Security & licensing
Built to protect
the money you allocate
Copy trading only works if the money behind it is safe. Here's the model Twofold is designed around, the standards it's being built toward, and the licences a real launch would need.
Prototype notice. Twofold is a design prototype. It is not a licensed or registered financial service and holds none of the certifications or licences described below. This page shows the intended security model and the standards a real launch would have to meet — nothing here is an audited or regulatory fact yet.
Your funds stay yours
Twofold is non-custodial by design. Trades settle from your own wallet, and copying only ever touches the amount you choose to put behind a trader.
Non-custodial by design
You connect your own wallet and approve the setup. Twofold never holds your funds and can't move them without your signature.
Copy stop
Copying ends on its own if your copy falls past the limit you set — for example 20% — so a trader's bad run can't drain your allocation.
Position caps
Cap any single copied trade to a share of what you allocated, even when the trader you follow sizes up far more aggressively.
Pause and exit
Pause new trades and keep what you hold, or close every copied position in a single step, whenever you want.
Guardrails, always on
Beyond the limits you set, Twofold is designed to watch copied activity and step in before a loss runs away from you.
Continuous monitoring
Every copied trade is checked against your limits in real time, so a position that breaches your stop or cap is acted on immediately, not at the end of the day.
Clear alerts
When something changes — a stop triggers, a trader's risk spikes — you get a plain-language alert that says what happened and what, if anything, you need to do.
Adaptive response
The system is designed to judge each situation on its own: a gentle prompt for a small wobble, an automatic pause when risk or possible fraud is detected.
Scam-pattern checks
Traders and the assets they trade are screened against known scam and wash-trading patterns, with the checks widening as new tactics appear.
Standards we build toward
These are the security and privacy standards the platform is being engineered to meet. For this prototype none have been audited or awarded yet — each is a target, not a claim.
Independent review of how security, availability and confidentiality controls operate over time — the baseline audit we intend to complete before handling real client funds.
The international standard for information security management — a structured, independently audited system for identifying and reducing risks to your data.
Security controls specific to cloud services, covering how a platform like Twofold should be configured and operated on cloud infrastructure.
Licensing roadmap
Copy trading of stocks and crypto is a regulated activity in most places. These are the kinds of registration a real Twofold launch would need — none are held today, and the list is illustrative, not legal advice.
Illustrative roadmap · prototype · not legal advice
Report something
Found a security issue?
If this were live, this is where you'd reach the security team. For the prototype, there's nothing to disclose yet — but the channel belongs here.
Responsible disclosure