Separate responsibilities
Privileged database access, stock and crypto investment commands, provider adapters, webhooks, and authorization checks stay on the server. Browser components receive only the fields needed for their screen.
Security by design
Protection is a practice, not a headline.
SmartBrokerIA documents the controls that are implemented for stock, options, and crypto investing and keeps claims about security evidence-based.
Account controls
Authentication uses Supabase server-side sessions, safe redirect validation, refresh handling, recovery flows, and role checks close to sensitive data access.
Financial boundaries
Clients cannot post ledger entries or decide settlement outcomes for stock, options, or crypto investment activity. Financial commands require idempotency, a server-computed request, and an auditable state transition.
Evidence status
Hosted configuration, independent testing, and production monitoring are tracked separately from local implementation. This page does not claim certification, a penetration test, or a guarantee of safety.