Risk disclosure

1. General warning

Corvenhall Trust provides technology and general information for monitoring financial markets. Market information, signals, model output, examples and calculator results are not a promise, personal recommendation or guarantee that a transaction will be profitable. Past behaviour may not continue, and a position can move against you immediately after it is opened.

Only commit money you can afford to lose without affecting housing, ordinary living costs, debt obligations, tax payments or emergency savings. Consider your objectives, financial position, experience and ability to tolerate both loss and uncertainty. Independent financial, legal or tax advice may be appropriate.

Risk controls can limit certain activity when they operate as intended, but no setting can eliminate every loss. Gaps, rapid moves, system outages and unavailable liquidity can prevent an order from being executed at the requested level.

2. Market risk

Prices respond to company information, economic data, interest rates, regulation, geopolitical events, market sentiment and unexpected news. Digital-asset markets can move substantially in a short period and may trade continuously, so a material change can occur while an Australian user is offline.

A displayed price is a momentary indication, not a guaranteed execution price. Profits can reverse, and losses can exceed the amount a user expected to risk if a product includes leverage or if a market reopens away from the previous level.

Practical response: understand the asset, avoid excessive concentration, use position sizes consistent with a predetermined loss tolerance and review whether leverage is present before confirming any transaction.

3. Liquidity and execution risk

Liquidity describes how readily an asset can be bought or sold without materially moving its price. During quiet periods, stress or venue disruption, there may be few willing counterparties. A request can fill only partly, take longer or execute at several prices.

Slippage is the difference between an expected price and the actual execution price. It can be positive or negative, but during a rapid adverse movement it can increase a loss. Stop instructions are triggers rather than assurances of a particular exit price.

Practical response: review volume and spread, avoid assuming that a large position can be closed instantly, and use order types only after understanding how the executing provider handles them.

4. API and integration risk

Connections between Corvenhall Trust and an external venue may rely on an application programming interface. Incorrect permissions, expired credentials, venue changes, rate limits, network delay or a provider outage can interrupt data or prevent an intended action.

An integration can display stale or incomplete information if updates are delayed. A connection marked as active does not prove that every function is operating normally. Never grant withdrawal permission where a read or trade-only permission is sufficient.

Practical response: use the minimum permissions, restrict keys where supported, never share a secret in email, review connections regularly and revoke access that is no longer required.

5. Counterparty and custody risk

Execution venues, brokers, custodians, banks, payment providers and other third parties can fail, become insolvent, freeze activity, suffer a security incident or face regulatory intervention. Funds held by a third party are subject to that party's legal terms and operational controls.

Digital assets generally do not receive the same statutory protection as money in an Australian bank account. The fact that a service is registered for one purpose does not mean an investment is guaranteed or that every loss will be reimbursed.

Practical response: identify the entity holding assets, review custody and insolvency terms, verify Australian authorisations independently and avoid leaving more value with a provider than is necessary for the intended activity.

6. Operational and technology risk

Software defects, configuration mistakes, power failures, communication outages, inaccurate data, maintenance and capacity limits can make the platform partly or wholly unavailable. A user device or local internet connection can also fail at a critical time.

Automation may continue to apply an outdated setting until it is changed or stopped. Conversely, an intended automated action may not occur if a dependency fails. A status display can lag behind the underlying venue.

Practical response: keep an independent record of positions and provider contacts, review activity rather than assuming it occurred, maintain current contact details and know the provider's alternative instructions for urgent account action.

7. Cyber security and phishing risk

Attackers may use copied websites, convincing messages, malware, stolen email access, social engineering or phone calls to obtain credentials. Multi-factor authentication reduces risk but can be defeated if a user approves a fraudulent request or reveals a code.

Corvenhall Trust will not ask for a password, private key, recovery phrase or one-time code. A request to install remote-access software, transfer to a personal account or act secretly should be treated as suspicious.

Practical response: type the domain yourself, use a unique password, enable multi-factor authentication, keep devices updated and report unexpected access immediately to [email protected].

8. Model and automation risk

Models simplify reality. They are trained or configured using selected data and assumptions, and their output can degrade when market relationships change. A pattern that worked in one period can disappear or reverse without warning.

Automated processes can scale an error by repeating it consistently. A volatility control may reduce or pause activity under a defined condition, but it cannot recognise every form of instability or ensure capital is preserved.

Practical response: understand what inputs are considered, test settings with a modest amount, monitor performance across different conditions and stop using a process whose behaviour you cannot explain.

9. Service availability risk

Planned maintenance, an external provider outage, market suspension, cyber incident or exceptional demand can make features unavailable. A continuous-monitoring description means the service is designed to operate continuously; it is not a service-level guarantee of uninterrupted access.

Notices may be delayed by email filtering, mobile settings or incorrect contact information. The inability to access an interface does not necessarily close an existing position or cancel an instruction at an external venue.

Practical response: keep contact details current, enable more than one alert channel where available, read maintenance notices and retain the legal provider's emergency contact process.

10. Before you start

Read the provider terms, fee schedule, withdrawal policy, custody explanation and regulatory disclosures. Confirm the legal entity and payment destination independently. Ask questions until you understand how settings, orders, alerts and risk limits operate.

Define the maximum capital and loss that fit your circumstances. Avoid borrowed funds, emergency savings and money required in the near term. Consider diversification, but remember that assets can become correlated during market stress.

Protect the account with a unique password and multi-factor authentication, check active devices and restrict connection permissions. Review automated activity at planned intervals and after material market events. If the process no longer matches your objective, pause and reassess rather than increasing risk to recover a loss.

By using the platform, you acknowledge that uncertainty is inherent in financial markets and that responsibility for deciding whether and how to proceed remains with you.