Platform Security
The security of our systems, client data and client secrets is a primary focus for everything we build.
Network and Cloud
Our VPC and network environment is designed and built by certified cloud architects whose usual business is banking cloud infrastructure.
Standards and Procedures
We have followed the processes and procedures laid out by ISO 27001. We have not conducted an audit and certification while we are in Beta. As soon as we have achieved some scale, and before we release the platform officially, we will be certified.
Similarly, we will also undergo manual and automated penetration testing before the official release and regularly after that.
Disclosing Vulnerabilities
If you notice any issues with our security please see our security.txt for secure disclosure. Thank you in advance to any concerned folks helping us to stay secure and improve our security.
Our Recommendations for Users
While we are in Beta, and afterwards, we recommend the following for all of our users:
- Only store what you need for your trading activities on centralised exchanges
- Use sub accounts that are dedicated to your automated trading where possible, and use these for Plurex
- Where ever an exchange allows it, use the Plurex IP addresses in your exchange API Key white list.