Compliance
The compliance model
Sanctions screening on entry and exit, association-set proofs so clean users can show they aren't in a tainted pool, and expiring disclosure keys for auditors: built in, not bolted on.
Status: pre-launch. Noirpay is being built. This page describes the design as specified in the whitepaper; nothing on it is live on Robinhood Chain yet, and details can change before launch. See What's live today.
Privacy that a bank, a card issuer or an auditor can't live with is privacy that gets switched off. Noirpay's model is privacy inside the pool and checks at its boundary, plus disclosure that the account holder controls.
Three layers
| Layer | What it does | Docs |
|---|---|---|
| Edge screening | Sanctions and risk checks on every shield and unshield | Screening |
| Association-set proofs | A withdrawal proves it isn't linked to tainted deposits, without revealing which deposit it came from | Screening |
| Controlled disclosure | Viewing keys (scoped, expiring, revocable) and zero-knowledge attestations | Viewing keys, Attestations |
Why it's the product, not a concession
- It is what lets a card issuer underwrite settlement from a shielded pool (card).
- It is what lets a licensed ramp move fiat in and out with identity separation.
- It is what lets a lender accept a shielded balance as collateral (attestations).
- It is what lets a company run payroll privately and still pass an audit (treasury).
Who can prove what to whom
| Party | Public wallet | Noirpay |
|---|---|---|
| Accountant | Screenshots and a shared spreadsheet | A viewing key scoped to the tax year, revocable after filing |
| Auditor | Full wallet history, forever | A read-only key for the audit window that expires on its own |
| Lender | A public balance they can watch every day | A proof of balance above X, or a collateral attestation |
| Bank or card issuer | Nothing to show but a mixer address | Association-set proof plus screening on every shield and unshield |
| Counterparty | Your whole balance, from one payment | A one-time stealth address and nothing else |
What Noirpay never holds
No master viewing key, no copy of your spending key, no link between a KYC record and your notes, and no plaintext positions. See What Noirpay sees.