How we rate security
Placeholder. The security rating shows how an exchange handles your data: what it logs, whether it keeps IP addresses, when it hands data to authorities, how it applies AML rules and when it asks for KYC. It is set by hand after reading the policies and asking the exchange.
Placeholder. This is not the Trust Score. Trust Score measures how well swaps go through, the security rating measures what happens to your data.
What we check
- Logs
- Placeholder. What the exchange writes to its logs about a swap and for how long it keeps them.
- IP addresses
- Placeholder. Whether IP addresses are stored, for how long and whether they are tied to a swap.
- Requests from authorities
- Placeholder. When and how the exchange hands data to law enforcement, and whether it reports such requests.
- AML
- Placeholder. How anti money laundering checks work, what triggers a hold and what happens to the funds.
- KYC
- Placeholder. When the exchange asks for identity documents and what it does with them afterwards.
Four levels
Level 1 - Minimal
Placeholder. Logs and IP addresses are kept with no stated retention period, data goes to authorities on request, KYC is required for most swaps.
Level 2 - Basic
Placeholder. Logs and IP addresses are kept for a stated, limited period. Data goes to authorities only on a formal request. KYC is risk based.
Level 3 - Good
Placeholder. Logs are minimal and IP addresses are not stored beyond the session. Requests from authorities are reported. KYC only when AML rules flag a swap.
Level 4 - Strong
Placeholder. No logs or IP storage beyond what the swap needs, a published transparency report, risk based AML checks and no blanket KYC.
How often we re-check
Placeholder. Every rating is reviewed at least once a quarter and whenever the exchange changes its policy. The check date is shown next to every shield.