Security Architecture

Institutional security & risk governance.

Trade-X incorporates defense-in-depth engineering principles. Every command, configuration change, and analytical prompt is strictly isolated and validated.

Credential Isolation & Zero-Storage

LIVE

Trading passwords and secret API keys are never stored on public-facing servers. Keys are encrypted at rest using AES-256 with HSM isolation.

Deterministic Emergency Kill-Switch

LIVE

Hardware-priority kill switch enables immediate cancellation of all pending working orders and market liquidation of all open positions in under 200ms.

Granular Role-Based Access (RBAC)

LIVE

Strict isolation across OWNER, AGENCY, CLIENT, and ANALYST tiers. Clients can never access agency accounts or administrative control surfaces.

Comprehensive Audit Logs

LIVE

Immutable, timestamped event stream capturing user logins, signal generations, manual orders, parameter edits, and risk interventions.

Rate-Limiting & Bot Mitigation

LIVE

Adaptive token-bucket rate limiting on public endpoints with strict IP and email normalization to prevent abuse.

Per-Account Exposure Ceilings

LIVE

Hard caps on daily maximum losses and aggregate lot sizes that cannot be bypassed by UI actions or automated scripts.

Cryptographic Audit Trail & RBAC Isolation

Our multi-tier architecture enforces strict boundary isolation between roles:

OWNER Tier

Full platform operations, global risk policy controls, audit inspection, and emergency disable switches.

AGENCY Tier

Multi-client group telemetry, strategy distribution, and aggregated position monitoring without client credential exposure.

CLIENT Tier

Terminal charting, demo portfolio inspection, order entry, and personal risk limit visibility.

ANALYST Tier

Read-only market intelligence, Strategy Lab backtesting, and Hari AI research query access.