Security & Breach Response
How we protect your data and respond to incidents.
Last updated: March 2, 2026
Our Security Principles
- Defense in depth with layered controls
- Zero-trust posture and least privilege access
- Continuous monitoring and rate limiting
- Rapid response and transparent communication
Data Protection
- Encryption in transit (HTTPS/TLS for all communications)
- Encryption at rest for sensitive tokens and secrets
- Strict access controls and auditing
- Automated encrypted backups with restore procedures
Application Security
- Input validation & output encoding
- CSRF protection
- SQL injection prevention
Auth & Authorization
- OAuth 2.0 with state validation
- Encrypted token storage & refresh
- Role-based access controls
Threat Prevention & Monitoring
- Global and endpoint-specific rate limiting
- IP reputation and management controls
- Middleware checks for XSS and SQL injection patterns
- Authentication security monitoring
Webhook Security
- Auth key validation
- Per-webhook rate limiting
- Suspicious activity detection
IP Management
- Whitelist & blacklist systems
- Temporary block list with auto-expiry
- Suspicious IP monitoring
Incident Response
We follow a documented breach response plan to quickly identify, contain, and remediate incidents. Where legally required, we will notify affected users and relevant authorities in a timely manner.
- Detection and triage with clear severity levels
- Containment, eradication, and recovery procedures
- Post-incident reviews and improvements
Notification Timelines
- Internal: 1 hour
- Users: 24 hours
- Authorities: 72 hours (GDPR)
Admin Controls
- Security dashboard & reports
- Token revocation tools
- IP management console
Compliance
- GDPR Art. 33/34 aligned
- Supported broker OAuth license compliance
- No payment card storage
Report a Security Issue
If you discover a security vulnerability, please email us immediately at security@algo-trade-analytics.com. We appreciate responsible disclosure and will respond promptly.
Questions?
For security inquiries or more information about our security practices, contact us at security@algo-trade-analytics.com.