How we store your broker credentials

Every broker credential you connect is encrypted with AES-256-GCM before it's written to the database. The encryption key never leaves server-side environment configuration, and decrypted credentials exist only in memory for the duration of a single request that needs a live connection — they're never logged or cached in plain text.

This pairs with row-level security enforced on every table in the schema, so even a query bug in application code can't leak one account's data to another — the database itself refuses the read.