← Back to home

Security

Version 1.0 · Last updated: July 14, 2026

Security by architecture. RailCall is designed to minimize attack surface by keeping your keys, code, and data on your machine. This page explains our security model, practices, and how to report vulnerabilities.

1. Local-First Security Model

BYOK (Bring Your Own Key) Vault

  • API keys for connected services (Slack, Stripe, GitHub, etc.) are stored in a local vault on your disk
  • 0600 permissions recommended: Only your user can read/write
  • Encrypted at rest: Vault is encrypted with AES-256-GCM
  • Never transmitted: Keys are resolved at 127.0.0.1 — they never leave your machine to reach AiTrade

Connected-Service Actions (v1)

  • When you approve an action (send Slack message, charge Stripe, etc.), it flows directly from your machine to the provider
  • No RailCall intermediary: Action content never transits our servers
  • Your security posture: You control the network path, TLS certificates, and provider authentication

MCP Sessions (v1)

  • Loopback/stdio only: MCP connections to Claude Desktop (or other hosts) are local — no network egress to AiTrade
  • Governed execution: RailCall still enforces dry-run, approval, and receipts for actions proposed via MCP

2. What We Secure

Account & Authentication

  • Password hashing: bcrypt with cost factor 12+
  • Session tokens: Signed JWTs with short expiry (1 hour default)
  • Rate limiting: Brute-force protection on login endpoints
  • 2FA (coming soon): TOTP-based two-factor authentication

Seat Validation Gateway

  • Seat validation: Only SHA-256(key) + nonce transmitted — no action names, no per-action counts, no business data
  • TLS 1.3: All gateway communication encrypted in transit
  • Replay protection: Nonces prevent replayed validation requests

Hosted Compose (Optional)

  • Zero-retention: Descriptions passed through to model provider, not logged by AiTrade
  • TLS everywhere: Encrypted in transit to gateway and provider
  • Alternative: Use BYOK or local model to avoid server-side compose entirely

3. Infrastructure & Operations

Cloud Providers

RailCall gateway and seat-validation services run on AWS (or GCP), leveraging:

  • VPC isolation and network segmentation
  • IAM least-privilege access controls
  • Encrypted storage (EBS, S3 with KMS keys)
  • CloudWatch / StackDriver logging and monitoring

Access Controls

  • Internal: Role-based access (RBAC) for AiTrade staff — audit logs for all production access
  • Database: Encrypted at rest (AWS RDS encryption), restricted network access
  • Secrets: API keys and credentials managed via AWS Secrets Manager / GCP Secret Manager

Monitoring & Incident Response

  • Real-time alerts for anomalous traffic, failed logins, or service degradation
  • Incident response runbooks for common scenarios
  • Security incident disclosure within 72 hours (GDPR requirement) if personal data is affected

4. Cryptographic Verification

Ed25519 Receipts

Every approved action mints a receipt with:

  • Integrity hash: SHA-256 of action plan + inputs + outputs
  • Ed25519 signature: Keypair-based signature (not login-based)
  • Offline verification: You can verify receipts independently, without trusting AiTrade or any online service

Public Key Infrastructure

  • Approval keypairs stored locally (your machine)
  • Delegatable: You can authorize other users/services to approve on your behalf
  • Receipts include the public key used for signature, enabling third-party audit

5. Compliance & Certifications

Current Status

  • GDPR, CCPA, UK GDPR, LGPD: Privacy-first architecture minimizes personal data collection and transmission
  • Data Processing Agreements (DPA): Available for Enterprise customers upon request
  • Penetration testing: Annual third-party penetration tests

Roadmap (2026-2027)

  • SOC 2 Type II: Planned for Q4 2026
  • ISO 27001: Under consideration for 2027
  • HIPAA: Enterprise tier with BAA available in 2027

Important: RailCall does not make blanket "SOC2 compliant" or "HIPAA exempt" claims. Your regulatory posture depends on your specific use case and must be determined by you (or your counsel/auditors).

6. Responsible Disclosure & Bug Bounty

Reporting Vulnerabilities

If you discover a security vulnerability, please disclose it responsibly:

Scope

In scope:

  • RailCall CLI, gateway, seat-validation service
  • Web properties (railcall.ai, docs)
  • Authentication, authorization, or cryptographic flaws
  • Remote code execution, privilege escalation, or data leaks

Out of scope:

  • Social engineering or phishing attacks
  • Denial-of-service (DoS) attacks — report without testing at scale
  • Third-party services (Slack, Stripe, etc.) — report to those providers
  • Known issues already disclosed or in our backlog

Bug Bounty Program

We offer recognition and compensation for valid, high-impact vulnerabilities:

  • Critical: $500-$2,000 (RCE, auth bypass, key leakage)
  • High: $200-$500 (privilege escalation, significant data leak)
  • Medium: $50-$200 (XSS, CSRF, info disclosure)
  • Low: Public acknowledgment + swag

Payouts are at AiTrade's discretion based on impact, exploitability, and quality of report.

Rules

  • Do not access, modify, or delete user data without explicit permission
  • Do not disrupt service availability
  • Do not publicly disclose before we issue a fix and advisory
  • Comply with all applicable laws

Violation of these rules may disqualify you from bounty and result in legal action.

7. User Security Best Practices

To maximize security when using RailCall:

  • Protect your vault: Ensure the local key vault has 0600 permissions (read/write for your user only)
  • Rotate keys regularly: Connected-service API keys should be rotated per your security policy (e.g., every 90 days)
  • Use strong passwords: Enable 2FA (when available) and use a password manager
  • Verify receipts: Audit Ed25519 receipts offline to ensure actions match your intent
  • Monitor provider dashboards: Check Slack, Stripe, GitHub audit logs for unexpected activity
  • Keep RailCall updated: We push security patches rapidly — update your CLI and Studio promptly
  • Report suspicious activity: If you see unexpected charges or account activity, contact security@railcall.ai

8. Limitations & Honest Scope

No silver bullet. RailCall's local-first architecture reduces attack surface by minimizing data transmission, but it is not a complete security solution.

  • Your machine's security matters: If your laptop is compromised (malware, physical access), attackers may access your local vault.
  • Connected-service risk: Security of Slack, Stripe, GitHub, etc. depends on those providers — RailCall cannot eliminate third-party risk.
  • No regulatory exemption: RailCall does not declare you SOC2 / HIPAA / GDPR compliant. You must assess your own regulatory posture.
  • Zero-day vulnerabilities: Like all software, RailCall may have undiscovered bugs. Report them responsibly.

Our commitment: Operate transparently, patch quickly, and never hide incidents. Security is a journey, not a destination.

9. Questions & Contact

For security questions or concerns:

Email: security@railcall.ai

PGP Key: railcall.ai/.well-known/security.txt

Entity: AiTrade LLC

Entity: AiTrade LLC · Last updated: July 14, 2026
See also: Privacy Policy · Terms of Service · Data Flow Disclosure