Security
How your credentials, your commands and your data are protected.
Your broker credentials never leave your terminal
TRADEKAP never logs in to your broker. A program sits on your MetaTrader and sends trade data to your journal. Your broker password stays on your machine.
Every command is cryptographically signed
Each order sent from your browser is signed with HMAC-SHA256 using a secret that lives only in your workspace. The EA verifies the signature before acting.
Hard limits on your side
A maximum lot size set in your workspace caps every order. Orders above the limit are rejected before they reach the terminal.
Each customer's data is isolated
Every workspace is its own space. Row-level isolation keeps your trades, your settings and your notes visible only to the members of your space.
Data hosting
Your journal data is hosted on the platform's managed database, isolated per workspace. Broker credentials are never stored on our servers.
Connection key management
The key that links your terminal to your workspace can be rotated from your space settings. Old keys stop working immediately.
When a subscription stops
You keep full access until the end of the paid period. After that, your data is kept; access is restored if you resume.
Report a vulnerability
Found a security issue? Write to us and we will investigate.
support@tradekap.com