Security

​

Data isolation

​

What Allocait never does

• Never places a trade. Every tool that changes your holdings only updates Allocait’s own record of what you hold, after you tell it about something that already happened.
• Never approves or stops an order. A change check states facts about your own rules. Allocait cannot approve, stop or place an order.
• Never connects to a brokerage or bank account.
• Never holds your funds or securities.
• Never sends an agent a price from its own data. Every price used to check or size a change is one the caller supplied. The agent surface returns no quote, day change, position value or portfolio total. A connection you sign in to yourself can also return standing, which carries no price. See Standing and Prices.

​

Market data

• Only Allocait’s servers author prices. The app receives price updates on a private channel. A signed-in browser with access to the app can read the channel but isn’t permitted to publish to it, so a browser has no way to push a price into your view. The app also validates each update before it uses it.
• Your browser never calls the provider. Prices come from Allocait’s own stored quotes, so your browser holds no provider key. The provider, Twelve Data, receives only ticker symbols. It never receives your account information, holding sizes, or other portfolio data.
• Symbol checks are limited. Allocait checks a symbol against its own list of supported instruments before anything goes to the provider, so made-up symbols don’t reach it. Symbol checks and live price registration have per-account limits.
• Quotes can go stale. If the provider is unavailable or rate-limited, Allocait pauses its calls and the app keeps showing the last stored quote, which is labeled Stale once it is old.

​

Policies

• Privacy policy
• Terms of service

​

Related