+ Compliance and security
Compliance is
built in, not bolted on.
A privacy product only works long term if a bank, an auditor and a card issuer can all live with it. Today that means read-only viewing keys you issue yourself and statements built on your own machine. Screening at the edge and association-set proofs are the plan, and this page says plainly which is which.
Disclosure
Master keys. Every viewing key is issued by you, and only by you
At the edge01
Edge compliance screening
Planned: sanctions screening on every shield and unshield, plus association-set proofs that demonstrate pool hygiene. Not implemented yet.
Fiat ramps with identity separation
Planned: licensed on- and off-ramps, with KYC records that never link to on-chain activity. No ramp is connected yet — money comes in by bridge or transfer.
Time-decorrelated withdrawals
Planned: exits scheduled and split, so an unshield can't be matched to a shield by timing. Not implemented yet.
Disclosure02
Read-only viewing keys
A key that recognises the payments you receive and cannot move them, for an accountant, auditor or lender.
Scoping and expiry
Planned: keys limited to a date range, with an expiry that revokes them on their own. Today a key is unscoped and permanent.
Encrypted transaction memos
Private bookkeeping labels, readable only by you or a viewing-key holder.
Private tax and accounting export
CSV or PDF, generated locally from a viewing key. Nothing leaves your machine.
Attestations03
Zero-knowledge proof of funds
Prove a balance above X, or that you held a position for N months, without revealing the account.
Collateral attestation
A lender accepts a proof of shielded holdings instead of watching a public wallet.
Corporate actions for tokenized stocks
Dividends and splits are credited to shielded holders without revealing who holds what.
Who you can prove things to04
Security05
Social recovery
Guardians, passkeys and hardware wallets. A lost device isn't a lost account.
Client-side portfolio dashboard
Your portfolio decrypts locally in the browser. The server never sees your positions.
Card and device controls
Per-card and per-device spending limits, freeze, and an instant kill switch.
Shielded treasury multi-sig
Co-signers on the treasury, for companies that can't put funds behind a single key.
Automatic note consolidation
Your encrypted notes are defragmented in the background, so proofs stay fast and fees stay low.
Gas sponsorship
A paymaster pays the gas. You never hold the chain's gas token.
What Signetpay never sees06
Your positions
Notes decrypt in your browser. The dashboard, the statements and the tax export are all generated locally.
Your KYC record next to your chain activity
Signetpay runs no identity checks at all. When licensed ramps arrive they will hold that record, and we will still never hold both halves of the link.
A permanent back door
There is no master viewing key. Every disclosure is scoped, time-boxed and issued by you.