Security & governance
Your capital neverleaves your account.
Security at Uriel starts with a structural fact: you keep custody. We trade on your account through trade-only access and can never withdraw your funds. Around that, we apply institutional controls over access, data and infrastructure.
Trade-only API keys
You generate an API key with trade permission only — no withdrawal rights. We can place trades; we can never move your money.
Self-custody
Funds remain on your own exchange account at all times. You hold withdrawal rights and can move your capital whenever you choose.
Revoke anytime
You can revoke the API key in your exchange dashboard at any moment, instantly ending our ability to trade.
Security framework
Institutional controls, end to end.
The same discipline we apply to risk, we apply to systems and data.
Access control
Access to systems and operations is restricted and authenticated, with least-privilege as the default.
Permission separation
Duties and credentials are separated so no single point can both trade and move funds.
Data security
Sensitive information — including API credentials — is encrypted at rest and in transit.
Anomaly monitoring
Unusual activity is monitored continuously and can trigger protective responses.
Infrastructure protection
Systems are hardened to keep operations stable and resistant to unauthorised access.
Continuous oversight
Human oversight reviews system activity and handles exceptional events.
In abnormal conditions
The system is built to step back, not push forward.
In extreme volatility, macro shocks or unusual system load, Uriel can move to defensive mode, reduce exposure, halt activity partially or fully (Freeze Mode) and run system checks — protecting both capital and the system.
How risk management works →- Switch to defensive mode
- Reduce exposure
- Partial halt of activity
- Freeze Mode
- System integrity checks
Found a security issue? We welcome responsible disclosure. Contact security@uriel-group.com and we will respond promptly.
Control you can verify.
See the live track record, or request access as a qualified investor.