string|IO
Security & trust

Built to be trusted.

Money infrastructure earns trust by construction, not by badge. Below is what's true today, stated as status — not as certifications we haven't earned.

The PAN never crosses your stack

Kosha tokenizes at the edge and Token Vault holds the custody — you work in tokens, and your PCI scope shrinks with you.

Fail-closed by default

When a dependency is unreachable, the platform declines rather than guesses. A 422 is a feature, not a bug.

A close you can sign

Daily settlement closes with a cryptographically-signed attestation, and any cycle is replayable to the cent.

In-authorization controls

OFAC / AML screening, 3-D Secure and issuer rules evaluate inside the authorization, on the same ledger that posts it.

Compliance · status

SOC 2 — in progress
PCI DSS — on the roadmap
sponsor-bank model for regulated rails

Pre-GA, said plainly

We're onboarding design partners. We'll tell you what's wired, what's designed, and what's still research — on this site and in the room.

Trust, by construction.