Security
Security is non-negotiable
How we protect your account, your data and our infrastructure.
Encryption everywhere
TLS 1.3 in transit. AES-256 at rest. Field-level encryption for sensitive metadata.
Read-only exchange sync
We never touch private keys. Exchange integrations use read-only API keys.
SOC 2 Type II in progress
We're mid-audit. Our controls map to industry standards for controls and monitoring.
Isolated production
Least-privilege access, hardware-key enforced admin, and audited change management.
Penetration testing
Regular third-party pentests. Fixes are shipped within our published SLAs.
Responsible disclosure
Found something? Email security@barnacle.ai. We respond within 24 hours.