Read-only platform design
The public service is not designed to place, route, copy, cancel, or modify orders. Connector and API event types are allowlisted.
Security at TradeChrona
Designed to protect trading records without taking control of trading.
Security is an ongoing operational program. No system is completely immune to defects, attacks, provider failures, or human error.
Workspace isolation
Account and journal data is separated by workspace so one customer cannot access another customer’s records.
Protected credentials
Platform secrets are excluded from browser storage, email, logs, exports, and user backups. Connector device credentials are revocable.
Encrypted transport and storage
HTTPS is required. Managed infrastructure encryption, signed links, secret management, and restricted storage access protect data.
Account safeguards
Verified email, secure sessions, optional TOTP multifactor authentication, recovery codes, active-session review, and login alerts are supported.
Operational controls
Structured logs, audit events, rate limits, webhook verification, idempotency, backups, restore procedures, and incident response support reliability.
Report a vulnerability
Send a clear report to security@tradechrona.com. Include affected URL or component, reproduction steps, impact, and a safe proof of concept. Do not access other users’ data, disrupt the service, or include secrets in the initial email.
A formal coordinated-disclosure and safe-harbor policy must be reviewed before public launch.
Read the Privacy PolicyStart your review
Review the next trading day with the full picture in front of you.
Choose a manual calendar plan or connect the accounts and research tools that fit your process.