TRUST CENTER
Security and compliance
AXN sits between an anonymous wallet and your bank account. This page states plainly what that means architecturally, who is principal on the money, and what AXN does not do.
ARCHITECTURE
Non-custodial throughout.
AXN never holds funds. Payments move from the payer’s wallet to settlement without AXN taking custody at any point.
You control the wallet.
Payments land in a wallet the merchant controls — whether you bring your own or AXN provisions one for you. AXN cannot sign transactions or move merchant funds either way.
Zero funds on the balance sheet.
No funds held means a smaller attack surface. There is no AXN float to take.
WALLETS AND KEYS
AXN supports two models. In both, the merchant controls the wallet and AXN cannot move the funds in it.
OPTION 1
Bring your own wallet
Merchants receive payments into a wallet they own and control. AXN never holds keys to merchant wallets and cannot move merchant funds.
OPTION 2
Let AXN provision one
Where AXN provisions a merchant wallet, it is created in a specialist key-management provider's secure infrastructure and controlled by the merchant. AXN cannot sign transactions or move funds from it.
SCREENING BEFORE PAYMENT
100% of paying wallets are screened before the payment is submitted.
Screening runs before the payment is submitted. A Travel Rule record is filed for each cleared payment, and every business on the network is KYB-verified before it can receive payments. When a wallet fails screening the payment is never submitted — no money moves and the request is never served.
LICENCE DISCLOSURE
AXN does not hold or require a payment services licence.
AXN never holds, transmits or converts client funds. All conversion and payout is carried out by licensed partners, who are principal on every conversion. Payments go directly from payer to merchant wallets.
Settlement into SGD, USD, EUR and AED runs through those partners. AXN is the compliance and orchestration layer on top; it is asset-light by design.
SUBPROCESSORS AND VENDORS
AXN relies on specialist providers for wallet screening, Travel Rule records, merchant verification and key management. The full subprocessor list, naming each provider and the data it processes, is available on request under NDA.
RESPONSIBLE DISCLOSURE
If you believe you have found a vulnerability, report it to contact@axchange.io before disclosing it publicly. We will acknowledge your report and keep you updated while we fix it.
- Scope
- axchange.io and api.axchange.io.
- Safe harbour
- We will not pursue legal action for good-faith research that avoids privacy violations, data destruction and service disruption.
- Response
- We acknowledge reports within 3 business days.
Please do not test against live merchant traffic. Ask us for a sandbox key and test there.
Sent this link after a meeting?
Ask us anything we have not answered here. We would rather send you a document than a diagram.