Trust
What we can tell you without knowing you yet.
not a badge wall
Card data we structurally cannot see, an append-only ledger, signed webhooks, and verification before live mode.
Provider-hosted card fields
Card inputs are the provider’s hosted fields or a full redirect. No Settlerock-origin script can read card data, a hard rule enforced in code review. Your integration stays SAQ A eligible.
An append-only ledger
Money movements are recorded in an insert-only double-entry ledger. Corrections are new reversing entries, never edits. Zero-sum per asset per transaction, enforced by the database.
Signed webhooks, idempotent APIs
Outbound webhooks are signed with rotating secrets and sent from a transactional outbox written inside the money-moving transaction. Every money-moving call takes an idempotency key.
Verification before live mode
Sandbox is immediate; live mode requires business verification by a person. Payouts can only go to the destination approved at onboarding.
Agents never move money
The Copilot proposes; a person confirms. No automation can create a payout, change a destination or widen eligibility past the compliance layer.
Compliance layer, applied last
The EEA stablecoin whitelist lives in a compliance-rules layer applied last and re-checked at submit. Merchant config, routing rules and playbooks cannot defeat it.
Commercial terms are set at underwriting, not on a page
Settlement, payout schedule, reserves and pricing depend on your business, your processing history and the route we underwrite you onto. They are agreed with you and written into your merchant agreement before you process anything, which is also why you will not find headline numbers here.
When something breaks
Detection. We watch our own health continuously and see partner failures in real transactions, usually before a status page updates.
Routing. Where you have more than one rail configured, traffic moves. Rescue scope is stated: which flows hop, which never do. Nothing fails over silently.
Telling you which. During an incident we tell you what is affected, what moved, and what did not. Afterwards you get the timeline, in writing.
Nine rails, one contract
Need the
long version?
Security questionnaires, partner letters and the ledger design doc are available under NDA.