Public chains broadcast every amount — to everyone, forever. ARO seals them. Settlement stays on-chain. The numbers stay yours. Every payment ships a signed .nota receipt.
const sealed = await aro.encrypt(amount) POST /v1/transfers { "to": "0x7f…3ab2", "amount": sealed.handle } → 201 { "status": "settled", "nota": "#42" }
GET /v1/nota/42/verify // by signature or on-chain anchor → 200 { "delivered": true, "amount": "sealed" }
Mint sealed dollars 1:1. Move them encrypted — only sender and recipient can read the amount. Redeem to stables. Verify any payment, by signature or by anchor. Live on Sepolia today; REST ships with the sandbox.
POST /v1/deposits { "recipient": "0x9c…41e0", "stable": "USDC", "amount": "250000.00" } // on-chain today: commitDeposit(recipient, stable, amount) → netAmount → 201 { "minted": "cAROUSD", "netAmount": "sealed", "backed": "1:1" }
const sealed = await aro.encrypt(amount) // Zama FHE — encrypted client-side POST /v1/transfers { "to": "0x7f…3ab2", "amount": sealed.handle, "proof": sealed.inputProof } // on-chain today: confidentialTransfer(to, handle, inputProof) → 201 { "status": "settled", "nota": "#42" }
POST /v1/redemptions { "stable": "USDC", "maxStableOut": "250000.00", "amount": sealed.handle, "proof": sealed.inputProof } // on-chain today: requestRedeem(…) → redeemId — two-phase: burn, then finalize → 202 { "redeemId": "0x5d…", "phase": "burning" }
GET /v1/nota/42/verify // two ways to trust a receipt: // by signature — EIP-712, no chain required // by anchor — on-chain tokenId, no trust in Xend required → 200 { "delivered": true, "amount": "sealed" }
REST + SDK surface in progress · today: Solidity 0.8.27 on Sepolia · 8 verified contracts · 250 passing tests
Sealed settlement. Notarized receipts. Programmable payouts. Compliant identity. Asset settlement. One credential, one mental model: the sealed envelope.
Every amount encrypted. Only two parties can read it. The chain still settles — and auditors still see what they're entitled to.
See the callsOne signed envelope proves the payment happened. The amount stays sealed. Notarized, anchored, one per recipient.
See how it worksOne treasury action. Many sealed payouts. Every recipient gets an envelope — no one gets the total.
See it in the APIA soulbound passport gates every counterparty. No KYC, no movement. Revocable at any time.
See it in the APIEvery transfer returns a .nota — a signed EIP-712 receipt. Verify it by signature: no chain needed. Or by anchor: no trust needed.
Not a testnet. Not a demo. Real payroll settled live on Ethereum — on the rail cAROUSD builds on, on a standard written by the category's founders.
First confidential payroll on Ethereum mainnet — executed live by Zama and Bron.
The confidential-token standard, jointly developed by OpenZeppelin, Zama, and Inco.
Institutional backing led by Pantera Capital — the category's first FHE unicorn.
First confidential institutional OTC trade settled on Ethereum — the same rail, validated for capital markets.
Passing tests — including encrypted mint, transfer, and redeem.
Production contracts. Audited, hardened, live.
B2B cross-border by 2030. The market this rail is built for.
B2B stablecoin growth in 30 months. It's not slowing.
Keys, docs, SDK — in progress. Tell us what you're building. We answer in order.
Privacy and oversight aren't in tension. Balances reveal only to an authorized party, on demand. Built in, not bolted on.
Want a guided pilot? Choose “Enterprise pilot” above. Same rail, our team driving.
