Security & Trust
Helix is engineered for serious traders, prop firms, and funds. Security and data isolation are foundational — here's how we protect you.
All traffic between your browser, the connector, and Helix is encrypted with TLS. Connection keys are transmitted over secure channels only.
Every user's data is scoped to their authenticated identity and enforced at the database layer. No customer can ever see another's accounts, signals, or executions.
Sign-in is handled by Google Firebase Authentication with email/password and Google SSO. We never store your password.
Your broker credentials and order routing never leave your machine. The connector is read-only and off the order path — it streams telemetry up, nothing down.
Helix runs on Google Cloud, Firebase, and Vercel with least-privilege service accounts and database rules that deny cross-tenant access by default.
Subscriptions are processed by Stripe. Helix never sees or stores your full card details.
Our models and intellectual property remain on the server and are never shipped to clients or exposed through the API.
A prop-firm-grade risk engine gates every order, with transparent rejection reasons — reducing the chance of runaway automated behavior.
Live system status is shown in-app under System once you're connected.
We welcome reports from security researchers. If you believe you've found a vulnerability, please email helixquantumsolutions@gmail.com with details and steps to reproduce. Please don't access other users' data or disrupt the service while testing — see our Acceptable Use Policy.
Read more in our Privacy Policy and Terms of Service.