Koinly Privacy Policy

Our Privacy Policy explains how we handle your personal data with the utmost care, in full compliance with GDPR and global privacy standards.

🛡️

SOC2 Compliant

Our systems undergo annual independent audits to ensure compliance with global data security standards.

🔐

AES-256 Encryption

All sensitive data is encrypted at rest and in transit using the most robust protocols available.

✅

GDPR Certified

We fully comply with European data protection regulations, providing transparency and complete control over your data.

Zero-Trust Architecture in Koinly Security

The Zero-Trust principle means that every action within the Koinly Security system requires verification, completely eliminating the possibility of unauthorized access.

Cryptocurrency platform security is not just a set of protective measures; it's a philosophy. At Koinly Security, we assume that any system can be attacked, and therefore we build our defenses so that even if individual nodes are compromised, the overall security of user accounts remains intact. Our architecture is divided into isolated segments, each with its own access keys and verification algorithms.

On the koinly.gb.net website, we use modern HSM (Hardware Security Modules) technology to store the most sensitive cryptographic keys. These are physical devices protected against tampering and have no direct internet connection. Thus, even a theoretical remote breach of our servers does not give attackers access to your secrets.

API Security: Read-Only Access

We understand users' concerns when granting access to their exchange accounts. That's why Koinly Security operates strictly on a "Read-Only" basis. Our system technically cannot:

Withdraw funds from your exchange.
Create new orders or execute trades.
Change your account settings on third-party platforms.

With every Koinly login, the system checks the status of your API keys and notifies you if security settings have been altered. We recommend our users severely restrict access privileges when creating keys on exchanges.

The Golden Rule of APIs

Never activate the "Enable Withdrawals" option when creating an API key for Koinly. This simple measure provides 100% protection for your exchange funds against any interference from our service.

International Compliance and Independent Audits

User trust is built on transparency. Koinly Security regularly invites leading global cybersecurity firms to conduct penetration testing and code audits. We are proud to be SOC 2 Type II compliant, which validates our strict policies and procedures for data security control.

Furthermore, we actively collaborate with regulators in Canada, the US, the UK, and Australia to ensure our reports always meet the latest requirements. Your peace of mind is the result of our years of work building relationships with government agencies and adhering to international legal standards on the koinly.gb.net domain.

Internal Controls and Personnel Security

We believe that security starts from within. All Koinly Security employees undergo thorough background checks before hiring. Access to production systems is restricted based on the principle of least privilege, granted only for the duration of a specific task, with mandatory logging of every action.

We enforce mandatory multi-factor authentication (MFA) for all internal company services. Our security team regularly conducts training to prevent threats like social engineering, phishing, and targeted attacks on infrastructure. At Koinly, security is a culture shared by every team member.

Data Privacy by Default

Koinly does not sell or share your data with third parties. We monetize through user subscriptions, not by selling confidential information. All transaction data is stored in encrypted databases, accessible only by you through your Koinly login.

We strictly adhere to the "right to be forgotten." If you decide to delete your account, all your data will be permanently erased from all our servers, including backups. We value your privacy just as much as you do.

Deep Dive into the Koinly Security Ecosystem

When we talk about Koinly Security, we refer to the silent operation of thousands of algorithms monitoring the safety of your financial future. The cryptocurrency market is a target for attacks. However, our architecture creates an impenetrable barrier around your Koinly login.

Technology Stack

Hosted in Tier IV cloud data centers with 99.9% availability. Traffic between your browser and our servers is secured by TLS 1.3 with Perfect Forward Secrecy.

Anti-Phishing & Social Engineering

We embed anti-phishing codes in all emails so you can always verify the authenticity of a Koinly message. The Security Checkup feature analyzes your profile, suggesting password changes or 2FA implementation.

The Future of Cybersecurity

🤖

AI and Machine Learning

Detection of "impossible travel" (e.g., logging in from London and Singapore back-to-back) leading to automatic account lockouts.

⚛️

Quantum Encryption

Exploring quantum technologies to make data interception physically impossible in the near future.

🐛

Bug Bounty Community

Engaging independent security experts worldwide to find vulnerabilities before malicious actors do.

Security as the Foundation

Investment is about trusting the future, and trust is impossible without exceptional security. By choosing Koinly Security, you gain peace of mind and confidence in the accuracy of your taxes and the privacy of your data. Implementing cutting-edge standards on koinly.gb.net places your well-being as our highest goal.

Frequently Asked Security Questions

All user data is stored on highly secure Amazon Web Services (AWS) servers located in the US and EU, meeting the highest industry security standards.

No. Koinly technically has no access to your private keys or funds. The entire integration process operates via Read-Only APIs, which physically prohibit transaction execution or fund withdrawals.