DATA SOVEREIGNTY & SECURITY

Privacy Policy & Security Architecture

Defense-Grade Zero-Knowledge Invariants • Version 6.1

Zero Front-Running Commitment: OBIQuant NEVER sells, analyzes, aggregates, or monetizes order flow, strategy parameters, or execution signals. Your algorithmic configurations and tax ledgers are cryptographically isolated per tenant.

1. Information We Collect

We collect minimal operator information necessary to authenticate tenants and execute instructions: operator email, hashed passwords (Argon2id), session tokens, and encrypted exchange API credentials.

2. Cryptographic Storage & AES-256-GCM

Exchange API keys are encrypted at rest using AES-256-GCM with tenant-isolated Additional Authenticated Data (AAD). Decryption keys are held in memory only for the microsecond duration required to sign order payloads.

3. Merkle Audit Chain Logs

Every critical action taken by an operator is cryptographically appended to an immutable SHA-256 Merkle chain. This guarantees transparent auditability for compliance and prevents retroactive tampering.