Software Layer, Never an Omnibus Custodian
XPayr generates deterministic checkout sessions, verifies blockchain finality, and dispatches signed webhooks while 99.5% of funds route directly to your self-custodial wallet on confirmation.
Regulatory Readiness, EU MiCA Stablecoins & Non-Custodial Architecture.
Enterprise procurement and legal teams choose XPayr because the custody boundary is unambiguous: XPayr is non-custodial checkout and webhook software — never a pooled hot-wallet custodian. You control your own hardware or multisig keys, choose compliant stablecoin rails (USDC, EURC, USDT), and export cryptographic receipt proofs for every invoice.
📊 Accounting & ERP Audit Hub
🔒 Security Architecture
📜 AML/KYC & Sanctions Policy
🏢 Regulated Sector Review
Operational Architecture Notice: This page documents XPayr's technical software boundaries and compliance controls for CFO, risk, and engineering review. It does not constitute legal or tax advice. Merchants must verify jurisdictional eligibility under Terms of Service and Acceptable Use Policy.
Native Circle EURC & USDC Treasury Support
Accept native Euro Coin (EURC) and USDC across Ethereum, Base, Arbitrum, Solana, and Circle Arc without processor balance conversion.
Cryptographic @xpayr/payment-evidence Proofs
Bind every order ID, payer sender address, asset contract, timestamp, fee split, and on-chain tx_hash into verifiable JSON envelopes and QuickBooks/Xero/NetSuite journals.
| Compliance & Risk Dimension | Traditional Custodial Crypto Processor | XPayr Non-Custodial Infrastructure |
|---|---|---|
| Private Key & Wallet Custody | Processor generates and controls pooled hot wallets; merchant holds an IOU balance. | Zero private key access. Merchant brings their own Ledger, Trezor, Fireblocks, or Safe multisig wallet. |
| Settlement Flow & Counterparty Risk | Funds sit on processor balance sheet until manual or scheduled batch payout. | Atomic 99.5% / 0.5% smart-contract split or direct peer-to-wallet transfer on confirmation. |
| EU MiCA Stablecoin Alignment | Omnibus stablecoin pooling & off-chain ledger conversion obligations. | First-class native Circle EURC (/currencies/eurc-payments) & USDC direct on-chain merchant settlement. |
| Order & Counterparty Attribution | Opaque internal ledger IDs disconnected from on-chain receipts. | Deterministic session_id, order_id, payer wallet address, and explorer tx_hash bound in @xpayr/payment-evidence. |
| Mainnet Merchant Onboarding | Weeks-long banking underwriting before developers can test a single API call. | Instant self-serve Testnet evaluation; structured Mainnet eligibility & AUP review (/high-risk-merchant-review). |
| Audit & Tax Export Trail | Monthly summary PDFs with bundled FX/withdrawal deductions. | Transaction-level double-entry CSV/JSON exports for QuickBooks, Xero, and NetSuite (/accounting). |
Mainnet Eligibility & Domain Review
Testnet keys are instant for developer QA. Before Mainnet activation, XPayr screens merchant domains against prohibited categories, OFAC/EU/UN sanctions lists, and AUP rules.
AI Agent Spend Guardrails
Autonomous MCP and HTTP 402 agents operate strictly inside merchant-configured per-transaction caps, rolling 24h budgets, chain whitelists, and human approval queues (/agent-commerce).
Outbound SSRF & HMAC Integrity
Every outbound merchant webhook enforces HTTPS TLS verification, private-IP SSRF blocking, idempotency keys, and constant-time HMAC-SHA256 verification (Webhook Guide).
Compliance, MiCA & Custody Boundary FAQ
Does XPayr take custody of merchant or customer funds at any stage of a transaction?
No. XPayr operates strictly as non-custodial payment orchestration and verification software. XPayr never stores merchant private keys, never pools merchant balances in omnibus hot wallets, and never holds discretionary withdrawal custody.
How does XPayr help European merchants align stablecoin treasury flows with EU MiCA?
Merchants serving EEA corridors frequently standardize on MiCA-aligned e-money tokens (EMTs) such as Circle EURC and USDC. XPayr supports native EURC (/currencies/eurc-payments) and USDC settlement directly to your self-custodial corporate wallet, plus Smart Settlement Router preferences (/settlement-router) and granular ERP audit envelopes. Note: merchants in restricted jurisdictions remain subject to XPayr Terms of Service (/legal/terms) and local legal counsel review.
How does XPayr support Travel Rule or institutional VASP/CASP reconciliation workflows?
When institutional buyers or regulated VASPs settle invoices on-chain, XPayr preserves exact payer sender addresses, deterministic session metadata, timestamps, asset contract addresses, and immutable transaction hashes inside signed webhooks and @xpayr/payment-evidence JSON envelopes so your compliance team can attach required counterparty records.
Which business categories require enhanced review or are prohibited on XPayr Mainnet?
Sanctioned entities/countries, unlawful goods, darknet services, CSAM, ransomware, and unlicensed gambling are strictly prohibited under XPayr Acceptable Use (/legal/acceptable-use) and AML/KYC Policy (/legal/aml-kyc). Regulated categories such as licensed iGaming or prop-trading platforms undergo Mainnet domain and licensing verification (/high-risk-merchant-review).