Data Encryption
How We Protect Your Data
Your trading data is sensitive. Here's how we keep it secure.
Encryption Standards
In Transit:
- TLS 1.3 encryption for all connections
- HTTPS enforced across all pages
- Certificate pinning in mobile apps
At Rest:
- AES-256 encryption for stored data
- Encrypted database backups
- Secure key management
What We Encrypt
| Data Type | Encryption Level |
|---|---|
| Passwords | Bcrypt hashing (irreversible) |
| Trade data | AES-256 |
| Personal info | AES-256 |
| Payment info | PCI DSS compliant (handled by Stripe) |
| Session tokens | Signed + encrypted |
Infrastructure Security
Hosting:
- SOC 2 compliant data centers
- Geographic redundancy
- 24/7 monitoring
Access Control:
- Strict employee access policies
- Multi-factor authentication required
- Audit logging of all access
Your Privacy
We NEVER:
- Sell your data to third parties
- Share trade data with anyone
- Access your data without permission
We ONLY:
- Use data to provide service
- Aggregate anonymous statistics
- Share what you explicitly authorize
Security Best Practices
We recommend:
- Use a strong, unique password
- Enable two-factor authentication
- Don't share your credentials
- Log out on shared devices
Compliance
- GDPR compliant for EU users
- CCPA compliant for California users
- Regular security audits
- Penetration testing quarterly