Safety before returns
Designed so the worst case is boring: keys encrypted, withdrawals impossible, every real order protected.
Security & integrations
Security first
- Everything closed by default: sessions, roles, 2FA (TOTP)
- Broker API keys encrypted at rest, never returned by the API, read-only sync
- AI providers receive computed snapshots — keys and payments never leave the backend
- Full audit trail of every AI call and credit movement
Brokers & data providers
Connect broker and exchange accounts for read-only balance and position sync; market data aggregates across providers with automatic failover and per-module switching.
Autopilot
Four autopilot circuit breakers
Real money trades only inside hard rails — every one of them visible in the UI.
Daily kill switch
A −3% daily drawdown halts trading until the next session. Hard caps on trades, analyses and open positions.
Stops live at the broker, not in the app
Protective orders sit on the exchange/broker side: even if the platform goes offline, the stop still closes the position.
Keys without withdrawal rights
API keys connect without the Withdraw permission and are encrypted per user. The platform physically cannot move funds out.
Real orders need explicit consent
Mirroring to a real account is opt-in, every order size is capped, and closes are sized from the real position.