Usage Analytics
We use anonymous usage statistics (Umami) to improve our product. No cookies, no personal data. You can change this anytime in Settings.
This page provides an overview of TradingControl's compliance status. All information is based on our internal assessment and does not replace legal advice.
Last updated: 2026-03-14
Privacy Policy (Art. 13/14)
/datenschutz
Consent Management (Art. 7)
Analytics Opt-out, Mentoring Consent
Data Export (Art. 15/20)
JSON/CSV/XML Export
Right to Erasure (Art. 17)
Full account deletion
Encryption (Art. 32)
AES-256-GCM, bcrypt, TLS
Records of Processing (Art. 30)
Documented
Data Processing Agreements (Art. 28)
DPA list maintained
DPIA (Art. 35)
Created and documented
Data Breach Notification (Art. 33/34)
Process documented
Password Hashing
bcrypt (12 rounds)
Two-Factor Authentication
TOTP + Backup Codes
Rate-Limiting
Redis-backed, multi-layer
Security Headers
Helmet.js, CSP, HSTS, Permissions-Policy
Input Validation
XSS, SQLi protection
Audit-Logging
HMAC-signed — historical entries without integrity hash
TLS/HTTPS
Let's Encrypt, HSTS
Incident-Response-Plan
Documented (NIS2)
Disaster Recovery
RTO 4h / RPO 1h — documented, restore test pending
Dependency Scanning
npm audit, CI/CD
Penetration Testing
Concept documented, first test pending
BaFin/WpHG Disclaimer
Landing, Footer, ToS
Risk Warning
ToS §13, FinanceDisclaimer
Mentoring Disclaimer
Educational, not financial advice
DATEV-Export
Tax advisor-compatible export
Tax Report
Capital Gains/Losses (FIFO)
Impressum (§ 5 DDG)
/impressum
AGB
/agb (17 §§)
Right of Withdrawal
/widerruf
Cookie-Richtlinie (TTDSG § 25)
/cookies
Contact Form
/kontakt