Can one firm see another firm's data?
Quick answer
No. Firms are separated by database row-level security tied to each signed-in firm, and every API key and panel session is bound to one organization. Server names, account numbers and passwords never resolve across firms, and analytics are pinned to the requesting firm whatever the request asks for.
Detailed answer
Isolation applies everywhere a firm interacts with the platform.
Admin panel
Each sign-in belongs to one firm. Every page reads data under that firm's context, enforced by the database.
API
Each key belongs to one firm. An account number from another firm returns not found, never another firm's data.
Analytics
The firm analytics views always use the firm from the session. A request that tries to name another firm is overridden.
Terminal
A trader logs in with Account Number, Password and Server. The server identifies the firm; the session grants exactly one account in it.
What is shared
- Market prices, which are the same for everyone.
- The platform software itself.
What is public by design
A firm's terminal branding (name, logo, colours) is shown on its login screen, because traders need to see it before logging in. It reveals nothing about accounts or traders.
Testing
Isolation is covered by automated tests, including tests that analytics ignore any attempt to request another firm's data.
PropExecutor team · Updated
Related questions
- How does PropExecutor keep each firm's data separate?
- How are trader sessions secured?
- The PropExecutor trading terminalWhat are the Account Number, Password and Server?
- The PropExecutor trading terminalHow do traders log in to the terminal?
- How does PropExecutor handle orders that arrive at the same time?
All 11 questions in Security, data and reliability · Every category