Public draft for legal review. Negotiated signed terms and mandatory law take precedence; this page is not a certification or legal opinion.
Public controls and boundaries; confidential internal procedures are not disclosed.
Access control
Business records use organization-scoped permissions. Server actions validate signed-in identity and verified email. Broker credentials are hash-only; widget sessions are short-lived and origin-bound.
Private storage
Optional private reports use browser-side AES-GCM with fresh nonces and company-held keys. Keys and decrypted reports must not be sent to Trade Eyes servers, logs or analytics. This protects stored report content from database administrators; it is not protection against a compromised client device or malicious future client software.
Operational security
Changes are tested, sensitive credentials stay server-side and payment activation follows verified provider events. This document is a public control summary, not a SOC 2, ISO 27001 or penetration-test certification. Internal secrets, runbooks and network details are not public.
Responsible reporting
Email hello@tradeeyes.app with minimal reproduction details. Do not include keys, raw customer files or data belonging to others. Do not disrupt service or access records you are not authorized to see.
Contact
Questions and contract requests: hello@tradeeyes.app.