MMTech Solutions

The CRM is branded M Central and the social trading product M Copy; both names appear as logo files and the FAQs refer to "M-Central" throughout. The prop firm CRM page is the one an operator should read.

• M Central (prop firm CRM) - client onboarding, admin dashboard, wallets, "Deposit & Withdrawals", "E-Wallets & Transactions", P2P transfers, bonuses and cashback "( on Deposit & Seasoned)", promocodes, contests with a leaderboard, and an integrated helpdesk "with a ticketing system, and live chat options".
• Challenge Constructor - "Easily create and customize performance challenges to boost trader engagement", with a History view to "Track the challenge progress in real time with detailed history".
• IB Module - "Create unlimited IB programs with progressive levels". Rewards can be "fixed commissions, a percentage based on the traded volume, or even based on the profit and loss (PnL) of their clients".
• M Copy - copy trading and MAM. Investors "subscribe to one or multiple master accounts", and MAM allows "different allocation methods, risk ratios, and fee structures to each subscribed account". It adds promo codes for master accounts, customisable minimum deposits, multiple copy templates and a social feed.

On the risk engine specifically, the evidence is thin and self-contradicting. The prop firm CRM page lists "Real-time risk Control on targets" and an admin tile "Real Time Risk Control - Monitor and mitigate risks with real-time control tools", while the homepage Solutions list carries a card reading "Risk Management (soon)". Nowhere does the site name a drawdown type, say whether drawdown is tracked on equity or balance, describe a consistency rule, a news filter, prohibited-strategy detection, or any automatic action on breach. An operator evaluating a funded-trader programme should treat the rule engine as unspecified until demonstrated.

On the back-office side, reporting is described only as "Financial reports" and "Real-time Reporting and Analytics"; no named report and no export format is published.

A strip headed "Most-known plаtforms Integrated" appears on the homepage, the broker CRM page and the social trading page. It is a logo wall with no captions and empty alt text, so the platforms have to be read off the images themselves. Five marks appear: MetaTrader, Match-Trader, cTrader, TradeLocker and B2TRADER. The B2TRADER logo is the one most easily missed - it is served as Logo_Image-1.png with no alt text, and the brand is only visible inside the image.

Two caveats matter for a platform decision. The MetaTrader mark is the unversioned MetaTrader logo, so the site never states whether MT4, MT5 or both are supported. And a logo strip is the entire evidence - there is no integration page, no per-platform documentation and no statement of what the connection does, so none of the five can be confirmed as a live, supported connection from the site alone.

What the end trader opens is not clearly separated from what the firm administers. The white label page describes a "Next-Gen Trading Platform" offering "professional charting tools, real-time market depth, multiple order types, adaptive UI, fully responsive design", with "Cross-Device Synchronization" so traders "can sync settings across web, mobile, and desktop" and "The app is available via app stores or directly from broker websites". That platform is not named, and it is not stated whether it is one of the five above or something separate.

On mobile, the FAQ states "M-Central offers a mobile app that allows brokers and Introducing Brokers to access CRM features". An Android app, MMTech Central, is published on Google Play by "MMTech-Solutions Ltd". The privacy policy refers to "our mobile applications for iPhone or Android", but no iOS app could be found on the App Store by bundle id or by name (checked 2026-09-19).

Asset classes are given only as "FX & Crypto Brokers" and, on the white label page, "Global Market Multi-Asset LP technology solutions". No interface language is listed anywhere.

MMTech Solutions has no integrations page, no partner page and no integration documentation. Everything below is drawn from logo strips and prose on the marketing pages.

Named third parties. Only trading platforms are named, and only as logos: MetaTrader, Match-Trader, cTrader, TradeLocker and B2TRADER. Each is recorded here as a partner connection because the strip is headed "Integrated"; the site gives no detail on what each integration covers, which version, or whether it is included in a base package.

Named categories, with no names behind them. This is the notable gap for a buyer. The homepage claims "13 PSPs Integrated" and "1000+ APMs", and the white label page says the back office is "Integrated with leading global KYC providers". Not one payment service provider, alternative payment method or KYC provider is named anywhere on the site. A count is not a name, and an operator cannot check whether the processors that matter in their market are among the thirteen, nor whether a particular KYC vendor is supported for their jurisdiction. The same applies to liquidity: the white label page offers "tailored liquidity options" and "Global Market Multi-Asset LP technology solutions" without naming a liquidity provider or bridge.

Build-it-yourself. The social trading FAQ states "MMTech offers flexible API integration options, enabling seamless connections with existing platforms for data and account management". No API documentation is published, so a firm planning its own integration has nothing to scope against before a call.

If integration coverage is a deciding factor, the practical step is to ask for the thirteen PSPs and the KYC providers by name, in writing, and to confirm which are live rather than available.

MMTech Solutions publishes nothing about how its software is hosted. There is no architecture page, no statement of hosting region, no named cloud provider, and no mention of self-hosting or on-premise deployment anywhere on the site. Whether a firm gets a dedicated instance or a tenant on shared infrastructure is not stated, and neither is whether the CRM runs on the firm's own domain.

What can be established is infrastructure observed directly rather than claimed. Checked on 2026-09-19:

• my.mmtech-solutions.com returns HTTP 200 and redirects to /auth, serving a live client portal whose page title is MProp-Solutions - a third brand name that appears nowhere on the marketing site.
• That host resolves to mmtech-clients-public-936154058.us-east-1.elb.amazonaws.com.
• portal.mmtech-solutions.com resolves to k8s-crmmmtec-mmtechin-f0f62a5450-843694049.us-east-1.elb.amazonaws.com and demo.mmtech-solutions.com to k8s-mmtechse-mmtechin-92546097e4-929672894.us-east-1.elb.amazonaws.com. Connections to both failed over HTTP and HTTPS from two resolvers, so nothing is claimed about their state.

The CNAMEs place the platform on AWS load balancers in the us-east-1 region. For an operator with EU or UK data-residency obligations this is the single most important thing to raise on a call, because the vendor makes no residency commitment in writing and the infrastructure visible from outside is US-region.

The homepage "Get Started" button points at portal.mmtech-solutions.com/authentication/registration, and the white label package is the only deployment model the vendor describes in its own words.

Branding depth is asserted but never itemised. The CRM is repeatedly called "fully customizable" and the homepage offers "Flexible customization - Tailor your experienceto to fit your unique needs effortlessly!", but no page lists what a firm can actually change - no mention of logo, colours, CSS or theme control, custom domain, white-labelled mobile apps, custom email templates, or removal of vendor branding from the trader journey. The white label page comes closest, describing "Comprehensive Broker Support" where "MMTech-Solutions assists with custom instruments, markups, commissions, and leverage configurations tailored to business requirements" - that is trading configuration, not branding.

On the API surface, the only statement is from the social trading FAQ: "MMTech offers flexible API integration options, enabling seamless connections with existing platforms for data and account management". That names no protocol. REST, GraphQL, WebSocket, webhooks and a sandbox environment are all unevidenced - none is claimed, and none can be recorded. No API documentation exists that an operator can read before a call: docs.mmtech-solutions.com does not resolve, api.mmtech-solutions.com resolves and returns a plain-text "404 page not found", and no documentation link appears in the navigation or footer (checked 2026-09-19).

The company's public GitHub organisation lists mmtech-solutions.com as its website and carries ten active repositories, among them LARAVEL-RISK-SERVICE-SDK ("SDK Laravel para consumo de API Risk Managment MMTECH"), LARAVEL-TRADING-SERVICE-SDK, MMT-IAM-SERVICE-SDK, MMT-IAM-RBAC, ib-service and a TypeScript broker-ui. These indicate internal Laravel and PHP service SDKs against internal APIs, including a risk management API - they are not documented, customer-facing SDKs, and no SDK language is recorded here on that basis.

Bespoke work is available and chargeable: "for additional or customized feature may be additional charges".

MMTech Solutions publishes no prices. There is no pricing page - /pricing returns 404 and no pricing link appears in the navigation or footer (checked 2026-09-19). No figure appears for the CRM, for M Copy, or for the prop firm white label package, and no tier, plan name, setup fee, per-account fee or revenue share is named anywhere. Every number has to come from a quote, so the prop firm white label cost here is not comparable against vendors that publish one without first getting on a call.

Two things the site does say about how money works are worth having:

• Future features are included. The FAQ states: "All new fetures we release further are included for free, however for additional or customized feature may be additional charges. ( To be discussed wit your Sales manager)". So the upgrade path is covered, but bespoke development is billable at a rate that is not published.
• A demo is offered. "Book a presentation", "Try demo" and "Request a Free Demo" appear throughout, and a Calendly link books time with the CEO directly. No free trial length is stated.

One document needs to be read carefully rather than taken as a price list. MMTech Solutions publishes a downloadable guide, How to Start Your Prop Broker in 2026 with Minimum Budget, which gives market cost ranges for launching a prop firm - covering company registration, compliance, platform and CRM, marketing and team - and names MMTech-Solutions.com as a provider that offers "all-in-one packages tailored for Prop Firms". Those ranges are presented as general market figures for any firm, not as MMTech Solutions' own prices, and they must not be read as a quote from this vendor.

What is not disclosed is as important: nothing on whether the fee is per active account or flat, what the headline excludes, whether platform licences, market data, LP spread or gateway fees are passed through, or whether migration work is billed.

The headline figure is the clearest commitment on the site. The FAQ, repeated on the homepage, about, contact and white label pages, states: "It's Depend of the business model, however the setups should not take more than 5 business days after all requirements are completed." That is a ceiling, and the conditional matters - the clock starts once the firm has supplied everything, and the site never lists what those requirements are.

On migration, MMTech Solutions states: "Yes, We handle all types of data imports! Our team will prepare the migration process accordingly to your specifications and ensure a smooth transition." It names no incumbent CRM or platform it migrates firms from, and it does not say whether the migration work is inside the fee or billed on top, so data migration is recorded here as neither included nor excluded.

Training is one of the more concrete commitments: "You receive unlimited training and guidance sessions, all of which can be recorded for future reference." The social trading page adds "MMTech offers comprehensive training, resources, and unlimited sessions to ensure business clients and their teams are well-prepared to use the platform effectively", and that "MMTech Solutions provides a streamlined onboarding process, including account setup and customization of investment allocation, risk parameters, and fee structures". The same page states the firm gets "dedicated account managers", though a dedicated implementation project manager is not separately promised.

What is missing is the shape of the project. There is no published sequence of onboarding steps, no statement of what the firm must supply (entity documents, branding assets, platform credentials, LP agreements), no UAT stage described, and no documentation site to hand to an internal team. For a five-day target that depends entirely on the firm's own readiness, the absence of a requirements checklist is the thing to ask for first - a written list of prerequisites and the acceptance criteria for "requirements completed" will tell an operator far more than the five-day figure does.

Support is presented as round-the-clock. The homepage stat strip reads "24/7 Support", the FAQ states "Once you get your credentials you get access 24/7 to our experienced support team channel with fast and efficient resolutions", and the social trading page adds "MMTech provides dedicated account managers and 24/7 technical support to ensure smooth operations and address any queries in real time."

That sits against the footer of every page, which states office hours of "Everyday from 10 am to 8 pm". The site does not reconcile the two, and neither is qualified as sales versus technical support. It is worth pinning down which applies to a production incident at 03:00.

Channels are reasonably clear. Published contact points are a phone number (+971 52 980 7949), email (admin@mmtech-solutions.com on the contact page and footer, business@mmtech-solutions.com in the homepage navigation, legal@mmtech-solutions.com for privacy matters), a WhatsApp widget, a "Let's Chat" form, and a Calendly booking link. In-product, both CRM pages describe "Providing 24/7 support for your clients with a ticketing system, and live chat options" and the white label page a "Comprehensive ticket support system" - note that this is the helpdesk the firm runs for its traders, which is a product feature rather than MMTech's own support channel. No support language is listed.

On uptime there is nothing contractual. No uptime percentage, latency figure, first-response target, escalation path or SLA credit appears anywhere on the site. There is no status page and no incident history: none is linked from any page, and status.mmtech-solutions.com does not resolve (checked 2026-09-19). The only reliability number published anywhere is in the Google Play listing for the MMTech Central app, which claims "99.9% system reliability" - app-store marketing copy, not a commitment a firm could enforce, and it is recorded here as neither a guarantee nor a measurement.

No security certification is held, claimed or evidenced. There is no trust page, no security page, no subprocessor list, no published DPA and no compliance portal. SOC 2, ISO 27001 and PCI DSS appear nowhere, and nothing was found that would support recording one.

The one substantive security passage on the entire site is in the Behavior Policy, under "Data Protection Measures": "Encryption: All sensitive data is encrypted both in transit and at rest to prevent unauthorized access. Access Controls: Multi-factor authentication (MFA) and role-based access permissions are enforced to restrict unauthorized data access. Regular Audits: Periodic security audits are conducted to identify and address vulnerabilities proactively." Encryption in transit and at rest, MFA and role-based access are recorded on that quote. Two qualifications: this policy governs website and platform users rather than being a product security statement, and "Periodic security audits" names no scope, no cadence and no third party - it is not a penetration-test commitment and no test frequency is recorded.

The privacy policy states "we comply with Information Security Management Systems (ISMS) and have implemented both digital and physical security measures". This names no standard, certificate number or issuing body and is not a certification; ISO 27001 is not claimed and must not be inferred from it.

On data protection law, the policy cites "Saint Lucia's Data Protection Act (DPA) Cap 8.18, enacted in 2011" and says "For users in the European Union, we also adhere to internationally recognized privacy standards, including the EU Data Protection Law 2018". GDPR compliance is not asserted in those terms and is not recorded. Data residency is not stated anywhere - which matters given the platform's visible infrastructure sits on AWS in the US us-east-1 region.

Breach handling is the most specific commitment published: the company will report a breach to the relevant authority "within 72 (seventy-two) hours of becoming aware of the breach" and notify the data subject "within 7 (seven) days". A Data Protection Officer is referenced, reachable at legal@mmtech-solutions.com. The AML & KYC Policy adds that customer identification records are "stored in encrypted digital formats" with "access restricted to authorized personnel only" and retained a minimum of five years.

Not evidenced anywhere: SSO, audit logs, backup frequency, disaster-recovery objectives, and any bug bounty.

MMTech Solutions names no client anywhere. There is no client logo wall, no case study, no testimonial attributed to a named firm, and no reference customer. For a vendor selling multi-year infrastructure contracts, this is the largest single gap in the public record, and it means none of the figures below can be checked against an actual firm.

Every number the vendor publishes is a self-reported stat tile with no basis, methodology or date given. They are recorded here as claims, not as facts:

Several of these do not sit easily together. The "5 Years on market" tile appears above a footer giving company number 2024-00358. The about page's "12k+ Project Complete" and "4.9 Positive Review" appear alongside "40+ Satisfied Customers", with no explanation of what a project is or where a 4.9 rating was collected - no review platform is cited. The social trading page's "23+ Brokers" and the homepage's "40+ Satisfied Customers" are not reconciled.

Two datable external records exist. The MMTech Central Android app on Google Play, published by "MMTech-Solutions Ltd", shows "10+ Downloads" and "Updated on Aug 20, 2025". The company's public GitHub organisation, which lists mmtech-solutions.com as its website, was created on 2023-01-11 and has ten repositories with commits through September 2026.

The practical step for an operator is to require two referenceable live clients on a call, since nothing on the public record substitutes for one.

MMTech Solutions publishes no customer contract. There is no terms of service, no master services agreement, no order form and no customer terms page. /terms, /terms-of-service, /terms-and-conditions, /terms-of-use and /legal all return 404, and the footer links only four documents: the AML & KYC Policy, the Cookies Policy, the Behavior Management Policy and the Privacy Policy (checked 2026-09-19).

The privacy policy refers twice to documents that are not published - "it should be read alongside our Terms of Use", and "We may need to share your personal data with authorized third parties in accordance with our standard contractual terms when you have purchased a service" - but neither the Terms of Use nor the standard contractual terms are linked or reachable from anywhere on the site.

The result is that every commercial term an operator would negotiate is undisclosed: minimum term, notice period, whether the agreement auto-renews, the cancellation policy, data ownership, export formats, how long data remains accessible after termination, SLA credits, the liability cap, and governing law. None can be recorded, and none should be assumed from the AML or privacy documents - those govern the vendor's compliance obligations and website visitors, not a commercial relationship. Governing law in particular is left blank deliberately: the AML policy is written to Saint Lucia law, but a compliance policy is not a client contract and does not establish the law governing a customer agreement.

Two contract-adjacent facts are on the record. Service is refused in named jurisdictions - the FAQ states "we dont provide services to residents of the following jurisdictions: Sudan, Syria, North Korea and Iran". And the footer disclaims regulatory status entirely: the company "provide[s] software development services and [is] not subject to regulatory oversight", is "not a broker and does not manage or hold client funds".

Before signing, ask for the MSA, the DPA and the SLA as documents, and treat the absence of any published commercial terms as the main diligence item on this vendor.