Trust Center
API2Trade connects your software to MetaTrader 4 and 5 accounts. This page explains who runs it, where your data lives, how it is protected and what happens when something breaks. It describes what we actually do today; we do not hold ISO 27001 or SOC 2 certifications and do not claim to.
Who we are
API2Trade is operated by Apex Vanguard Dynamics LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States, a limited liability company registered with the Wyoming Secretary of State under Filing ID 2025-001713271 (registry link in the imprint: https://api2trade.com/en/imprint/). Data protection contact: Robin Jones, support@api2trade.com. The Service is offered to businesses only.
Where your data is
Account data, connected MetaTrader accounts, the API servers and the encrypted database backups are in the European Union (Finland, Germany). If you choose private hosting in another region (for example the USA), the MetaTrader connections of those seats run in that region. These providers process data for us:
| Provider | Purpose | Where |
|---|---|---|
| Cloud hosting providers (names on request) | Servers for the website, dashboard, API and MetaTrader connections; encrypted database backups | EU (Finland, Germany); private-hosting seats: the region you choose (for example the USA) |
| Cloudflare, Inc. | DNS, TLS termination, DDoS protection and content delivery for all our domains | Global edge network; USA |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Payments and invoicing (your billing contact only) | Ireland; USA |
| Proton AG | Receiving and storing email sent to us | Switzerland |
| Email sending infrastructure (our own mail server, hosted by a cloud provider) | Sending account and product emails | United Kingdom |
| Telegram FZ-LLC | Delivering support chat messages to our support team (only what you write to support) | Global |
| Google Ireland Ltd. / Google LLC | Website analytics and ad conversion measurement, only with consent (Privacy Policy section 3); receives no data we process on your behalf | Ireland; USA |
The same list, with transfer safeguards: Data Processing Agreement, Annex 3 (https://api2trade.com/en/dpa/), and Privacy Policy, section 4 (https://api2trade.com/en/privacy/).
How we protect it
- TLS on every connection; HSTS on all our hosts.
- Broker passwords and two-factor secrets encrypted at rest with AES-256-GCM; account passwords stored only as salted scrypt hashes.
- Each connected MetaTrader account runs in its own isolated container with fixed memory and CPU limits.
- Server administration only through a private network with personal keys; there is no public SSH access.
- Our internal tools read customer data through a read-only database role that cannot see passwords or broker credentials.
- Two-factor authentication for your dashboard account; API keys can be limited to a single MetaTrader account; rate limits per key.
- We do not read or analyze the content of your API requests.
Availability and capacity
- Live status and incident history: published on our status page at https://status.api2trade.com/.
- Every server is health-checked every two minutes; a server that stops answering is taken out of service automatically and new capacity is added when free capacity runs low.
- We publish a written post-mortem on the status page after every incident that affects customers.
Backups
- The production database is backed up every night, encrypted with AES-256, and kept for 14 days.
- Restores are tested; the date of the last successful restore test is recorded internally and available on request.
Incidents
If a security incident affects your data, we notify you without undue delay and within 48 hours of becoming aware of it (see DPA section 8), tell you what happened, what data is affected and what we are doing about it, and follow up with a post-mortem.
Your documents
- Terms and Conditions (versioned, B2B): https://api2trade.com/en/terms/
- Data Processing Agreement (GDPR Art. 28, accepted with the Terms): https://api2trade.com/en/dpa/
- Privacy and Cookie Policy: https://api2trade.com/en/privacy/
- Responsible disclosure policy: https://api2trade.com/en/security/
- Security questionnaires: we answer them; write to support@api2trade.com.
Support
- Chat on this website and in the dashboard, answered by our support team; Telegram; email support@api2trade.com.
- Human 24/7 support: real people answer, 7 days a week, and the first response usually comes within a few hours. Outages are monitored around the clock.
- Replies may be drafted with AI help and are always checked by a person.