Security & Trust
How your data is protected
Encryption
- All connections served over HTTPS with TLS 1.2+ and AES-256 cipher suites
- HTTP Strict Transport Security (HSTS) enabled
- Database AES-256 encryption at rest (DigitalOcean Managed PostgreSQL)
Account & Data
- Read-only data ingress via user-uploaded CSV or Excel files, or an optional brokerage connection
- No trading authority; brokerage connections are read-only by design, so QuantStark cannot place trades or move funds
- Brokerage login credentials never touch QuantStark; users authenticate on the broker's own page via SnapTrade
- The brokerage connection token is encrypted at the application level (authenticated AES encryption) before storage, on top of database encryption at rest
Infrastructure
- Hosted on DigitalOcean (SOC 2 Type II, ISO 27001 certified)
- Reverse proxy, CDN, DNS, and domain registration via Cloudflare (SOC 2 Type II, ISO 27001 certified)
- Optional brokerage connectivity via SnapTrade (SOC 2 Type II certified)
- Subprocessor list and full security details available on request
Reporting a vulnerability
If you believe you have found a security vulnerability in QuantStark, please email [email protected].
Please do not disclose the issue publicly until we have had a reasonable opportunity to address it. We aim to acknowledge reports within two business days.