Skip to content
AlgoX, trading beyond emotion

Security and compliance

Technical and organizational measures that protect client data, trading operations, and system integrity.

Overview

Last updated: June 4, 2026. Contact: info@algox.ae.

Security is built into every layer of the infrastructure. This page outlines the technical and organizational measures in place to protect client data, trading operations, and system integrity.

1. Hosting infrastructure

The trading bot and client systems are hosted on enterprise-grade VPS infrastructure.

  • Dedicated VPS with isolated environment per client deployment
  • 99.9% uptime SLA with redundant network connectivity
  • Automated daily backups with offsite storage
  • DDoS protection at network level
  • Regular OS and dependency patching

2. Data encryption

All data in transit is protected using TLS 1.2/1.3. Sensitive credentials such as MT4 investor passwords are stored using AES-256 encryption at rest. We never store withdrawal-capable broker credentials. Only read-only investor access is used.

3. Access control

  • Role-based access control for internal team members
  • Multi-factor authentication required for administrative access
  • SSH key-based authentication for VPS access. Password login disabled
  • Principle of least privilege applied across systems

4. Penetration testing

To request a summary of the latest security assessment, email info@algox.ae with the subject Security Brief Request.

  • Automated vulnerability scanning
  • Manual penetration testing conducted periodically
  • OWASP Top 10 review for client-facing web applications
  • Findings are remediated and documented internally

5. GDPR compliance

We are committed to GDPR compliance for EU-based clients.

  • Lawful basis documented for all data processing activities
  • Data minimization: we only collect what is necessary
  • Right to erasure supported. Data deleted within 30 days of request
  • Data Processing Agreements available on request
  • No data sold or transferred to unauthorized third parties

6. Broker and platform security

  • We operate via MT4 investor credentials and cannot withdraw funds
  • Client broker accounts remain in the client's name at all times
  • All trading activity is independently verified and visible on Myfxbook

7. Incident response

In the event of a security incident:

  • Affected clients will be notified within 72 hours of a confirmed breach
  • Immediate steps will be taken to contain and remediate the issue
  • A post-incident report will be shared with affected parties
  • Regulatory authorities will be notified where legally required

8. Uptime SLA

Hosting targets 99.9% uptime. Downtime caused by broker-side issues, MetaTrader platform outages, or force majeure is excluded from SLA calculations.

Request a security brief

Enterprise clients and institutional partners may request a detailed Security Brief covering technical controls, compliance posture, and third-party assessment summaries. Email info@algox.ae. We aim to respond within 2 business days.