Security
Account security
Secure sessions, strong passwords, and MFA-ready architecture protect access to your account.
Data protection
We minimise stored personal data and apply encryption, access controls and audit logging.
Investment infrastructure
Regulated investment services, custody and execution are designed to run through authorised financial institutions — not Sturox Capital operating accounts.
Client assets
Client cash and investments are intended to be held with licensed partners. Specific protections will be disclosed when a partner is live.
Identity verification
KYC/identity checks are performed through regulated providers. We do not store unnecessary sensitive KYC documents locally.
Operational security
Rate limiting, CSRF protection, server-side provider calls, and immutable audit logs are part of the platform design.