100% NON-CUSTODIAL • SEBI NON-ADVISORY SAFE HARBOR

Capital Safety, Security & SEBI Compliance.

Understand how your funds and equities are legally protected by CDSL, NCL/ICCL Clearing Corporations, and MudraVault's Zero-Knowledge Multi-Tenant Vault architecture.

The 4-Layer Capital & API Security Architecture

Why your funds and broker credentials remain protected at every layer

1. Zero-Knowledge AES-256-GCM Credential Vault

Your personal broker API keys and secrets are encrypted at rest using AES-256-GCM authenticated encryption inside an isolated tenant container. Plaintext secrets are never written to disk or logs, and you can revoke or rotate your API key from your broker console in 1 second at any time.

2. CDSL Demat & Clearing Corp (`IPF ₹25L`) Protection

Your delivery stocks (`CNC`), ETFs (`LIQUIDCASE`), and Sovereign Gold Bonds sit directly inside CDSL / NSDL under your 16-digit BO ID—100% isolated from both MudraVault and your broker's corporate balance sheet. Uninvested broker cash is upstreamed daily to Clearing Corporations (`NCL/ICCL`) and insured up to ₹25 Lakhs under the NSE/BSE Investor Protection Fund (`IPF`).

3. Dedicated Static IP Whitelisting (2025/2026 SEBI Norm)

In compliance with SEBI and exchange retail algorithmic mandates, MudraVault never routes orders through shared residential proxy pools. All broker API calls originate strictly from our verified Dedicated Static Execution IP whitelisted inside your personal Zerodha Kite Connect / Dhan developer portal.

4. Hardware Authenticator TOTP & SIM-Swap Hygiene

We strongly recommend securing your Zerodha/Dhan login with an app-based TOTP Authenticator (Bitwarden, 2FAS, Google Authenticator) rather than SMS OTPs, and setting a SIM-PIN lock on your registered mobile number to eliminate eSIM/SIM-swap account takeover vectors.

SEBI Non-Advisory Safe Harbor & Regulatory Disclosures

Clear legal distinction between Software Automation Middleware and Investment Advisory

1. Pure Technology & Execution Middleware (Zero RIA / RA / PMS Activity)

MudraVault is strictly an automated order-routing, risk-shielding, and trade-journaling software platform. MudraVault is not a SEBI-registered Investment Adviser (`RIA`), Research Analyst (`RA`), Stockbroker, or Portfolio Management Service (`PMS`). We do not issue stock tips, buy/sell calls, guaranteed return claims, or personalized portfolio advice. Every subscriber brings their own broker API key (`BYO-Key`) and configures their own capital ceilings, risk shields, and execution toggles.

2. Mandatory SEBI Statutory Risk Study Disclosure (Jan 2023 / 2024 Study)

As mandated by the Securities and Exchange Board of India (SEBI): 9 out of 10 individual traders in the equity Futures and Options (F&O) segment incurred net losses. On average, loss-makers registered net trading losses close to ₹50,000–₹1,10,000+ per annum, and incurred an additional 28% of net trading losses as transaction costs. Those making net trading profits incurred between 15% to 50% of such profits as transaction cost. Algorithmic automation enforces discipline and capital ceilings, but does not eliminate market risk.

3. Power Trader 99.9% Platform Web SLA & Third-Party Force Majeure Waiver

The 99.9% uptime SLA included in the Power Trader (`₹9,999/mo`) plan applies strictly and exclusively to MudraVault's internal web application controllers, telemetry streams, and cloud databases. Because retail orders travel across external networks, MudraVault expressly disclaims liability for order delays, rejections, or slippage caused by third-party broker API outages (Zerodha Kite Connect, Dhan HQ), CDSL depository downtime, ISP submarine cable cuts, or NSE/BSE matching-engine halts.

Guide 01 →