Apay is custodial-by-design: private keys live in hardened infrastructure, while the app delivers safe, friendly interactions. Every layer — device, transport, contract and process — is built to protect assets and data.
Six layers working together to keep APAY and user data safe.
Keys are generated and stored in hardware security modules and never leave the backend. The app only calls signed APIs.
ApayToken, EscrowWallet and MultiSigWallet contracts ensure transfers and C2C releases require proper authorization on-chain.
Biometric unlock, a separate 6-digit transaction password, device binding and remote device logout protect account access.
All traffic uses HTTPS with certificate pinning; sensitive fields (passwords, tx passwords) are encrypted in transit and at rest (AES-256).
Root/jailbreak detection blocks sensitive operations on compromised devices; code obfuscation and anti-debug guard the app.
Security logs capture logins, password changes and asset movements; anomaly detection flags new-device and remote logins.
Compliance is designed in from day one, not bolted on.
L1 phone, L2 document (OCR) and L3 bank verification. C2C trading requires at least L1+L2; higher tiers unlock more capabilities.
Large transfers (e.g. > ₹10,000) trigger additional verification. Suspicious patterns are reviewed by the risk admin role.
India user data — including KYC documents — is stored on India-region servers, aligned with the Personal Data Protection framework (PDPB).
C2C disputes are adjudicated by platform admins with evidence review; on-chain refunds execute automatically based on the ruling.
Running on a Polygon private chain removes dependence on public CBDC regulation while keeping funds protected by contract logic.
Super, operation, finance, support and risk admins separate duties across the back office for least-privilege operations.
Biometric + tx password
Backend validates & rate-limits
HSM/KMS signs the tx
Contract enforces rules
<3s on-chain, pushed to app
We're happy to share the full threat model and architecture brief with partners and auditors.