Skip to content
Security

Security You Can Trust

Built for traders who demand safety, privacy, and control of their exchange trading funds.

Does Algonney hold my exchange trading funds?

Algonney does not custody your connected exchange trading funds. They remain in your exchange account. The separate Algonney Wallet, where used for platform payments, is governed by the Wallet Terms.

How is the Algonney Wallet different from my exchange account?

The Algonney Wallet is a separate platform balance you can fund for subscriptions, tokens, and platform payments. It is not your exchange trading balance: connected exchange trading funds always remain in your own exchange account, accessed through trading-enabled, withdrawal-disabled API keys.

Non-Custodial by Design

Algonney does not custody your connected exchange trading funds. They remain in your exchange account, and we only execute trades through your API permissions. The separate Algonney Wallet, where used for platform payments, is governed by the Wallet Terms.

Withdrawal permission: verified disabled

Encrypted API Keys

Exchange API credentials are encrypted at rest and access is restricted. They are never displayed in the interface after setup.

  • Only "Read" + "Trade" permissions
  • Withdrawal permission must stay disabled — we verify keys are withdrawal-disabled
  • Keys are never displayed in the interface after setup, and internal access is restricted

IP Whitelisting Support

For maximum protection, you can whitelist Algonney's server IPs in your exchange settings, ensuring your keys only work from our secure infrastructure.

Your current IP whitelist value is shown in your account's API-key setup. Open API-key settings

Recommended for advanced users.

2FA Enforcement & Login Protection

Two-factor authentication is required for exchange connections and other high-risk account actions. Login attempts are rate-limited per IP and per account to prevent brute-force attacks.

  • 2FA required before connecting, updating, or deleting exchange API keys
  • Login attempts limited per IP and per account
  • Repeated failed attempts trigger additional verification and temporary lockout

Real-Time Protection

Our systems automatically monitor trading activity for unusual patterns, API misuse, and unauthorized access attempts.

  • Suspicious login detection
  • API anomaly alerts
  • Device and location checks

Encryption & Infrastructure

Your data travels through secure TLS 1.3 connections and stays encrypted at rest. Our infrastructure is protected by advanced firewalls, DDoS mitigation, and continuous monitoring.

  • TLS 1.3 secure transport
  • Encrypted key storage
  • Cloudflare protection

Privacy & Control

You own your data. Export or delete your account at any time. We do not sell, share, or monetize your information.

Privacy-focused: no data reselling and transparent privacy controls.

Responsible Security Program

Found a vulnerability? Our security team is ready to respond.

security@algonney.com

We support responsible disclosure. Read our full disclosure policy for scope, rules, and safe harbor details.