Answers to the questions that matter.

No. Zephirex is a non-custodial platform. We never hold, transfer, or withdraw your capital. API connections are read-only by design, and withdrawal permissions are rejected at the integration layer — we cannot move your funds even if asked.

Keys are encrypted at rest using AES-256 under application-layer credential isolation. The encryption key is derived from your account credentials and is never stored in plaintext on Zephirex servers. Secret values are never logged or exposed in plaintext after submission. Access requires your account credentials plus mandatory 2FA, and credentials are only accessed within a strictly isolated execution boundary during live strategy runs.

Yes. TOTP-based 2FA is mandatory for every account and for any sensitive operation, including API key management and strategy deployment. We do not support password-only access to privileged actions.

Coinbase is live today — connect via read-only API and get full analytics immediately. Kraken support is coming soon. Additional exchanges are planned as the platform grows, prioritized by regulatory coverage and API quality. All connections are read-only by design; withdrawal permissions are rejected at intake.

No. The paper trading sandbox runs on real-time market data with virtual capital and requires no exchange connection at all. You can build, test, and refine strategies without ever creating an API key.

Yes — and we strongly recommend it. We enforce read-only scope wherever possible and reject keys that include withdrawal permissions. Read-only keys let us read balances and trade history for analytics without any ability to act on your account.

Execution is opt-in and only available via ZephirexCORE on Pro and above. By default the platform is analytics and simulation only. When you enable execution, it requires a separately scoped key and explicit confirmation per strategy.

ZephirexCORE is the strategy layer — a visual builder plus SDK to design, backtest, deploy, and monitor trading logic. Build with drag-and-drop nodes or code directly against the SDK, then run strategies against historical data before going live.

Yes. Backtests run against historical trade-event and OHLCV bar data with configurable fees, slippage, and latency assumptions so results approximate live conditions. Each backtest is pinned to an immutable dataset version to guarantee reproducibility. Past performance never guarantees future results.

Yes. Pro and Institutional plans support unlimited paper portfolios and parallel strategy runs, so you can test many hypotheses simultaneously without interference.

Yes. ZephirexCORE includes a community marketplace where builders can share, import, and fork strategies. Imported strategies run in your sandbox first — you review the logic before anything goes live.

Yes. Starter is free forever and includes real-time analytics plus the paper trading sandbox. No credit card required.

Yes. Paid plans cancel at the end of the current billing cycle with no penalty. You keep access through the period you already paid for.

Yes. Institutional plans are custom-quoted and include SSO, role-based access, the automation engine, API access, dedicated onboarding, and an SLA. Contact us for a conversation.