Security & Compliance
Your data security and privacy are our top priorities
Built by a senior customer-security executive at a Fortune 100 company. Every architectural decision is informed by enterprise-grade security practices protecting millions of users.
Security Features
End-to-End Encryption
All data in transit is encrypted using TLS 1.3. Data at rest is encrypted using AES-256.
Multi-Factor Authentication
Support for passkeys (WebAuthn), TOTP authenticator apps, and email OTP for enhanced account security.
OAuth 2.0
Secure authentication via Google, Facebook, and other trusted OAuth providers.
Passkey Support
Passwordless authentication using WebAuthn and biometric verification.
Secret Management
All API keys and credentials stored securely in HashiCorp Vault.
Cloud Infrastructure
Built on Hetzner infrastructure with enterprise-grade security and reliability.
Regular Security Audits
Continuous security monitoring and regular third-party security assessments.
Zero-Knowledge Architecture
Your trading strategies and API credentials are encrypted and only accessible to you.
Compliance & Best Practices
Data Protection
- GDPR compliant data handling and storage
- CCPA compliance for California users
- Right to access, modify, and delete your data
- Data retention policies and automated cleanup
Financial Security
- Read-only API access to connected accounts by default
- OAuth-based brokerage connections (no password storage)
- Encrypted credential storage with HashiCorp Vault
- No direct access to your funds
Infrastructure Security
- Hetzner platform infrastructure
- Firestore database with built-in security rules
- Automated backups and disaster recovery
- DDoS protection and rate limiting
How We Handle Your Data
What We Collect
• Account information (email, name, profile data)
• Connected brokerage account data (read-only portfolio information)
• Trading strategies and configurations you create
• Usage analytics to improve our platform
What We Don't Collect
• Your brokerage account passwords (OAuth only)
• Banking information or payment card details
• Trading execution credentials (you maintain control)
• Personal information beyond what's necessary
Security Researchers & Responsible Disclosure
We welcome and appreciate security researchers who help us maintain the highest security standards. If you discover a security vulnerability, please report it to:
security@strategiz.ai
We commit to acknowledging your report within 48 hours and working with you to address the issue responsibly.