AgentTrading
How it works
AI stock analysis AI stock research Backtesting software Strategy builder Fundamental analysis Options backtesting Risk analysis Historical data Portfolio backtesting Stock analysis tools Best AI trading software AI investing tools AI stock trading AI trading agent ETF backtesting Dividend backtesting Covered call backtest Momentum backtest Moving average crossover RSI backtest TradingView backtesting Automated trading platforms Historical options data Stock backtesting Sharpe ratio calculator AI swing trading AI day trading TrendSpider pricing AI equity research Trade Ideas pricing Finviz pricing Investment research software Koyfin pricing Backtesting for advisors Non-professional subscriber Screener with backtesting QuantConnect pricing Option Alpha pricing YCharts pricing Bloomberg alternative for advisors Bloomberg Anywhere cost FactSet cost Morningstar Direct cost LSEG Workspace pricing Value Line subscription cost Portfolio Visualizer cost Stock Rover pricing GuruFocus pricing Seeking Alpha pricing Zacks pricing Motley Fool pricing Benzinga Pro pricing Danelfin pricing Tickeron pricing TC2000 pricing MetaStock pricing
Swing traders Day traders Long-term investors ETF investors Investment clubs Research teams Financial advisors
TrendSpider alternative Trade Ideas alternative Portfolio Visualizer alternative Tickeron alternative ChatGPT stock analysis Finviz alternative Seeking Alpha alternative Koyfin alternative TradingView alternative Danelfin alternative thinkorswim alternative Composer alternative E*TRADE alternative TradeStation alternative AmiBroker alternative Fidelity alternative Webull alternative Interactive Brokers alternative tastytrade alternative Stock Rover alternative QuantConnect alternative NinjaTrader alternative
Pricing Blog FAQ Log in
Get started

Security review

Security overview for research teams

What we do to protect a team's analyses and the people who run them. Security questionnaires go to [email protected] with your account number, and we answer them in writing. The Data Processing Addendum is accepted on the team page of an Enterprise bench.

Encryption in transit

Every page, the bench and the API answer over HTTPS only. Plain HTTP is redirected to HTTPS.

Private links stored as hashes

A bench link and a seat link are random 48 character tokens. We keep only a one way SHA-256 hash of each, so a copy of the database opens nothing. A link nobody uses for 30 days stops working, and a fresh one is a Log in request away.

API keys stored as hashes

An API key is shown once, when it is created. We keep a hash and the last four characters, nothing that works as a key.

Single sign-on

OpenID Connect with PKCE, or SAML 2.0 with a signed response checked against the certificate your admin saved. The ID token is verified against the provider's published keys, issuer, audience, expiry and nonce. The OpenID client secret is encrypted at rest with the application key. Only the email domains your admin lists can sign in.

Roles checked on the server

Admin, analyst and viewer roles are enforced on every request, not by hiding buttons. A viewer cannot run an analysis even by calling the address directly, and a seat that is switched off opens nothing.

Isolation between accounts

Every analysis, watchlist and trail entry belongs to one account. A request for another account's analysis answers 404, the same as an address that never existed.

An append only trail

Analyses and account changes (invitations, roles, seats, single sign-on, billing details, DPA) are written to a trail that the application never edits or deletes. Admins export it to CSV at any time.

Card data never reaches us

Payments are taken on the payment processor's own hosted page. Card numbers never pass through or rest on AgentTrading servers.

No trading access

AgentTrading has no brokerage connection and cannot place, change or see orders on any plan. It reads market data and your thesis, nothing else.

Data location and sub-processors

The service is hosted in the United States. Sub-processor categories are cloud hosting, payment processing, transactional email delivery and market data supply, which receives ticker symbols only. The current list is available on request.