Your Security Is Our Priority
TradePulse AI is built from the ground up with security at every layer. We combine enterprise-grade encryption, strict access controls, and transparent practices to ensure your data and assets remain protected at all times.
Enterprise-Grade Protection
Security is not an afterthought at TradePulse AI — it is a foundational principle embedded in every line of code, every infrastructure decision, and every product feature. Our platform is built on Supabase, which provides PostgreSQL with row-level security policies, encrypted storage, and SOC 2 Type II certified infrastructure hosted on AWS. From the moment you create an account to every API call your dashboard makes, multiple layers of protection work together to safeguard your information. Below are the core security measures we have implemented to earn and maintain your trust.
AES-256 Encryption
All data is encrypted at rest and in transit using AES-256, the same standard trusted by governments and financial institutions worldwide. Every connection to TradePulse AI is secured with TLS 1.3, ensuring that your data cannot be intercepted or tampered with during transmission. Whether you are viewing your portfolio, configuring alerts, or analyzing market data, your information travels through fully encrypted channels from end to end.
Row-Level Security
Every user's data is isolated at the database level using Supabase Row-Level Security (RLS) policies. This means that even if an attacker gained access to our database, they could not query another user's data. Each row in every table is governed by strict policies that verify the requesting user's identity before returning any results. Your watchlists, portfolios, trade history, and settings are completely invisible to other users.
Read-Only API Access
When you connect an exchange account to TradePulse AI, we only request read-only API permissions. We never ask for withdrawal, transfer, or trading permissions unless you explicitly enable auto-trading — and even then, withdrawal access is never requested. This means TradePulse AI physically cannot move funds out of your exchange account, giving you complete peace of mind while you monitor your portfolio.
Two-Factor Authentication
Protect your TradePulse AI account with optional TOTP-based two-factor authentication via popular authenticator apps like Google Authenticator, Authy, or Microsoft Authenticator. 2FA adds a critical second layer of defense: even if someone obtains your password, they cannot access your account without the time-based code from your authenticator device. We strongly recommend enabling 2FA for all accounts.
API Key Encryption
Your exchange API keys are encrypted with AES-256 before they are stored in our database. The encryption keys are managed separately from the database itself, following industry best practices for secrets management. API keys are only decrypted in memory when actively needed to fetch your exchange data, and they are never logged, cached in plaintext, or exposed through any API endpoint.
Session Security
TradePulse AI uses JWT-based authentication with automatic token refresh and intelligent session management. Access tokens expire after a short window, and refresh tokens are rotated on each use to prevent replay attacks. Sessions are bound to your device fingerprint, and any suspicious activity — such as logins from new locations — triggers additional verification steps to protect your account.
What We Don't Do
Transparency matters. Here are the things TradePulse AI will never do — these are hard commitments, not guidelines.
Never access your exchange funds — we use read-only API keys by default
Never store your exchange passwords — we only store encrypted API keys that you generate
Never sell your data to third parties — your trading data, portfolios, and personal information are never monetized
Never make trades without your explicit approval — our kill switch lets you halt all automated activity instantly
Compliance & Transparency
Open About Our Tech Stack
We are transparent about the technologies we use. TradePulse AI is built on Next.js, Supabase (PostgreSQL), and hosted on Vercel with edge functions. Our data comes from reputable, well-documented APIs including Binance, CoinGecko, and LunarCrush. We believe openness about our architecture builds trust and allows the community to hold us accountable.
Regular Security Updates
We continuously update our dependencies, patch vulnerabilities, and monitor for emerging threats. Our CI/CD pipeline includes automated security scanning, and we follow a strict update cadence to ensure every component of our stack remains current and protected against known vulnerabilities.
Responsible Disclosure
If you discover a security vulnerability in TradePulse AI, we encourage you to report it responsibly through our contact page. We take every report seriously, investigate promptly, and work to resolve confirmed issues as quickly as possible. We will never take legal action against good-faith security researchers who follow responsible disclosure practices.
Start Trading Securely — Free Forever
Join thousands of traders who trust TradePulse AI with their crypto analytics. Our free tier includes full access to AI signals, paper trading, and portfolio tracking — all protected by enterprise-grade security.