Apex Trader Cloud is designed as a read-only visibility layer. Broker credentials stay on the customer machine; the cloud stores relay snapshots, not IBKR passwords.
Apex Relay connects locally to IBKR/TWS and pushes snapshots to the cloud. Customers do not open inbound ports.
Relay keys are workspace-scoped, hashed at rest, previewed only after creation and revocable from the API.
Cloud order execution is disabled. The product shows broker truth, stale state and risk context without sending orders.
Subscription gates, admin role checks, audit logs, security headers, stale relay detection and last-good snapshots are part of the MVP contract.