sector likes to admit. People fly to meet counterparties, inspect parcels, and sit across a table from someone holding a business card that means nothing.

Every verified representative carries a credential showing their photograph, name, role, company, the company's verification status, and how long both they and the company have been registered. It has a QR code. Scanning it opens a public verification page — no account, no app — showing the same information from our records rather than from the card in their hand.

The photograph is the point. A credential without a face cannot do the job it exists for, which is letting you confirm that the person in front of you is the person the record describes.

Marketplace

Demand posted by verified buyers, visible to verified sellers.

A Letter of Intent carries product type, quantity, whether it is one-off or recurring and over how many periods, minimum purity, origin preference, delivery location, shipping method, and pricing — either an absolute USD range or a discount to a benchmark, which is how most doré actually prices.

It also carries an expiry date, and it leaves the market on that date automatically. Stale demand is one of the reasons this market wastes so much of everyone's time; an LOI that expired in March should not still be attracting offers in September.

Buyers appear under a pseudonymous reference with country and verification status. Their legal name is disclosed when an order starts, not while they are still shopping — because knowing who is buying what volume is commercially valuable to a competitor.

If you hold a signed LOI as a PDF, attach it. The platform reads the terms out of the document and fills the form for you to check, rather than making you retype what you already have.

The order

One place per trade — with no imposed sequence.

Accepting an offer opens an order between the two companies. The terms both sides agreed are frozen at that moment and presented for you to carry into your own contract: Nelum drafts no agreement and captures no signature, because the platform is not a party to your trade and a document it produced with signature blocks would be read as one it authored.

There is no stage gate after that. Every company runs its own fulfilment and every jurisdiction demands its own paper, so the platform stopped pretending to know the sequence and put its effort into the record instead. What you get is a working space both parties share: documents, requests, messages and a delivery schedule.

A recurring contract materialises its whole schedule up front — a twelve-month commitment is twelve visible deliveries from day one, and a period nobody moved on shows as overdue rather than silently not happening.

The order completes when both parties confirm it is fulfilled. Neither a counter nor a calendar closes a trade on your behalf.

The document space

Upload, label, request — and nothing disappears quietly.

Either party uploads a file and labels it. Nelum does not read documents, so the label the uploader picks is what both sides see, and the suggested list is a convenience rather than a constraint — you can name anything the corridor actually requires.

You can request a document from the counterparty with the reason attached, so a missing paper is a visible conversation rather than a silent failure. Uploading against a request closes it, and every request and answer posts to the order's message thread automatically.

Files version rather than overwrite: upload under an existing label and it becomes the next version, with both still listed. Removing a document leaves the entry in place, struck through and stamped with the date. Message edits keep their previous wording readable by both parties.

Labels

Free text — you name the document

Versions

v1 and v2 both stay openable

Removals

Visible, never erased

Requests

With the reason, and answerable in place

Message edits

Previous text kept, marked as edited

Settlement verification

Counterparties hold their own funds. We verify.

The buyer funds a wallet they control and registers it against the order. Nelum reads the chain to verify the deposit has arrived and matches what the contract requires, giving the seller an answer to the only question that governs whether they ship: is the money actually there.

At closing, whoever controls the funded wallet releases the payment themselves, and the transfer is verified on-chain against the address recorded on the order. Nelum takes no cut of it: the platform is paid by subscription and receives nothing out of your settlement.

There is no Nelum wallet in the middle of your trade, no private key we hold, and no balance we could freeze or lose. That is a deliberate design choice with a consequence worth stating plainly: a transfer to a wrong address is not something we can reverse.

The network and mandates

Authority is corporate. Trust is personal. Both are modelled.

Connections between companies make counterparties findable, and the board can be filtered to companies you already know. A second-degree link — somebody your counterparty has traded with — is the difference between a cold approach and a warm introduction, and this trade runs on that difference.

Mandates put agency in writing. A company grants an agent one of three levels: introduce only, negotiate, or negotiate and sign. The platform refuses what the level does not cover, so an introducer cannot commit a principal to a price, and the principal does not have to police it. Either side can end a mandate at any time; ending it stops future authority without unwinding orders already agreed under it.

Anything an agent posts carries the principal's name and states that an agent posted it. Counterparties are never left guessing which company they would be contracting with.

Introduce only

Make introductions. Cannot post or offer

Negotiate

Post intent and offer in their name. Cannot accept

Negotiate and sign

Including accepting into a binding order

Territory and expiry

Set by the principal, not the agent

Revocation

Immediate, by either side

Engaged service providers

A laboratory sees the job. Never the deal.

Laboratories, vaults, carriers, clearing agents and insurers register as companies that provide services rather than trade on their own account, and can be engaged on an order by the parties to it.

Some engagements are mutual by nature — an assay produces evidence both sides rely on and one of them pays against, so the counterparty must accept the choice of provider rather than have it imposed. Others are one party's own contractor: the other side sees who it is without approving it.

The provider accepts or declines the job. Without that, a provider is conscripted — no capacity check, no conflict-of-interest check, no ability to say no. And whatever they accept, they see the physical facts of the work and never the price, the fee, the settlement wallet, or the other party's legal name.

Audit trail

Built for the review that happens two years later.

Document uploads and removals, requests and their answers, role changes, settlement confirmations, fulfilment confirmations and verification decisions are recorded with their actor and timestamp. The order’s activity view is derived from those records rather than kept as a separate log, so it cannot fall out of step with what actually happened. Company governance events — a role change, a profile edit, an ownership transfer — record which fields changed rather than their values, so the trail proves what happened without becoming a second copy of your data.

This is the part nobody values until they need it. When a compliance review, a tax authority, or a counterparty's auditor asks how a particular parcel reached you and on what basis you accepted it, the answer is an assembled record rather than a search through the mailbox of someone who left last year.