Tradechology Security Practices

Last updated: April 23, 2021

Tradechology (MLH CAPITAL LLC. and its affiliates, collectively “Tradechology”) maintains industry standard security safeguards to protect your information from loss, misuse, and unauthorized access or disclosure, and to ensure its confidentiality, integrity and availability. Our security program accounts for both the sensitivity of the information we process and the current state of technology. The following sets out our security practices with respect to your data.

 

Written Information Security Program

Tradechology maintains an information security program for security, availability, processing integrity, confidentiality and privacy.

 

Compliance Certifications

The environment that hosts our services maintains multiple certifications for its data centers, including ISO 27001 compliance, FedRAMP authorization, PCI Certification, and SOC reports. For more information about their certification and compliance, please visit the AWS Security website and AWS Compliance website.

PCI: Please note that Tradechology is not, and is not required to be, a PCI-certified service provider. Our platform has been deliberately architected to avoid any such requirement. Where PCI compliance is relevant, we rely on PCI-compliant service providers (Stripe, for example) to process credit card information securely.

 

Personnel Practices

Tradechology conducts background checks on employees appropriate for their responsibilities (with more extensive background checks required for key employees that have elevated privileges), provides ongoing privacy and security training to its staff, and requires employees to read and sign confidentiality and non-disclosure agreements as conditions of their employment.

 

Confidentiality & Access Controls

Tradechology employees are subject to written confidentiality obligations and are prohibited from accessing customer data unless absolutely necessary. Our security policies include limiting access to systems only where individual roles require it (least privileged).

 

Encryption

All customer data processed by Tradechology infrastructure is encrypted in transit (with TLS 1.2) and at rest (with AES-256 encryption) using the latest cypher suites and protocols. In addition, we enforce full disk encryption on all corporate devices.

 

Availability

Our infrastructure systems are fault tolerant and our operations team works continuously to make Tradechology’s platform a highly available service you can rely on.

 

Network Protection

We use firewalls that are configured according to industry best practices and implement multi-factor authentication for all servers across our various environments, including production.

 

Logging and Monitoring

Our production environment implements a centralized logging and monitoring system to track information pertaining to security, monitoring, availability, access and other metrics about our services.

 

Product Security & Privacy by Design

New features, functionality and design changes at Tradechology go through a security and privacy review process by our teams. Code is tested and is manually peer-reviewed prior to being deployed to production.

 

Service Provider Relationships

All third-party services that could potentially impact the security of our or our customer’s information are reviewed by our platform team. Tradechology requires all service providers to agree not to retain, use or disclose personal information for any purpose other than for the specific purpose of performing the services specified in their agreement with Tradechology.

We are not Financial Advisors or a Broker/Dealer: Neither Tradechology nor any of its officers, employees, representatives, agents, or independent contractors are, in such capacities, licensed financial advisors, registered investment advisers, or registered broker-dealers. MLH Capital does not provide investment or financial advice or make investment recommendations, nor is it in the business of transacting trades, nor does it direct client commodity accounts or give commodity trading advice tailored to any particular client’s situation. Nothing contained in this communication constitutes a solicitation, recommendation, promotion, endorsement, or offer by MLH Capital of any particular security, transaction, or investment.

 

Securities Used as Examples: The securities used in this example are used for illustrative purposes only. The calculation used to determine the return on investment “ROI” does not include the number of trades, commissions, or any other factors used to determine ROI. The ROI calculation measures the profitability of investment and, as such, there are alternate methods to calculate/express it. All information provided are for educational purposes only and does not imply, express, or guarantee future returns. Past performance shown in examples may not be indicative of future performance. Testimonials appearing on this website may not be representative of other clients or customers and is not a guarantee of future performance or success. 

 

Investing Risk: Trading securities can involve high risk and the loss of any funds invested. Investment information provided may not be appropriate for all investors and is provided without respect to individual investor financial sophistication, financial situation, investing time horizon, or risk tolerance.