Built so you never hand over your funds.
Baxia is designed around a non-custodial model with trade-only access. This page explains how that works, what we ask of you and how to report a concern.
Fund custody model
Your funds stay on your exchange.
Baxia does not hold customer funds. Your assets remain in your own account with your trading provider. Baxia sends trading instructions to that account through an API connection you create and control.
You can end that connection at any moment by deleting the API key on your exchange. Baxia then has no further access to the account.
API permissions
Only what trading requires.
When you create an API key on your exchange, enable only the permissions below. Baxia checks the key when you connect it and warns you if withdrawal access is enabled.
| Permission | Setting | Why |
|---|---|---|
| Read | Enable | View balances and binary contract positions |
| Binary Options Trading | Enable | Execute and monitor binary contract orders for your strategies |
| Withdrawals | Disable | Baxia never needs to move funds out of your account |
| Transfers | Disable | Not required for any strategy |
| IP restriction | Recommended | Limit the key to Baxia server addresses where your exchange supports it |
Trading permissions
Nothing trades without your approval.
- Strategies only trade the pairs and markets you select.
- No strategy starts until you validate and activate it.
- Pausing a strategy stops new orders immediately.
- You can always act directly on your exchange, independent of Baxia.
Account security and authentication
Protecting your Baxia account.
- Two-factor authentication
- Authenticator app based 2FA for sign-in and sensitive changes
- API key storage
- Keys are stored encrypted and are never shown again after you save them
- Session control
- View active sessions and sign out other devices
- Notifications
- Email alerts for new sign-ins and API key changes
Activity monitoring
Every action on the record.
The terminal keeps a timeline of configuration changes, strategy activations and pauses, and every order placed, filled, cancelled or rejected. You can review it at any time to see exactly what happened and why.
Risk controls
Limits above every strategy.
- Account drawdown limit. Pauses all strategies when reached.
- Exposure cap. Limits the share of your account in open positions.
- Pre-trade checks. Orders that break a limit are blocked and logged.
Risk controls reduce but do not remove the risk of loss. No system can be described as completely secure.
Security reporting
Found something? Tell us.
If you believe you have found a security vulnerability in Baxia, please report it privately so we can investigate before it is disclosed. Include a description, steps to reproduce and any relevant details.
- security@example.com
- Response
- We aim to acknowledge reports within [X] business days
- Please avoid
- Accessing other users' data, disrupting the service or public disclosure before a fix
Questions about security?
Our team will explain anything on this page in more detail.