Trust Center – Security, Legal & Status

Plain-English summary

PipSync is a signal-routing platform. We never hold your money. We hold your broker API keys — encrypted, trade-scope only. Trading is risky. You can cancel any time. Operator details are in the legal notice.

View legal notice

Industry data indicates that 70–80% of retail trading accounts lose money when trading CFDs and other leveraged products. You should consider whether you understand how leveraged trading works and whether you can afford to take the high risk of losing your money.

Quick links: Security overview · Legal centre · Live status · DORA / NIS2 · AI governance

Security controls

Every control below is on by default. No asterisks, no enterprise-only paywalls for the basics.

Encrypted credentials

Broker API keys are stored with app-managed AES-GCM encryption and never returned in plaintext.

Trading-scope only

We request the minimum broker permissions to execute trades. No withdrawal scope is ever requested or accepted.

TLS in transit

HTTPS-only deployment with HSTS, secure cookies and legacy-TLS refusal across every endpoint.

Risk engine on by default

Per-trade risk %, daily drawdown cap, symbol allow-list and a news-event blocker run server-side for every account.

Workspace isolation

Every signal, key and order is scoped to your workspace. Server-side query guards block cross-tenant reads.

Audit trail

Account, billing, role and trading actions write structured audit events for review and export.

Vulnerability reports: support@pipsync.io. Security questionnaires and the current control inventory are available on request. The dedicated security overview remains available for teams that need a shorter procurement entry point. Live production availability is tracked at system status.

Terms of service

These terms govern your use of PipSync ("we", "us"). The current contracting-entity status and contact details are listed in the Impressum. By creating an account you accept these terms.

What PipSync does

PipSync is a signal-to-execution routing platform. We receive signals from sources you configure, optionally transform them, and submit orders to brokers on your behalf. We do not provide investment advice. pipsync, LLC is not a registered broker-dealer, investment adviser, futures commission merchant, commodity trading advisor or commodity pool operator, and is not registered with the SEC, CFTC, FINRA or NFA. We do not hold client funds.

Your responsibilities

You are solely responsible for the trading decisions executed through PipSync, including any rules, sources, and signal providers you connect.
You must comply with the terms of service of every broker and signal source you connect.
You must keep your account credentials secure. Enable 2FA.

Fees & cancellation

Subscriptions are billed monthly or annually in advance. You may cancel any time — access continues until the end of the current billing period. Cancellation and refund requests are governed solely by our refunds policy.

Liability

PipSync is provided "as-is". To the maximum extent permitted by law, our aggregate liability is capped at the fees you paid in the preceding 12 months. We are not liable for broker-side outages, slippage, or your own rule configurations.

Full text: /terms · German contract terms: /agb

Privacy policy

We collect only what we need to run the service. Namely:

Account data: email, name, billing address.
Broker credentials: API keys and tokens — stored encrypted, never shown back in plaintext.
Signal & order data: the things you route through us. Retained 12 months (Enterprise: 3 years) for audit.
Product analytics: page views, feature usage — pseudonymised, no third-party trackers.

We do not sell or share your data with advertisers. We do not profile you for marketing. Data export or deletion: support@pipsync.io or from Account settings.

Full text: /privacy

Risk disclosure

Trading leveraged products — FX, CFDs, crypto, futures — involves substantial risk of loss. You can lose more than you deposit. Past performance of any signal source, broker, or routing rule does not guarantee future results. Only trade with capital you can afford to lose. Seek independent financial advice if you're uncertain.

PipSync is a technical routing tool. We do not assess whether any signal, source, or trade is suitable for you. We do not recommend specific trades, sources, or brokers. Connecting a third-party signal source means you accept its risks.

Full text: /disclaimer · Performance disclaimer ·

Cookies

We use a small number of strictly-necessary cookies to authenticate your session and remember UI preferences (dark mode, time-zone). We do not use cookies for advertising, retargeting, or cross-site tracking. Optional analytics cookies (self-hosted, aggregated) are only set if you turn them on when you first visit.

Full text: /cookie-policy

Compliance roadmap

We're small, we're honest about it. Every compliance milestone — on the record. Certifications (SOC 2, ISO 27001) are only stated once an independent report exists and is published through the same Trust process.

Q2 2026