Financial security is not a badge or a vague promise. It is a chain of explicit boundaries around identity, data, execution, and financial records.
Protected route identity checks ENFORCED
Server-side request validation ENFORCED
Financial audit events ENABLED
Ledger reconciliation ENABLED
This Trust Center describes controls implemented in the current authenticated paper environment. It does not claim regulatory authorization, custody, penetration-test results, or third-party certification.
Select a layer to inspect how a request moves from identity to an auditable financial record.
Protected routes require an authenticated platform identity before account-scoped data is read or changed.
Concrete controls already present in the platform’s paper-trading architecture.
Authentication is resolved server-side on every protected request. Missing identity never falls through to an anonymous portfolio.
IMPLEMENTEDClient order identifiers make retried order submissions safe and return the existing result instead of duplicating exposure.
IMPLEMENTEDEvery paper execution posts balanced debits and credits, keeping cash, position cost, and realized P&L reconcilable.
IMPLEMENTEDOrders, copy relationships, and Smart Portfolio positions are selected and changed only within the authenticated account.
IMPLEMENTEDPending orders, copy relationships, and portfolio mandates can move only through allowed states with conflict responses for invalid actions.
IMPLEMENTEDMaterial actions record the actor, entity, event type, timestamp, and relevant non-secret context for operational review.
IMPLEMENTEDCritical financial actions are treated as workflows—not button clicks.
Resolve identity, account scope, order parameters, available cash, and position limits.
Create the order, determine whether it is pending or filled, and preserve the execution reference.
Update the position, post balanced ledger entries, and record the actor and action.
Never share sign-in access, recovery codes, wallet seed phrases, or one-time verification codes. Forex & Stock will never ask for a private key or seed phrase in chat, email, or support.
Production financial systems must earn trust through independent evidence. Before live brokerage or custody features are offered, this page should publish regulatory coverage, custody partners, encryption and key-management details, incident-response channels, penetration-test scope, and applicable third-party reports.
Understand the current paper environment →