Non-custodial
CoinsAQ does not take custody of portfolio assets.
Security and user control
Your intelligence platform should not control your assets.
CoinsAQ helps you understand portfolios, risk, signals and market activity while keeping custody and final decisions with you.
Security reduces risk; it cannot eliminate market, integration or operational risk.
No seed phrases
Private keys and recovery phrases are never required or stored.
Least privilege
Read-only access is used wherever an integration supports it.
User controlled
AI analysis cannot silently become an asset movement.
A clear custody boundary
What CoinsAQ will never ask you to hand over.
Connecting portfolio context is not the same as transferring custody. Treat any request for these secrets as suspicious.
A wallet seed or recovery phrase
A wallet private key
Permission to withdraw assets for portfolio analysis
An approval hidden inside an AI conversation
AI with boundaries
AI can explain and prepare. It cannot silently execute.
CoinsAQ AI is designed to explain portfolio changes, risk, signals and market events using available inputs. Recommendations remain reviewable, timestamped decision support rather than financial advice or execution authority.
- Supporting portfolio and market inputs remain part of the answer context.
- Missing or stale data should be visible instead of presented as certainty.
- Conversation history does not replace user confirmation or a risk decision.
Guided trading · Coming Soon
Five gates between intelligence and execution.
This is the intended control model for future supported trading. It is not a claim that autonomous trading is available during beta.
- 01
Proposal
CoinsAQ prepares the exact asset, size, order type and venue details.
- 02
Confirmation
You review and explicitly confirm the proposal before it can advance.
- 03
Risk review
The current portfolio and proposed action receive a scoped risk decision.
- 04
Authorization
The approved request must match the signed execution authorization.
- 05
Safeguards
Kill-switch and execution checks must pass; missing approval fails closed.
Platform control model
Important decisions stay separated and auditable.
Controlled source of truth
Portfolio, risk, signal, trade and AI records reach the app through the authenticated CoinsAQ backend instead of exposing internal services to the client.
Separated responsibilities
Analysis, risk decisions, execution and portfolio monitoring remain separate responsibilities with explicit handoffs.
Authenticated service updates
Internal updates are authenticated before the backend accepts and stores user-facing state and operational audit records.
Fail-closed controls
A missing, stale or mismatched approval is not treated as permission to continue an execution workflow.
Report a concern
Help us investigate security issues responsibly.
Use the contact form with the subject “Security.” Do not include seed phrases, private keys, passwords, access tokens or other secrets in your report.