Security
How FundedFleet protects your login and your data today, in plain terms.
Your login
Long passwords checked against known breaches, and two-factor with an app or passkey.
Your data
Row-level security on every table, enforced even for the table owner.
Your record
An append-only ledger in exact integers. Corrections stay visible.
Your login
- Passwords are at least 12 characters and are checked against known breaches without sending your password: only a 5-character hash prefix leaves our servers.
- Email verification.
- Two-factor with an authenticator app or passkeys.
- Two-factor is required for ledger corrections and billing changes.
Your data
- Every table is isolated per organization with Postgres row-level security, enforced even for the table owner.
- The ledger is append-only at the database level.
- Money is stored as exact integers.
Coming with cloud Terminals
Planned- Prop credentials will be encrypted on your device to a key that's generated inside your own Workspace. FundedFleet will store and relay only encrypted text.
- You'll hold the recovery key. FundedFleet won't keep a copy.
- No FundedFleet SSH keys or standing access on your Workspace. Support sessions will be granted by you, time-boxed and logged.
- Every order FundedFleet sends for you will be checked against your account's rules first. FundedFleet won't choose trades.