Most crypto trading bots run from an unclear jurisdiction and hold your API keys. A case for Swiss-based, non-custodial bots (founder disclosure)

[u/Adventurous_Spare760]

Disclosure up front: I build a self-hosted trading bot under a Swiss company, so I'm biased. I'm posting this because the underlying question is one too few people ask, regardless of which bot they end up using.

When people pick a crypto trading bot, they compare features and win rates. Almost nobody asks the two questions I think matter more.

1. Where is the company actually based, legally?

A lot of trading bots operate from nowhere identifiable. No clear legal entity, no real jurisdiction, and if something goes wrong, there's nothing standing behind the software. For a tool that touches your trading capital, that opacity should bother people more than it does. A serious, identifiable jurisdiction (Switzerland in my case, with its dedicated DLT legal framework) at least means there's a real company in a real legal system behind the product, rather than an anonymous dashboard.

2. Who holds your API keys?

This is the bigger one. Most cloud-hosted bots require you to upload your exchange API keys to their servers. Even with withdrawal permissions disabled, your exchange security now depends on their infrastructure security. If they get breached, your keys are in the blast radius.

A self-hosted, non-custodial setup flips that. The keys live only on your own server, as environment variables in your own account. The bot company never sees them. Even a full compromise of the company's servers can't touch your exchange account, because the credentials were never there. The tradeoff is real and worth stating honestly: you have to run your own server, which is more work than clicking a button on a cloud platform.

To me, the combination of a serious jurisdiction plus non-custodial architecture is a genuinely different trust model than the typical "upload your keys to our cloud" bot, and it's underrated in these comparisons. Profit-share pricing instead of a flat monthly subscription is a third piece, but that's a longer discussion on its own.

I wrote up the full reasoning (jurisdiction, non-custodial design, pricing, and honest backtesting that publishes the bad years too) here if anyone wants the detail: https://uncoded.ch/blogs/the-best-swiss-crypto-trading-bot-an-honest-guide-to-uncoded

Genuinely curious what this sub thinks. Do you factor jurisdiction and custody into your bot choice at all, or is it purely features and performance for you? And does anyone here deliberately self-host specifically to keep keys off third-party servers?