A non-custodial AI investment platform may leave your assets at a brokerage while still receiving authority to send trades into your account. Evaluate what it can access and do, who operates it, how its strategy is tested and supervised, how it handles your data, and whether its approach fits your financial situation. “Non-custodial” describes a custody arrangement; it does not by itself establish that a service is secure, legitimate, suitable, or properly registered.
What “non-custodial” does—and does not—tell you
In FINRA’s description of auto-trading, a third party sends trading instructions directly to an investor’s brokerage account for immediate execution. The provider may not hold the account’s assets, but its connection can still let it influence what happens in the account. The broker or another entity may hold the assets and execute orders, while the service supplies instructions; confirm the actual arrangement rather than assuming how it works.
Separate these questions when evaluating a platform:
- Custody: Which entity holds the cash and securities?
- Authority: What information can the service view, and what actions can it initiate?
- Accountability: Which legal entity operates the service, and what rules apply to that entity’s activities?
- Suitability: Does the strategy fit your circumstances and tolerance for loss?
A reassuring answer to one question does not answer the others. A provider’s claim that it never holds assets is not proof that its trading access is limited or that it is authorized to offer a particular service.
Recommended Free Tools
#1 Best Overall
Map the platform’s permissions before connecting an account
Ask the provider and, where applicable, your brokerage to explain the complete route from account connection to order execution. Permission labels and connection methods vary, so do not rely on a generic description such as “secure access.” Find out whether access is read-only or can also initiate transactions, and whether changing settings or moving assets is possible.
| Access or authority to clarify | What to establish | Why it matters |
|---|---|---|
| Read account information | Can the service see balances, positions, transaction history, or personal details? Which of these are actually needed? | Viewing data can still expose sensitive financial information, even if the service cannot trade. |
| Create or submit orders | Can the service recommend an order, prepare one for approval, or submit it for execution without your approval? | These are materially different levels of control over your brokerage account. |
| Change strategy settings | Can the provider, its AI, or another user change allocation, trading rules, or risk settings? | Changes may alter the service’s behavior even if asset custody remains with the broker. |
| Withdraw or transfer assets | Can the connection move cash or securities, or is it restricted to information and trading instructions? | Establish whether the service can do anything beyond influencing trades. |
| Revoke access | How do you end the connection through the provider and, if available, the brokerage? What happens to stored data and open orders? | Stopping the service, disabling account access, and canceling orders may be separate actions. |
Do not grant broader authority than the service needs for the function you intend to use. Before authorizing a connection, check the provider’s current documentation and your broker’s own explanation of the permissions. If either cannot clearly explain what access is granted or how to revoke it, pause rather than guessing.
Verify the operator and scrutinize its claims
Identify the legal entity behind the service, the people responsible for it, the brokerage or other venues it connects to, and the jurisdictions in which it operates. Then independently check relevant regulator records for that entity and activity. A brand name, polished interface, technology label, or non-custodial claim does not establish registration or authorization.
Rank #2
FINRA has warned about unregistered auto-trading services and unsupported AI claims, including claims about risk controls, market prediction, and returns. Ask the provider to distinguish what its system actually does from what it does not do. For any performance claim, ask what period and data support it, whether results are live or simulated, and whether they account for fees, slippage, and losses. FINRA’s warning cites promotions such as consistent monthly returns above 10 percent as an example of a claim to treat skeptically—not as a verified performance result.
Free tools Windows power users keep installed
One-click scans. No signup required.
Testimonials and AI branding are not substitutes for evidence you can assess. The available FINRA material does not validate any particular platform’s performance, and no return claim should be treated as established without credible, relevant support.
Assess the strategy, oversight, and failure controls
Ask for a comprehensible description of the strategy and a clear division between automated decisions and human decisions. FINRA’s algorithmic-trading guidance emphasizes strategy development, testing, and implementation. Its 2026 annual oversight report identifies autonomous AI agents acting without human validation and approval as a risk. For an investing service, the practical question is what limits, review, and accountability apply to each action.
- What decisions does the system make, and which actions require human approval?
- What limits constrain order size, trading frequency, assets, or other activity?
- Who monitors the service, and what conditions trigger a pause or escalation?
- Can you stop trading promptly, and is there a documented shutdown process?
- Can the provider show records connecting a recommendation or decision to the resulting order and any approval?
- How are the strategy and model tested before use, monitored after deployment, and handled when changed?
Consider how the provider says the service would respond to unusual volatility, stale or missing data, an outage, a broker disconnection, duplicate orders, a model change, or an unexpected market event. These are due-diligence scenarios, not evidence that a given provider has experienced them. FINRA has noted that conditions outside a model’s training—including unusual volatility and major disruptive events—can undermine predictions and lead to undesired trading behavior. Prefer specific explanations of limits and recovery procedures over assurances that an AI system is always monitored or safe.
Review data handling and security
Before connecting an account, find out what information the service collects and how it uses and protects it. Review its privacy notice, security documentation, and provider terms for answers to questions such as:
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →- Does it receive account credentials, access tokens, personal information, financial data, or some combination?
- Which third parties receive that information, and where is it processed?
- Is account data used to train or improve models?
- How long is data retained, and how can you request deletion?
- How does the provider report and respond to a security incident?
- What happens to your information and access if you close the account or revoke the connection?
FINRA’s securities-industry discussion of AI identifies cybersecurity, customer privacy, data governance, and vendor management as relevant considerations. Those concerns do not amount to a certification of any retail platform, and the reviewed FINRA material does not establish one universal security checklist for these services. Treat unclear data flows or unexplained third-party sharing as unresolved risks.
Rank #4
Decide whether the service fits your financial situation
An automated tool may not account for your full financial picture. FINRA’s guidance on automated investment tools cautions that a tool may not evaluate every factor relevant to an investor. Compare the service’s assumptions and strategy with your:
- total holdings, including assets outside the connected account;
- goals, investment experience, and tolerance for losses;
- tax circumstances and expected time horizon; and
- need for cash or other liquidity constraints.
Automation changes how decisions or orders are produced; it does not remove investment risk or make a strategy appropriate for every investor. If you cannot explain the basic strategy, its material risks, and how its activity fits your goals, do not treat hands-off operation as a substitute for understanding what the account is doing.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Keep regulatory conclusions tied to the specific service
For the United States, FINRA Regulatory Notice 24-09, published June 27, 2024, says existing FINRA rules and securities laws continue to apply when FINRA member firms use generative AI. The notice does not create new requirements, establish that a particular service is registered, or determine the legal status of every non-custodial arrangement. Whether a rule applies depends on the entity, activity, and jurisdiction.
FINRA also explains that SEC Rule 15c3-5 requires broker-dealers with market access to establish, document, and maintain risk-management controls and supervisory procedures. That requirement should not be generalized into a claim that every retail automation platform is covered by it. If a service’s registration or regulatory status is unclear, check the relevant regulator’s records and seek qualified advice for the specific arrangement.
A practical decision before you connect
Proceed only when you can answer the questions that matter for your intended use. If an answer is missing, ask the provider for documentation; do not fill gaps with assumptions.
- Identify the operator: Record the legal entity, relevant people, connected brokerages or venues, and jurisdictions served; verify relevant regulator records independently.
- Confirm custody and authority: Establish who holds the assets, who executes orders, what the service can view or do, and how access and open orders can be stopped.
- Evaluate strategy and supervision: Understand what is automated, what evidence supports the strategy, what limits apply, and how actions are reviewed and logged.
- Check security and data terms: Understand collection, sharing, model use, retention, deletion, and incident handling before authorizing access.
- Test personal fit: Compare the strategy with your overall finances, tax circumstances, liquidity needs, goals, time horizon, and tolerance for loss.
A service that cannot explain its operator, permissions, strategy controls, or data practices clearly has not answered essential questions about the risks you would be taking.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
