Licensing and security differ by exchange and by country. Each exchange describes security measures such as two-factor authentication, and some publish proof-of-reserves reports, but proof of reserves is a point-in-time snapshot and not a guarantee, and no exchange is risk-free. Check each exchange's own current security pages and licence status where you live, and only keep on an exchange what you can afford to lose.
See each exchange's guide