Security
Protection built into the foundations
Security at NovaTrade is structural. Access rules live in the database, privileged actions are authorised on the server, and every movement of money leaves a permanent record.
Custody
Client assets are held in segregated cold storage with multi-signature release and insured hot-wallet float for withdrawals.
Database-level access control
Row-level security means a signed-in user can only ever read their own wallet, trades, deposits and documents — enforced by the database, not the UI.
Authorisation on the server
Every privileged action runs through a server-side function that re-checks the caller's role. Admin capability can never be granted from the browser.
Immutable audit log
Balance adjustments, approvals, role changes and suspensions are written to an append-only audit trail with actor, timestamp and reason.
Verification & monitoring
Identity verification is mandatory before withdrawal, and transaction patterns are screened continuously for AML risk.
Treasury review
Deposits are credited only after on-chain confirmation, and withdrawals are locked and reviewed before release.
Protecting your own account
- Use a unique password you do not reuse anywhere else.
- Never share verification codes or screenshots of your balance with anyone.
- NovaTrade staff will never ask for your password or send you a private wallet address by message — deposit addresses only ever appear inside your dashboard.
- Report anything suspicious to our team immediately.