SECURITY · BUILT FOR REGULATORS, NOT AROUND THEM

Your money, your identity, your account — guarded like a bank's.

Every transfer screened. Every device visible. Every contract audited. Compliance is not a page on this site; it is how the product is built.

5 listsOFAC · UN · EU · UK · CCASL

11monitoring triggers

5 yearsrecord keeping

IDENTITY

Verified once, properly.

Sumsub ID + selfie verification, PEP screening and proof of address. Your legal identity stays fixed; contact details you control.

ACCOUNT

Two-step by default.

Passkeys, two-step sign-in on every new device, a live list of where you are signed in, and one button to forget every other device.

MONEY

Screened, recorded, auditable.

Sanctions screening on every send, Travel Rule readiness, and a ledger reconciled against the chain.

TECHNICAL SECURITY

Keys, contracts and the parts we deliberately keep boring.

Settlement runs on Coinbase Base L2. Contracts are written to be small and readable rather than clever, and every change to a live contract is published before it takes effect.

Coynitt does not publish the internals of its routing intelligence. Everything that touches custody, keys and settlement is documented here in full.

Open sourcelive contracts, versioned

1 dayto acknowledge a disclosure

Detail in the AML & KYC policy and the security audit report (March 2026).

SettlementCoinbase Base L2, with transaction hashes exposed on every receipt.

KeysHardware-backed key custody for settlement addresses, with least-privilege internal access and every signing action logged.

ContractsLive contracts are open-source and versioned; any change is published before it takes effect.

AuditsIndependent contract review before mainnet launch; findings and fixes published.

AccessLeast-privilege internal access, hardware 2FA required, every production action logged.

RecoveryWallet recovery by identity verification, with a cooling-off period on new payout destinations.

What we hold, and what we never touch.

AREAWE DOWE NEVERWHO CHECKS

IdentityVerify via Sumsub · encrypt at restShow your address to recipientsFINTRAC · PIPEDA

FundsSettle via Coynitt-managed walletsExpose keys or seed phrasesIndependent audit

ContractsOpen source · testnet · auditedDeploy unaudited code to mainnetExternal auditors

DevicesList every session · alert on new deviceSign you in silentlyYou

Detail in the AML & KYC policy and the security audit report (March 2026).

REGISTRATIONS

FINTRAC MSB · Approval Pending.

Foreign exchange dealing, money transferring and dealing in virtual currencies. We will not accept customer funds until it is approved — and we say so on every screen.

CorporationAlberta · ABCA 2027982756

AML/ATFPCMLTFA standard

PrivacyPIPEDA · GDPR-ready

AuditSecurity audit · Mar 2026

Security questions.

Do you hold my money in crypto?

Transfers settle in USDC on Base for seconds, then pay out in local currency. You never hold, see or manage crypto.

What if my phone is stolen?

Who can see my transfers?

You, the recipient (a status link), and regulators when the law requires. Never other users.

Are the contracts open?

Yes — deployed on testnet and under independent audit ahead of launch.

Your money, your identity, your account — guarded like a bank's.

Keys, contracts and the parts we deliberately keep boring.

What we hold, and what we never touch.

FINTRAC MSB · Approval Pending.

Security questions.

Found something? Tell us first.