Security & custody
Security begins with clear boundaries.
Your money stays in your own brokerage account, always. Everything else is built on that foundation.
Security and control
Your capital never leaves your hands
Wealthoak.ai surfaces the data and signals; every decision and every order remains yours, through your own broker. You keep custody, control, and visibility through your broker. Read the trust center for published evidence and assessment status.
-
Your custody
Funds stay in your own brokerage account, always.
-
Encrypted access
Review connection security, credential handling and broker-specific permissions before authorising access.
-
Read and trade only
Broker access is used for analytics and trading tools. Confirm the exact authentication flow and permissions for your integration.
-
Full audit trail
Ask which order, configuration and access events are logged and available for your account.
-
Revoke anytime
Revoke the integration through the broker’s supported process; confirm session and token behaviour.
-
Segregated by design
Review account separation and access controls in the technical documentation.
The architecture
Capability, never custody.
Trading access and custody are different. Inspect permissions before connecting an account.
In practice
- Custody
Your capital sits in your own brokerage account, in your name, under your broker’s regulatory protections.
- Access
Review the exact permissions granted to the selected broker integration. Wealthoak is not a custodian of your investment capital.
- Revocation
Use the broker’s supported process to revoke access. Confirm whether existing sessions, tokens and open orders need separate action.
- Encryption
The public website uses HTTPS. Request integration-specific documentation for API transport, credential storage and key management; HTTPS alone does not establish every backend control.
- Least privilege
Ask for the roles, access boundaries, review procedure and broker permissions applicable to your configuration.
- Auditability
Confirm which order, fill, pause and configuration events are recorded, how long records are retained and how to obtain them.
Security is a practice, not a promise. Questions about our security posture are welcome at info@wealthoak.ai.
No independent security assessment or certification is published in this library. Read the trust center for evidence status and security reporting.
A more considered approach
starts with a conversation.
Prefer to speak first? Talk to us at info@wealthoak.ai
Operated by Wealthoak Advisory LLP