Definition
Key Safety
Soar's hard rule on the self-hosted options: your broker keys NEVER persist on Soar infrastructure. They live only in your own account — your Cloudflare Worker secrets or your DigitalOcean droplet. Soar's servers see them once during the ~30-second deploy window, then never again. (If you instead choose a Soar-hosted managed bot, your keys are stored encrypted with AES-256 and scoped to trade-only, so Soar can never move your funds.)
Example
On a self-hosted bot, even a Soar engineer querying every database could not retrieve your broker keys — they were never stored. You revoke from YOUR broker dashboard or YOUR host account.Related terms
