Nine protection layers
From 2FA to audit history, each layer is described below with practical steps.
Encrypted end to end
Data is protected in transit and at rest across all systems that store it.
Humans on call
If something looks wrong, the incident channel puts a person on the case fast.
1. Two-factor authentication (2FA/MFA)
Two-factor authentication adds a second step to sign-in: after your password, you confirm a code from an authenticator app. We support time-based one-time password (TOTP) apps, and 2FA is mandatory for withdrawals and changes to payout details. Turning it on is optional for sign-in, but we strongly recommend enabling it the day you register — it takes one minute and protects the parts of your account where money moves.
If you lose your device, recovery is handled through the support team with identity verification. Expect to answer questions about recent account activity and provide identity documents; recovery is deliberately slower than normal sign-in, because it should be.
2. Encryption of data
All traffic between your browser and the platform is encrypted with TLS. Data at rest — identity documents, contact details, transaction records — is encrypted at the storage layer of each system that holds it. Access to decrypted data is limited to the systems and roles that need it: compliance staff for verification documents, support staff for contact details, and nobody gets blanket access to everything.
3. Fraud and phishing protection
Official messages from Neural Edge AI come only from our own domains. We never ask for your password, 2FA codes or remote access to your device. Messages about withdrawals or "account problems" that create urgency are a classic phishing pattern — pause and verify. If a message looks odd, forward it to [email protected] and we will confirm whether we sent it. The Fraud warning page lists the clone-company patterns we currently see.
4. Sign-in notifications
Every sign-in from a new device triggers an e-mail notification with the device type, approximate location and time. If you receive one of these and it was not you, change your password immediately, review active sessions and contact support. Notifications about suspicious activity — for example repeated failed password attempts — follow the same route.
5. Device and session management
The dashboard shows every active session: device, browser, IP address and last activity. You can end any session with one click, which signs that device out. Sessions end automatically after a period of inactivity, and changing your password invalidates all other sessions. If you share a computer, sign out when finished — the session list is how you verify nothing is left open.
6. Account recovery
Password resets always require access to the registered e-mail, and identity confirmation for accounts with 2FA enabled. Recovery requests are handled by the support team, not an automated process — a real person verifies that the requester is the account owner. This makes recovery slower than a one-click reset, and that is intentional: a fast reset process is a fast break-in process.
7. API key rights
Connecting an exchange account uses API keys you create yourself on the exchange, with rights you choose. The platform needs reading and trading rights to work, but withdrawal rights are never required — leave withdrawal permission disabled when you create the key. We store keys encrypted, scope them to the minimum rights needed, and display them masked after the initial setup.
8. Audit history
Sign-ins, API connections, strategy starts and stops, settings changes and payout detail edits are all recorded with time and IP. The history is available to you in the account dashboard, so you can verify that every action listed was yours. If you see something you did not do, the audit entry is the starting point for the investigation — report it through the incident channel below.
9. Incident support
If you suspect unauthorised access, write to [email protected] with "URGENT" in the subject. The account can be temporarily blocked while the situation is reviewed. Expect an acknowledgement within one working hour on business days, a named person handling the case, and plain-language updates as the review progresses. After the review you receive a summary of what happened and what was changed.
Security is a shared effort: we protect the platform, and these nine steps protect your account. When in doubt, ask — a two-minute e-mail is cheaper than a recovery process.