Security | Quantmind

We never hold your broker password

The Expert Advisor runs inside your own MetaTrader 5 terminal using your existing broker session. Your broker login and password are never collected, transmitted, or stored by us, and we will never ask for them.

What survives a dropped link

Through the Expert Advisor, a safety layer runs locally inside your terminal, so an open position keeps being managed by hard local rules even if the connection to our backend fails entirely. Through the hosted connection there is no local component, and the protection is ours to keep running. Which of the two applies to you is set by how your account is connected.

You control connected accounts

Quantmind can only trade on accounts you've explicitly connected, and you can disable algo trading on any of them yourself, instantly, from the customer portal.

What's actually at stake

Quantmind places real orders on real money. The security question isn't only "could data leak" but "could someone move a position they shouldn't". Both matter, and the second is the one that costs immediately.

We never hold your broker credentials

This is the single most important design decision here. The Expert Advisor runs inside your own MetaTrader 5 terminal and uses the broker session you're already signed in to. Your broker username and password are never transmitted to us, never stored by us, and we will never ask for them, including in a support ticket.

It follows that a breach of our infrastructure does not hand anyone your broker login, because we don't have it to lose.

What we do hold

Your licence key, which activates the EA. Treat it like a password: anyone with it could run the EA.
A connection identifier, generated by the Expert Advisor on your own machine, which tells us a licensed connection is live. It is not your account number, and we never receive one.
Trade and account state shared by the EA (open positions, balance, margin) so the engine can manage risk. Used for operating the strategy, nothing else.

Authorisation is yours to revoke

The EA only trades accounts you've explicitly authorised, and you can disable algo trading on any of them yourself, instantly, from the portal. Disabling it stops new positions being opened; it does not close positions already open, which remain yours to manage in your terminal.

If our backend is unreachable

The Expert Advisor runs inside your own MetaTrader 5 terminal, and a local safety layer runs with it. An open position keeps being managed by hard local rules, including tightening stops or closing the trade, even if our infrastructure is down entirely. Availability problems on our side degrade the service rather than endanger an open position.

Reporting a vulnerability

Report to quantmind@quantintelligence.co with "Security" in the subject, and give us a chance to fix it before disclosing publicly.

What helps most, specific to Quantmind:

The EA version and your MetaTrader 5 build number.
Your broker or funding company, and whether the account is demo, evaluation, or funded.
Never send your broker password or account number, we don't need either and won't use them.
What the EA's log in the MT5 Experts tab shows around the issue.
For anything touching licensing, the behaviour you saw, not your licence key itself.

Please don't test against other people's accounts, and don't run anything that would place orders on an account you don't own. We won't pursue researchers acting in good faith within that boundary. We don't run a paid bounty programme today; this page will say so if that changes.

Your data

Quantmind's privacy policy covers what's collected, how long it's kept, where it's processed, what rights you have over it, and how to exercise them.