Who builds NODAL, how the platform is secured, where every number comes from, and what service level to expect during early access. Written plainly — if something isn't built yet, this page says so.
NODAL is an independent research platform founded by Jael Ooi (founder — product direction) and Med Lim (co-founder — research & operations), focused on one question: given the macro regime, how should digital-asset exposure be positioned? It synthesises macro data (rates, liquidity, central banks), market structure (funding, open interest, order flow), supply events (token unlocks) and verifiable on-chain positioning into one working surface.
The platform is currently in its Early Access Program: full access is free while the live research track matures. We are a small operation and say so — no invented team page, no borrowed logos.
Contact: hello@nodalscan.com (general) · support@nodalscan.com (support).
NODAL is not a broker, not a fund, and not an advisor. Nothing on the platform is a trade instruction or financial advice. Our internal research desk (a systematic engine we run on paper) is private and is not sold — its methodology and validation are published on the Methodology page for transparency, not for copying.
1. The engine is not a product. NODAL operates a private, systematic research engine. It is company intellectual property and is never sold, licensed, or exposed — no signals, no entries or exits, no position sizing, no allocation, no internal scoring, no model internals. The one internal mirror of its activity (the "Copy Desk") is restricted to the operator and is not part of any subscription.
2. One-way valve. Engine research may inform which topics our public research covers (for example, our published token-unlock base rates began as internal research). But every public artifact is built exclusively from citable public data and is reproducible from its citations — never from the engine's outputs.
3. Conditions, not instructions. The public Market Conditions Monitor publishes market structure — funding, open interest, order flow, phase — without trade instructions. Where our published research is evaluated (the track record), wins and losses are forward-logged at publication time and auto-resolved from price history; entries are never edited or removed.
4. Methodology is versioned. Any change to how a public number is computed is dated and reasoned on the changelog. If a change breaks comparability with earlier records, the record says so.
5. What this policy does not claim. It is an operating policy of a small firm, not an audited control framework. Independent review of these controls is on the roadmap and will be published here when it exists — not before.
Our real-money track is published daily to a public, timestamped GitHub gist — beyond our own tamper-evident audit log. Each entry carries a record_hash (SHA-256 of the immutable trade record); recompute it from the live track feed to confirm nothing was altered. GitHub's revision history timestamps every publish, so the record can't be quietly rewritten.
Honest state: this live track is early and small — a handful of real trades, edge not yet proven. We publish it anyway, weak numbers and all, so you can hold us to it as it grows rather than trust a marketing figure. The Early Access Program is free precisely because the record isn't mature.
Your data is exportable at any time (CSV throughout the terminal; portfolio data never leaves your browser). If NODAL were to wind down, subscribers get advance notice and an export window. Corporate entity and jurisdiction details will be published in this section as the company formalizes — until then, judge us by the verifiable record: the changelog, the status page, and the track record.
All payments run on Stripe Checkout. Card data never touches NODAL servers — we store only the plan tier and subscription status. Webhooks are HMAC-verified with replay protection.
The platform is served entirely from Cloudflare's edge (Pages + Workers). No self-managed servers, TLS everywhere, secrets held server-side in the Cloudflare environment — never shipped to the browser.
Authentication runs on Supabase (passwords hashed and managed by Supabase Auth, not by us). Privileged keys exist only server-side; public pages carry only the publishable anon key.
Portfolio and watchlist data is stored in your own browser (local storage) — it is not uploaded to our servers. Clearing your browser clears it; we could not read it if we wanted to.
All public data endpoints are rate-limited per IP at the Cloudflare edge. Admin surfaces are role-gated server-side with an append-only audit log on every action.
No SOC 2 / ISO 27001 certification, no SSO (Google/Microsoft sign-in), no formal penetration-test report. These are on the institutional roadmap and this page will be updated when they land — not before.
| Source | Used for | Cadence |
|---|---|---|
| FRED (St. Louis Fed) | Policy rates, CPI/PCE, Fed balance sheet, net liquidity, credit spreads, release calendar | as published (daily–monthly) |
| Exchange public APIs (Binance, Bybit) | Prices, funding, open interest, order-flow and liquidation data | live / minutes |
| DefiLlama | Token unlock schedules & amounts, TVL, stablecoin supply | hours–daily |
| Hyperliquid public API | Verifiable wallet-level perp positioning (every position is on-chain) | minutes, cached |
| Yahoo Finance | Equity indices, VIX, FX & commodity quotes used in regime classification | minutes–daily |
| alternative.me | Crypto Fear & Greed index | daily |
/health endpoint.During the Early Access Program there is no contractual uptime guarantee and no phone support. A live status page probes every service in real time — historical uptime publishes there once real data accumulates. A formal SLA, a public status page and priority support are planned for the paid Professional/Desk tiers. We would rather tell you this than print a meaningless "99.9%" badge.
Every data service exposes documented JSON endpoints. Reads are rate-limited per IP (120/min); premium endpoints authenticate with your account token (Authorization: Bearer — the same session token the terminal uses). Endpoint list and schemas live on the Methodology & API page. Contractual SLA and dedicated keys ship with the Professional tier.