Trust Center
TRUST BEFORE
CAPITAL.
A financial platform is not production-ready because the UI looks complete. It becomes production-ready when identity is trusted, tenants are isolated, secrets are protected, permissions are enforced, data is durable, events are auditable, and live trading remains locked until all required controls actually pass.
TRUST BEFORE CAPITAL
Live trading remains gated until required production readiness criteria are satisfied.
CLARITY OVER HYPE
Public claims derive from canonical product state. No fabricated partnerships, results, or user counts.
DETERMINISM OVER AI
Risk Command and execution safety are deterministic. AI provides intelligence — not authority.
ISOLATION BY DEFAULT
Tenant isolation, credential protection, and scoped permissions are architectural defaults — not optional features.
SECURITY ARCHITECTURE
Server-Side Authorization
Every sensitive request authorizes user, organization, role, permission, resource, action, and environment on the server. Frontend navigation visibility is not authorization.
Tenant Isolation
Organization A cannot see, control, or receive events from Organization B. Enforced server-side with automated cross-tenant access tests.
Encrypted Transport
TLS in transit. Encryption at rest. Field-level encryption for highly sensitive secrets.
Credential Protection
Broker credentials are stored server-side only. Frontend never receives stored secrets. Credential references only.
Scoped Permissions
Granular role-based permissions. Execution scopes are not granted automatically.
Audit Trails
Immutable-style append-only audit logs covering auth, sessions, permissions, orders, execution, risk, billing, and infrastructure.
Account Connection
CONNECT CAREFULLY.
Connecting a brokerage account does not automatically grant order authority. Every real account begins read-only.
READ ONLY
AXIS analyzes, journals, and calculates risk. No order authority.
LIVE SHADOW
AXIS generates trade intents. No orders submitted. Shadow performance tracked.
CONTROLLED LIVE
Deliberate activation with risk policy, prop rules, and kill switch verified.
WHAT AXIS CAN DO IN READ-ONLY MODE:
Authentication
IDENTITY TRUSTED.
Multi-Factor Authentication
TOTP and passkey/WebAuthn architecture. Recovery codes. Trusted device concepts.
Step-Up Authentication
High-risk operations require step-up auth: enabling live execution, connecting privileged brokerage access, changing global Risk Command policies.
Session Security
Session rotation, revocation, device revocation, and suspicious-session alerts.
Break-Glass Access
Controlled emergency access with explicit role, strong MFA, limited duration, reason required, full audit, and automatic expiry.
Data & Privacy
DATA PROTECTED.
AI Context Firewall
AXIS does not expose broker secrets to AI models. AI context is permission-scoped. Users can understand connected providers and memory scope.
No Secret Logging
Broker passwords, API secrets, access tokens, and private keys never enter AXIS 7D, agent memory, COLOSSEUM evidence, or frontend state.
Data Classification
Every data category has explicit classification: SERVER_SECRET, PUBLIC_SAFE, DEMO_ONLY. No accidental exposure.
Export Controls
Data exports require authorization. High-volume exports may require step-up auth. Exports are audited. Broker secrets are never exported.
DISCLOSURES
Trading Risk Disclosure
Trading financial instruments involves substantial risk of loss. Past performance does not guarantee future results. Simulated and backtested results have inherent limitations.
AI Disclosure
AXIS 7D provides analysis and decision support. It may produce uncertainty. It does not guarantee outcomes. Deterministic controls remain separate.
Automation Disclosure
Automated execution requires deliberate user authorization through the five-level autonomy ladder. AI does not receive unlimited execution permission.
Demo / Simulated Data
All demo, simulated, illustrative, and paper trading data is clearly labeled. No fabricated customer balances, win rates, or performance statistics.
START SAFELY.
Begin with Demo. Connect read-only. Validate everything before live capital.
START WITH DEMO