Security
Your brokerage login never touches QuantOS
QuantOS connects to Charles Schwab through Schwab’s official OAuth sign-in. You approve access on Schwab’s own page, and QuantOS receives a token, never your password.
Brokerage Connection
How the Schwab connection works
Sign In on Schwab
You sign in and approve access on schwab.com. QuantOS never sees or stores your Schwab username or password.
Encrypted Tokens
The access token Schwab issues is stored encrypted and refreshed automatically while it is valid.
Weekly Re-Approval
Schwab requires you to approve the connection again every seven days. QuantOS tells you when it is due.
Read-Only Review
Trade review reads your accounts, transactions and market data. Reviewing a trade never sends an order.
Your Data
What QuantOS keeps, and what it doesn’t
Stored
Your account email, your imported transactions and round trips, journal entries you write, and options snapshots recorded during sessions.
Never Stored
Brokerage usernames, passwords or security answers.
Never Sold
Your trading record is not sold, shared with advertisers or used to trade against you.
Encrypted in Transit
All traffic to quantoslabs.com and to the application uses HTTPS.
Before Public Sign-Up
Being built now
QuantOS is in private early access. These protections must be in place and tested before sign-up opens to the public.
Server-Side Access Checks
Every private API and data stream will check the signed-in user on the server, not only in the browser.
Per-User Isolation
Each user’s accounts, trades and journal will be readable only by that user.
Google and Apple Sign-In
Sign in with a Google account or Apple ID, including on iPhone.
Verified Billing
Subscription status will be confirmed by the payment provider, not by a browser redirect.