Strategy Audit security

Uploaded or pasted strategy source is parsed as text only. VettaQuant never imports, executes, dynamically loads, or runs the strategy, Freqtrade, a backtest, or Hyperopt.

During processing, source is held in private server storage shared by the web service and audit worker. Deletion begins after processing succeeds or fails. Completed reports may retain the report itself, necessary limited evidence snippets, and a source hash; full source is temporary and is not part of the retained report record.

External AI processing infrastructure may temporarily process source to generate the requested audit. We do not promise a fixed or universal retention period, and we do not promise that source never leaves VettaQuant-controlled infrastructure.

The user-facing product uses neutral language for this processing and does not expose specific provider or model names.

Static analysis can describe code and identify risks to test. It does not prove profitability, future performance, or safety, and it is not investment advice.