Trust & Governance Framework
Security, Compliance & Privacy Governance
TradingQuantz adheres to international ISO standards to ensure institutional security, data privacy, and reliable uptime.
Data Governance
4 Pillars of TQ Platform Security
TLS 1.3 In-Transit Encryption
All data transmitted between browsers, client terminals, and TQ APIs is encrypted using TLS 1.3 with ECDHE key exchange.
AES-256 Storage Encryption
Database backups, API secret keys, and user personal data are encrypted at rest using FIPS 140-2 validated AES-256.
HMAC SHA-256 Webhook Signatures
Every outbound webhook payload includes a cryptographic HMAC SHA-256 signature for payload verification.
ISO 27001 ISMS Certification
Formally documented Information Security Management System covering vulnerability scans and penetration testing.
Certifications & Roadmap
Compliance Standard Benchmarks
| Standard | Scope & Domain | Status | Audit Cycle |
|---|---|---|---|
| ISO/IEC 27001:2022 | Information Security Management System (ISMS) | Compliant | Annual Independent |
| ISO/IEC 27701:2019 | Privacy Information Management System (PIMS / GDPR) | Compliant | Annual Independent |
| ISO/IEC 27017 & 27018 | Cloud Services & PII Protection in Public Cloud | Compliant | Continuous AWS Monitoring |
| SOC 2 Type II | Trust Services Criteria (Security, Availability, Confidentiality) | Scheduled Q4 | 6-Month Observation Window |