Trading Central’s
Trust Center
Our certifications, regulatory registrations, security controls and data practices, with the documents your compliance and security teams need.
ISO/IEC 27001:2022
Certified · BYCYB (COFRAC)
SEC Registered
Investment Adviser · USA
SFC Licensed
Types 4 & 5 · Hong Kong
ANACOFI-CIF
AMF-approved · ORIAS · France
GDPR · DORA · EU AI Act
Licensing & Regulation
Why this matters, in plain terms
A licence means a financial regulator supervises how research is produced and distributed: who writes it, how conflicts are managed and how complaints are handled. If your research provider is unlicensed, none of these obligations apply, and the risk passes to you.
Entity
Regulator & Status
Reference
Verify
Trading Central Americas, Inc.
United States
Registered investment adviser with the U.S. Securities and Exchange Commission (SEC)
SEC file no. 801-67210
Trading Central Asia Ltd
Hong Kong
Licensed by the Securities and Futures Commission (SFC) for Type 4 (advising on securities) and Type 5 (advising on futures contracts)
CE no. AWI815
Trading Central SA
France
Financial investment adviser (CIF), member of ANACOFI-CIF, an association approved by the AMF
ORIAS no. 17005458
Registration with a regulator does not imply that the regulator endorses Trading Central’s services or qualifications.
Our legal and regulatory register also covers
Check any research provider
1
Find the contracting entity, the legal name on your agreement or order form, not the brand.
2
Search the public register, for that exact name: SEC IAPD, SFC, ORIAS, the FCA and others.
3
Confirm the scope, investment research or advice, in the markets you serve.
Risks to Watch For
Licensing gaps rarely show up in a sales pitch. These are the patterns worth checking before you sign with any research provider.
The Licence Belongs to a Sister Company
A group advertises a licence held by one company, while a different, unlicensed company in the same group signs your contract. It usually surfaces only at legal review.
How to check: Compare the company name on your contract with the name on the regulator’s register.
Research Nobody Answers for
Content generated entirely by AI, with no licensed analyst or regulated entity standing behind it.
How to check: Ask which licensed entity is responsible for the research, and who reviews it.
Content Without Redistribution Rights
Research or data the provider has no licence to pass on to your clients, leaving you exposed to copyright claims.
How to check: Ask for confirmation that every data source is licensed for display to your clients.
A Licence for the Wrong Market
A registration in an unrelated country, or for an activity other than investment research or advice.
How to check: Check the licence’s jurisdiction and the activities it permits.
Documents
Document
Access
Master Solutions Agreement
Terms & Conditions and Regulatory References
Privacy Policy
Cookie Policy
Data Protection Policy
Form ADV (Trading Central Americas) on IAPD
ISO/IEC 27001:2022 Certificate
Statement of Applicability
Information Security Policy
Penetration Test Summary
Business Continuity Test Summary
Subprocessor List
Security Controls
Operated within our ISO/IEC 27001:2022 management system and reviewed in every surveillance audit.
Infrastructure
3 controls
Hosted on AWS, Europe and North America
Encryption in transit and at rest
Tested backups and restore
Access
3 controls
Least-privilege access, reviewed
Authenticated API, MCP and widgets
Multi-factor authentication for staff
Development
2 controls
Code review before release
Independent penetration testing
Incidents
2 controls
Monitoring and documented response
Breach notice: 72 hours
Report a Vulnerability
Found a security issue in one of our services? Tell our security team.
Contact Us to Report a Vulnerability
Data Privacy
Our Role
Controller for our websites; processor for client-delivered newsletters, alerts and widgets
Data Protection Contact
privacy@tradingcentral.com
Lead Authority
CNIL (France)
International Transfers
Standard Contractual Clauses or adequacy decisions
Data Subject Requests
Answered within 30 days
Responsible AI
FIBI™ Storyteller, Market Buzz® and our MCP Server run on Trading Central’s own licensed research, inside the same ISO/IEC 27001 controls as our APIs.
Every data point sourced and rights-managed
Answers traceable to the tool that produced them
TC Labs data scientists working with our analysts
AI Policy adopted March 2026
Updates
Oct 2026
ISO/IEC 27001:2022 surveillance audit completed
Sep 2026
MCP Server launched with licensed, rights-managed content
Mar 2026
AI Policy adopted, approved by our CEO
Jan 2026
Master Solutions Agreement v6 and updated DPA published
Nov 2025
ISO/IEC 27001:2022 certification achieved
Frequently Asked Questions
Is Trading Central regulated?
Yes, we hold an ISO/IEC 27001:2022 certification and are registered with the SEC, SFC, and Anacofi, reflecting our dedication to regulatory compliance, cybersecurity, data privacy, and risk management.
Is Trading Central's research compliance-friendly?
Yes, our solutions align with global and regional standards for data protection, security, accessibility, and more. With embedded education and progressive information disclosure, our research encourages self-directed decision-making rather than giving direct financial advice.
Do you use personal data to train your AI models?
No. Our in-house models are trained on news and market data from licensed providers, and no personal data is used to train them.
How do I contact your Data Protection Officer?
Email privacy@tradingcentral.com, or write to DPO, Trading Central SA, 11 bis rue Scribe, 75009 Paris, France.