Security & non-custody
Noctis Quant is built on a simple premise: the platform executes, you hold the capital. Here is exactly how that works.
Your keys, your account
Every API key you connect is scoped to trade-only permissions on your own exchange account. Noctis Quant never requests, and the platform's key format never accepts, withdrawal permissions.
Encrypted at rest
Keys are encrypted with AES-256/Fernet before they ever touch storage. They are decrypted in memory only for the instant an order is placed, then discarded.
Session security
Every session is authenticated with a signed JWT, verified on every request. There is no shared credential and no standing access outside your own authenticated session.
We do not custody funds
Your capital never leaves your exchange account. Noctis Quant places and manages orders on your behalf using the permissions you granted — it never holds, transfers, or has withdrawal access to your funds.
We do not give investment advice
The platform executes the strategies and risk parameters you configure. Nothing in the product constitutes a personalized recommendation or a promise of return.