What we see, and what we never can

You are about to route your trading through us. Here is exactly what that does and does not expose.

A risk-enforcement layer sits in a sensitive place: between you and your broker. That position is what makes 12-millisecond interception possible, and it is also why you should demand a precise answer to "what can these people see?" Here it is.

What we never see: your MT5 password. Authentication happens the same way it does in MetaTrader itself — the credential lives inside that connection, is never written to our database, and is destroyed when you remove the account. There is no support tool, admin screen, or database row where your password exists. We cannot leak what we do not hold.

What we hold: your email, your rule configuration, connection metadata (broker, server, account number), and the trade and enforcement history needed to run your rules and show your analytics. That history is yours — export it or delete it with the account.

What we can do: evaluate and enforce the rules you configured — close positions, reject orders, pause trading. What we cannot do: place a trade you did not initiate, withdraw funds, or change where your money lives. Enforcement authority is deliberately narrow: the system can only ever reduce your exposure, never create it.

Everything is encrypted in transit and at rest, infrastructure is isolated per environment, and enforcement events are logged immutably — the audit trail in your console is the same one we debug from. Found a hole anyway? security@tradepanda.app. We pay for good reports and we answer fast.