Custody, in one sentence
Whoever can move the money, owns the risk. If a platform holds your deposit, you are trusting it with two separate things: that its trading works, and that the company itself stays solvent and honest. Those are unrelated risks, and history has been much harder on the second one.
What non-custodial means here
Your funds never leave your own exchange or broker account. CopyFi connects to that account through an API key and sends trade instructions. It reads your positions and it opens or closes trades. That is the entire surface.
- Read permission — so the model can see positions and balance.
- Trade permission — so it can act on the rules you built.
- Withdrawal permission — never requested. Without it, no instruction CopyFi could possibly send moves money out of your account. Not by mistake, not if something is compromised.
Keys are encrypted at rest and in transit. But encryption is the second line of defence. The first is that the key is not powerful enough to steal with.
What you should check on any platform
- Does it ask for a deposit? If yes, you are in custodial territory, whatever the marketing says.
- Which API permissions does it request? If withdrawal is on the list, close the tab.
- Can you revoke it in one click? You should be able to kill the connection from your exchange, not from the platform’s settings page.
- Does it whitelist an IP? A key restricted to known addresses is worth more than a promise.
What non-custodial does not protect you from
It removes one failure mode, not all of them. A non-custodial platform can still run a model that loses money, and a bad rule executes just as faithfully as a good one. Trading involves risk, past performance does not guarantee future results, and CopyFi is a tool rather than a financial advisor.
What it does guarantee is narrower and worth having: the worst trading day is still only a trading day. Your balance stays somewhere you control.
Next: build the rules that decide what gets copied, or read what copy trading is and what it does not fix.