Local encrypted keys
Exchange API credentials are encrypted and stored on the customer-owned appliance.
All features
Custody and credential boundary
Customer-Controlled Security
Trading access stays with the customer: encrypted exchange credentials live on the Box and assets remain in customer-owned accounts.
AvailableBlack Box Crypto™ is designed around a clear custody boundary. The cloud coordinates software and intelligence, while the customer-owned appliance holds encrypted exchange credentials and sends orders directly to supported venues.
What it contributes
A focused capability inside the larger system
Customer custody
Assets stay in exchange accounts or customer-controlled vaults rather than a Black Box omnibus account.
Visible controls
Device health, service state, and trading permissions remain available to the customer.
How it works
A visible path from intent to outcome
-
01
Authorize
Create exchange credentials with the permissions needed for trading.
-
02
Transfer
Pair the encrypted credential package to the customer-owned Box.
-
03
Operate
The Box signs and submits authorized actions locally.
-
04
Revoke
The customer can disable exchange access directly at any time.
Controls and boundaries
Automation with a defined operating envelope
- Withdrawal permissions are not required for ordinary exchange trading.
- Secrets are not exposed to browser pages or public reports.
- Optional VaultFlow destinations use deposit-only addresses.