Security & infrastructure

Built on regulated rails,
secure by design.

KwiikPay moves real money for real businesses. The platform is built on regulated payment rails, segregated client funds, institutional on-chain custody and continuous reconciliation — so every balance is accountable.

EU + CA

VASP (Poland) · FINTRAC & RPAA

Segregated

Client funds ring-fenced

Policy-signed

Institutional on-chain custody

Continuous

Ledger reconciliation

Regulation

Registered where it operates

KwiikPay moves money under its own financial-services registrations in the EU and Canada — not on top of someone else’s licence.

VASP registered (Poland)

Registered as a Virtual Asset Service Provider with the Polish Financial Intelligence Unit (GIIF).

Canada

FINTRAC & RPAA

Registered as a Money Services Business and Payment Service Provider — FINTRAC and the Retail Payment Activities Act, supervised by the Bank of Canada.

Global

Sanctions & Travel Rule

OFAC, HMT and UN sanctions screening, and FATF Recommendation 16 (Travel Rule) compliance on transfers.

The stack

What the platform is made of

Fiat and stablecoin rails under one ledger, with safeguarding and reconciliation built in — not bolted on.

Fiat rails

Faster Payments, SEPA / SEPA Instant and SWIFT into named multi-currency vIBANs

Safeguarding

Client funds segregated at regulated banking partners, ring-fenced from operating capital

On-chain settlement

USDC / EURC on Ethereum; USDT on Ethereum, BSC and Tron — institutional custody with policy-based signing

Ledger

Double-entry ledger is the source of truth for every customer balance

Reconciliation

Automated recon against bank and on-chain truth with drift alerting

Compliance

KYC / KYB onboarding, sanctions screening and transaction monitoring on every payment

API security

Authenticated REST API, idempotency keys and cryptographically signed webhooks

Safeguarding

Your money is ring-fenced

Segregation is structural, not a promise. Client balances sit apart from KwiikPay’s own funds at regulated banking partners.

Segregation

Separate accounts

Client funds are held in dedicated safeguarding accounts, never mixed with company money.

Custody

Policy-based signing

On-chain funds move only under multi-party policy — no single key, no single person.

Audit

Always reconciled

Every fiat and on-chain movement is matched to the ledger, with alerts on any drift.

Access

Role-based control

Granular roles, approvals and full audit trails across the dashboard and API.

Screening

Sanctions & monitoring

Beneficiary checks, sanctions screening and ongoing monitoring on every payment.

Encryption

Encrypted end to end

Data encrypted in transit and at rest; secrets and keys held in managed vaults.

How money moves

Every payment, accounted for

Authenticate

Requests are authenticated and screened before any funds move.

Safeguard

Incoming funds land in segregated client accounts at regulated banking partners.

Settle

Fiat over regulated rails or stablecoin under institutional custody — recorded to the ledger.

Reconcile

Balances are continuously matched against bank and on-chain truth, with drift alerts.

Questions

Security & infrastructure — FAQs

KwiikPay is registered as a Virtual Asset Service Provider in the EU (Poland, with the Polish Financial Intelligence Unit, the GIIF) and as a Money Services Business and Payment Service Provider in Canada (FINTRAC and the Retail Payment Activities Act, supervised by the Bank of Canada). Every payment runs with sanctions screening and transaction monitoring.

Client funds are safeguarded in segregated accounts at regulated banking partners, kept completely separate from KwiikPay’s own funds. They are never lent out or pooled with operating capital, so balances are ring-fenced.

Stablecoin settlement uses institutional custody with policy-based signing — no single person can move funds. USDC and EURC settle on Ethereum; USDT settles on Ethereum, BSC or Tron. Every on-chain movement is reconciled against the ledger.

Continuous reconciliation compares the internal ledger against bank and on-chain truth on a fixed cadence, with automated drift alerts. The ledger is the source of truth for every customer balance.

Data is encrypted in transit and at rest, access is role-based with audit trails, and identity verification is handled through vetted KYC/KYB providers. API traffic is authenticated and webhooks are cryptographically signed.