Nexus IMTO
Supervisory Technology (SupTech) and Financial Market Infrastructure (FMI) engineered by Inject Group Ltd. Nexus IMTO is an Internal product Inject built for itself — visit nexusimto.com. What you can inspect today is a production-grade demonstration / evaluation environment — not a claim that a named central bank is live.
Nexus IMTO is built for sovereign central banks, Financial Intelligence Units (FIUs), and financial regulators that need telemetry over International Money Transfer Operator (IMTO) cross-border flows, FATF-aligned wire-transfer visibility, and foreign-exchange capital-flight monitoring. The IMTO developers are Inject Group Ltd — see also what an IMTO is and IMTO software.
Developer and intellectual property owner
- Legal entity: Inject Group Ltd
- Jurisdiction: England and Wales, United Kingdom (company 16282987)
- Product: Internal — Inject built Nexus IMTO for itself. Visit nexusimto.com. This page is the OEM briefing.
- Commercial model: Technology OEM / core software licensing house
- Delivery: Core IP licensed to sovereign buyers; deployed locally via accredited in-country system integrators
Primary system capabilities
- ISO 20022 telemetry engine. Native inspection of
pacs.008,pacs.009,camt.053, andpain.001. Detail: ISO 20022 telemetry for IMTO supervision. Evaluation OpenAPI: nexus/openapi.yaml. - Inline anti-fraud and coercion shield. Behavioural scoring, velocity limits, and settlement hold queues for APP fraud.
- Privacy-preserving inter-bank indicators. Federated red-flag queries so banks can test AML indicators without exposing customer PII.
- Capital-flight and FX allocation tracking. FX spreads, parallel-market signals, and IMTO settlement latency.
- Multi-switch regional compatibility. BUNA, PAPSS, GCC-RTGS themes, and mobile-money networks.
Targeted regulatory alignment
Design targets for operator alignment — not regulator endorsements.
- UAE (CBUAE) remittance SupTech — Circular No. 15/2021 themes.
- Saudi Arabia (SAMA) payments SupTech — localisation guidelines.
- Nigeria (CBN) IMTO oversight — 2024 IMTS guideline themes and 2026 settlement-account circular (design alignment, not an endorsement).
- FATF Recommendation 16 — wire-transfer information.
What we can show today
We state certified, in progress, designed-to, or not in scope. We do not present those programmes as live certificates.
| Control | Status | Evidence / scope |
|---|---|---|
| Cyber Essentials | Certified | UK NCSC scheme. Public record: Blockmarktech certificate (IASME). Scope: Inject Group Ltd, United Kingdom. Issue and expiry dates are on that registry record — we do not restate them here so a renewal cannot drift from this page. |
| Cyber Essentials Plus | In progress | Not claimed as certified. |
| ISO/IEC 27001 | In progress | Information-security programme under implementation. Architecture is designed to those controls. Not certified. No auditor letter is published until a certificate exists. |
| ISO 22301 | In progress | Business-continuity programme under implementation. Not certified. |
| UK GDPR / DPA 2018 | In force (this website) | Inject Group Ltd is controller for website enquiries. See Privacy. |
| Nigeria NDPR / NDPA 2023 | Designed-to (deployments) | This website is not an NDPR-certified processing platform. Supervisory data in a Nigerian licence would be processed in-country by the named SI under a data-processing agreement. Not a claim of NDPR certification. |
| PCI DSS | Not in scope | injectgroup.com does not process cardholder data. A card environment, if ever required, would be assessed per deployment — we do not claim PCI DSS alignment here. |
Outcomes procurement committees buy — not module names
Figures below are design targets for a licensed deployment with a local SI. They are not live production SLAs and not regulator-endorsed results.
| Capability | Intended operating outcome | Design target vs status quo |
|---|---|---|
| Real-time IMTO telemetry | Message-level alerting instead of reconstructing corridors from delayed files. | T+0 inspection vs monthly / multi-week packs. |
| Alert latency | Supervisors see high-risk authorised pushes before gross settlement, not after the credit. | Seconds-scale alerts (design target), not end-of-day dumps. |
| Native ISO 20022 inspection | Preserve pacs.008 / pacs.009 / camt.053 fields without lossy MT-to-MX translation. |
Originator/beneficiary data survives supervision. |
| Non-bank IMTO onboarding | Supervisory profile, licence status, and corridor mapping in one console. | Days once SI integration is in place, vs quarter-scale paper programmes. |
| Report cycle | On-demand corridor, FX, and hold-queue extracts for FIU / board packs. | Same-session export vs month-end reconstruction. |
Product stills for print, WhatsApp, and email
Captioned shots from a production-grade demonstration / evaluation environment. Not a live central-bank contract. On-screen figures are demonstration UI, not production KPIs.
Figures C–E below are illustrative architecture plates for government forwarding — annotated, printable, and not production screenshots.
How sovereign programmes are bought
Inject Group Ltd (United Kingdom, company 16282987) licenses core software. In-country accredited system integrators deploy it. Local operations and 24/7 SLAs sit with those partners, backed by Inject’s UK engineering group.
-
1. Core platform licence
Annual enterprise licence of the Nexus engine from Inject Group Ltd — UK intellectual property, not a local reseller white-label.
-
2. Local partner integration
An accredited in-country SI maps APIs, hosting, and data-centre or sovereign-cloud posture. We do not publish a partner roster until a jurisdiction contract names them.
-
3. Sovereign SLA and support
Tiered 24/7 operations via the local partner, with Inject Group Ltd retaining core engineering, security patches, and ISO 20022 / protocol evolution.
Named local partner model
Central banks typically require local support, local-currency billing, and in-country security clearances. Inject Group Ltd supplies the core licence and IP. Accredited Tier-1 IT integrators (for example in Dubai, Riyadh, Lagos, or Nairobi) would supply deployment headcount, local licences, and on-the-ground SLAs.
We do not name firms here until a contract exists. Listing uncontracted “partners” is a credibility failure. Procurement teams should ask for the named SI in the RFP response, not on this website.
Architecture plates for government forwarding
Civil servants forward static figures. These are illustrative architecture plates from sample evaluation data — not a website PDF download, not production screenshots, and not a claim that a named central bank is live on Nexus. The signed architecture PDF is issued on Google Drive after NDA.
pacs.008 inspection path (illustrative).Evaluation pack (under NDA)
These files are not published on this website. Plates and stills here are sample / illustrative evaluation data. Use the hosted enquiry form from an institutional address. Do not attach customer PII. After NDA we issue the pack on Google Drive (Google Workspace):
- One-page executive summary (1-pager PDF)
- High-level technical architecture specification (architecture PDF)
- Vendor security and data-governance questionnaire
- RFP response outline (same headings as the public checklist)
There is no public PDF dump and no third-party marketing CRM. Confirmation email and a two-business-day reply SLA apply.
Procurement questions
Who is the legal OEM behind Nexus?
Inject Group Ltd (United Kingdom, company 16282987) is the intellectual-property owner. Nexus IMTO is an Internal product Inject built for itself. The product site is nexusimto.com; this host is the OEM briefing. Core software is licensed to sovereign buyers and deployed with in-country system integrators.
Is Nexus certified by CBN, CBUAE, SAMA, or FATF?
No. Pages that name those authorities describe design alignment targets. They are not endorsements, licences, or live production claims.
How do we obtain a vendor security pack?
Use the hosted enquiry form with your institution, corridor, and NDA contact. After NDA we issue the pack on Google Drive: 1-pager PDF, architecture PDF, security questionnaire, and RFP outline. Those files are not hosted on this website; figures here are sample evaluation data. See how to request a Nexus vendor pack.
Can Nexus run air-gapped for national cybersecurity localisation?
Yes. Supported postures include Linux cloud-native and on-premises air-gapped deployments, including themes in SAMA / NCA localisation guidance.
Who owns supervisory data?
The licensing authority (or its designated operator) owns supervisory data. Inject Group Ltd licenses software; it does not take title to IMTO customer records. In-country processing and deletion-on-exit are contract terms with the named SI.
Is source code held in escrow?
Source-code escrow and audit rights are available as a contracted term for sovereign licences. We do not publish a public repository of the engine. Ask for escrow in the RFP; it is not a marketing download.
How are staff cleared for a central-bank programme?
In-country integrator staff follow the buyer’s clearance rules. Inject Group Ltd UK engineers supporting the core can be named in the SoW. We do not invent a Lagos or Abuja payroll to look local; local headcount is the SI’s.
What is the local-content story?
UK OEM licence + named local SI for implementation, 24/7 support, local-currency billing, and in-country hosting. That is the local-content model. We do not list uncontracted partner logos.
How fast do you reply, and is this a real form?
The contact form emails our team, keeps a short record of your name and email, and sends a confirmation. We respond within two business days.
Where is personal data processed, and do you use cookies?
Inject Group Ltd handles website enquiries under UK GDPR. We do not claim Nigerian data-protection certification for this website. The Cookie notice explains that we do not use advertising cookies; analytics, if you accept, is organisation-level or a coarse country. The Privacy policy has the full wording.
Is this BIS Project Nexus or Nexus Global Payments?
No. Those are unrelated payments interconnects. Inject Group Ltd’s product is Nexus IMTO (SupTech for International Money Transfer Operator oversight). Visit nexusimto.com.