Security is the product.
Logic holds custody-adjacent infrastructure for thousands of merchants. Every architectural decision starts from the assumption that someone is trying to compromise it.
Encryption
All data in transit uses TLS 1.3. Sensitive fields at rest are encrypted with envelope keys held in a hardware security module. Webhook signing secrets are stored encrypted and shown to the merchant once.
Access control
Multi-tenant isolation is enforced at the database layer with row-level security on every table. API keys are scoped, rotatable, and can be restricted by IP range and resource type.
Wallet custody
On-chain operations use threshold signing across geographically distributed signers. No single operator can move funds. Cold storage holds the majority of treasury reserves.
Disclosure
Report vulnerabilities to security at logic. We respond within one business day and pay bounties for valid findings.