Security

Built so your money stays yours.

Security isn't a feature we added later. The whole platform is designed so AFT AI can guide your trading without ever being able to touch your funds.

Our principles

How we protect you.

Non-custodial by design

We never hold, pool or manage your funds. Your crypto stays in your own exchange account, under your control.

Least-privilege API access

AFT AI works with read-only API keys. We never request withdrawal permissions, so the platform cannot move money out of your account.

Encryption everywhere

API keys are encrypted at rest and never displayed again after you save them. All traffic to and from AFT AI is encrypted in transit with TLS.

Account protection

Two-factor authentication, secure sessions and alerts for new sign-ins help keep your AFT AI account in your hands only.

Privacy first

We use your data only to provide the service. We never sell your personal or trading data. See our Privacy Policy.

Revoke anytime

Delete the API key on your exchange or disconnect inside AFT AI and access ends immediately. You can also delete your stored data on request.

Your exchange connection

Exactly the access we need, and nothing more.

When you create an API key on your exchange, you choose its permissions. Here's what AFT AI needs and what it doesn't.

  • Read: required. Lets AFT AI see balances, open positions and trade history to tailor its guidance.
  • Trading: not required. You place every trade yourself on your exchange.
  • Withdrawals: never. Always leave this off. AFT AI will reject any key that has withdrawal permission enabled.

Recommended API key settings

Example from a typical exchange's API settings

Enable readingRequired
Enable spot & margin tradingNot required
Enable futuresNot required
Enable withdrawalsNever, keep this off
Tip: if your exchange supports it, restrict the key to trusted IP addresses for extra protection.
Your checklist

Six steps to a safer trading setup.

Security is shared. Here's what we recommend on your side.

01

Turn on 2FA everywhere

Use an authenticator app, not SMS, on both your exchange and your AFT AI account.

02

Use a dedicated API key

Create a new key just for AFT AI so you can revoke it without affecting anything else.

03

Keep withdrawals disabled

Never enable withdrawal permission on any API key you share with a third-party service.

04

Whitelist IP addresses

If your exchange supports it, lock the key to the IP addresses shown in your AFT AI setup screen.

05

Use a unique password

Use a password manager and a different, strong password for every financial account.

06

Watch for impersonators

Only trust emails from @advanced-financial.online, and when in doubt, call us at +1 (772) 315-5034.

We will never ask for your passwords, 2FA codes, seed phrases or private keys, and we will never ask you to send crypto to us or to any wallet. Anyone who does is not Advanced Financial Technologies. Report it to support@advanced-financial.online.

Responsible disclosure

Found a security issue?

We welcome reports from security researchers. If you believe you've found a vulnerability in AFT AI, please email us with the details and steps to reproduce. Please don't publicly disclose the issue or access other users' data while we investigate.

Report a vulnerability

What to include

  • A description of the issue and its impact
  • Steps to reproduce, with URLs or screenshots
  • Your contact details for follow-up

We'll acknowledge your report promptly and keep you updated as we investigate and fix it.

Start in minutes

Trade with a smarter guide at your side.

Connect your exchange, set your risk limits and get your first AI briefing today. Start free and upgrade when you're ready.