Non-custodial is the foundation of how NoVo is built, and it's simpler than it sounds: your money stays in your own broker account, and NoVo has permission only to place trades — never to withdraw, move, or hold your funds. Understanding this model is understanding why NoVo is structurally safe on the dimension that matters most.
What “custody” means
Custody is possession of your money. A custodial service holds your funds — you deposit to them, they control the money (like handing cash to a manager). That arrangement concentrates risk: if they're dishonest, hacked, or insolvent, your money is exposed. Most catastrophic failures in trading and crypto are custody failures — the party holding the funds fails, and customers lose everything.
How non-custodial flips it
NoVo never takes custody. You open and fund your own account at a regulated broker (Tradier or Alpaca), and connect NoVo to it via a broker API scoped to trading only. NoVo can place and manage orders in your account; it cannot withdraw or transfer your money out. There's no NoVo wallet, no deposit to us, no pooled customer funds. You keep possession and control the whole time, and you can revoke the connection whenever you want. The tool has the keys to trade, never to the vault.
Custodial: you give them your money and trust them with it. Non-custodial: your money never leaves your broker, and the tool can only trade — not take. Trust by architecture, not promise.
Why it's the right architecture
Non-custody means the worst-case with NoVo is not “they took my money” — that's structurally impossible, because they never have it. Your risks reduce to normal trading risk (you can lose money on trades) and the tool possibly malfunctioning (bounded by your boundaries and stops), not the existential risk of a custodian absconding. It's trust built into the design rather than asked for on faith — which is exactly how it should be. See also can NoVo be hacked.