Security
Your security is our priority. We use industry-standard practices to protect your data and broker connections at every step.
TransporTrades is designed with security as a foundational principle. We understand that connecting automated systems to your brokerage account requires trust, and we take that responsibility seriously. Every architectural decision we make considers the security implications for our users.
- All data encrypted in transit using TLS 1.3
- Sensitive data encrypted at rest using AES-256
- Broker access tokens encrypted with rotating keys
- No storage of broker usernames or passwords
- Secure authentication via Whop OAuth
- Broker connections use OAuth 2.0 (no password sharing)
- Automatic session timeouts for inactive users
- Secure token refresh without re-authentication
- Hosted on secure cloud infrastructure
- Automated monitoring and alerting
- Regular security updates and patching
- Redundant systems for high availability
- Webhook signature verification prevents unauthorized orders
- Rate limiting on all public endpoints
- Comprehensive audit logging of all order activity
- Real-time monitoring for suspicious patterns
Just as important as what we do is what we don't do. These are firm commitments we make to protect your privacy and security.
- We never store your broker username or password
- We never have direct access to your brokerage funds
- We never share your trading data with third parties
- We never sell your personal information
When you connect your broker to TransporTrades, you authenticate directly with your broker—not with us. This process, called OAuth, means:
- You enter your credentials on your broker's website, not ours
- We receive a secure token that allows trading, not your password
- You can revoke access at any time from your broker's settings
- If our systems were compromised, your broker password remains safe
Security Questions?
If you have questions about our security practices or want to report a security concern, please contact us at security@transportrades.com