Product · Security
Trust without theatre.
Encryption, access control, and clear limits. No invented SOC 2 / ISO stamps. Planned certifications stay labelled planned.
What we do
- Encryption in transit (TLS) for app and API traffic
- Encryption at rest for stored account and workspace data
- Access control by account and workspace role
- No custody of user funds or private keys
- Session hygiene and signed-out defaults on shared devices
- Honest empty/offline states instead of fabricated data
What we don’t do
- We don’t hold or move your crypto
- We don’t execute trades or route orders
- We don’t invent prices when sources are down
- We don’t claim SOC 2 / ISO / PCI as current fact
- We don’t sell “guaranteed alpha” or signals-as-advice
Compliance certifications (e.g. SOC 2) — Planned when ready, not before.
Questions on security?
Reach the team via Contact, or start with a free account stub to explore the shell.