Security
Here is what is true today. What is not yet true is not here.
The main thing: we hold nothing
Arvenyx does not have your money or your securities, and cannot move them. What is stored are numbers describing what you hold elsewhere. If Arvenyx disappears tomorrow, your portfolio is still yours and still where it is.
Credentials
- Broker passwords
- None are asked for. The connector that needed one, DEGIRO's, is disabled and not offered.
- Exchange keys
- Read-only. The screen tells you which permissions to tick and which not to; the withdrawal one must never be ticked.
- Send orders
- Disabled. It is switched on exchange by exchange, with a ceiling per order, a dry run by default and a separate confirmation. It is in no paid plan.
- Wallet addresses
- Public ones only. Never a private key or a recovery phrase.
- Your password
- Stored with scrypt and its own salt, not in the clear. If you forget it, the sign-in screen (web or app) emails you a link to set a new one, valid for 24 hours, once.
- Stored secrets
- Exchange and Anthropic keys, the Telegram token and the two-step verification secret are stored encrypted on disk (Fernet: AES and HMAC), with a key kept outside the data folder.
What the encryption protects and what it does not
Secrets are stored encrypted and the key is on the same server, but outside the data folder. That protects a backup that falls into someone's hands; it does not protect the server. Anyone who gets in as administrator has everything anyway, and saying otherwise would be selling you a security that is not there.
Where the data lives
- Server
- Hetzner, Helsinki (Finland). Inside the European Union.
- Traffic
- Encrypted with TLS. Certificate from Let's Encrypt.
- Cookies
- One: the session cookie. HttpOnly, SameSite Lax and Secure. No tracking or advertising cookies.
- Analytics
- None. The public pages load no third-party file at all: no fonts, no scripts, no pixels.
What we cannot tell you yet
Where the market prices will come from when Arvenyx is sold, with what delay and what coverage. A provider contract is being negotiated and until it is signed we will say nothing, because what we said today might not be true tomorrow.
If you find a security problem, write to us before publishing it. It gets answered and fixed.