Security

Boundaries set before anything runs

Alden is designed to ask before doing anything sensitive rather than acting first and reporting afterwards: its Governance Engine checks every action against rules you set before it runs. Quantmind is automated by design, and its limits are set in advance rather than confirmed action by action.

Isolation between products

Each product runs on its own infrastructure, with separate databases, independent authentication, and isolated deployments. A compromise of one product's systems does not extend to the other's.

Least data held

We aim to hold only what the product genuinely needs. Quantmind, for example, never collects or stores your broker account password or login credentials: the Expert Advisor runs inside your own MetaTrader 5 terminal using your existing broker session.

Reporting a vulnerability

If you believe you've found a security vulnerability in one of our products or on this website, please report it to us directly at contact@quantintelligence.co with "Security" in the subject line, and give us a reasonable opportunity to address it before disclosing it publicly.

A useful report generally includes:

• Which product or page is affected, and the version if you know it.
• Clear steps to reproduce the issue.
• What an attacker could realistically achieve with it.
• Any proof-of-concept material you're willing to share.

We ask that you don't access, modify, or delete data belonging to anyone else while investigating, don't run attacks that degrade the service for other people, and don't use social engineering or physical attacks against our staff or infrastructure. We won't bring a legal claim against researchers who report issues in good faith and within those boundaries.

We don't currently run a paid bug bounty programme. That may change, and this page will say so if it does.

Product-specific security

Each product documents its own security model in its own documentation, since the relevant details differ substantially between them:

• Alden: governance and permissions, how the Always / Ask Every Time / Never rules work across authentication, browser automation, and system actions, and how the trusted Workspace folder limits what Alden can reach.
• Quantmind: how it works, including the local safety layer that keeps an open position protected inside your own terminal even if the connection to our backend drops.

Data protection

How each product handles personal data, including retention, cross-border transfer, and breach notification, is set out in its own privacy policy: the company site policy, Alden's policy, and Quantmind's policy. What this site stores in your browser is covered separately in the cookie policy.

Contact

Security questions that aren't vulnerability reports can go to the same address: contact@quantintelligence.co