Trust center

Security and compliance, clearly scoped

Last reviewed

August 26, 2026

What Stablecorp controls directly, what our providers control, and where your responsibility begins.

01

Responsibility boundaries

Stablecorp is a financial technology platform, not a bank. Banking, payment, identity-verification, and stablecoin capabilities are provided through third parties under their own eligibility rules and terms.

Bridge, a Stripe company, provides payment infrastructure used by the platform. Circle issues USDC and provides parts of the stablecoin infrastructure. A partner's role does not make every Stablecorp service a bank product or guarantee that an account or transaction will be approved.

02

Account protection

Customers sign in through managed authentication. Sessions expire, and protected product areas require an authenticated session.

Server-side authorization applies role and resource-ownership checks to sensitive actions. These controls are part of a layered security model that also includes transaction-level review.

03

Transaction safeguards

Sensitive money movement may require device-bound user verification before approval. Required safeguards are enforced server-side.

Inbound provider messages are authenticated and integrity-checked before processing. Transaction changes are validated against the permitted workflow so sensitive actions cannot bypass required steps.

04

Data handling

Production traffic is sent over HTTPS/TLS. Identity, business, and transaction information is shared with the providers needed to deliver the service or complete verification, as described in the Privacy Policy.

Security relies on layered access controls, provider safeguards, and operational review. No online service can promise absolute security.

05

KYC, AML, and compliance scope

Identity and business verification, sanctions screening, and other KYC or KYB checks are performed through the relevant financial providers before regulated features are activated. Additional review can be required for a specific account or transaction.

Formation, registered-agent, tax, and filing support depends on the plan and engagement you purchase. Stablecorp does not claim to automatically satisfy every federal, state, or home-country obligation. Customers remain responsible for accurate information and should use qualified legal or tax advice where needed.

Verify the providers

Review Bridge at Stripe and Circle's USDC information for their current descriptions, terms, and disclosures.

Report a security concern

Email info@xelio.xyz with the account email, approximate time, and a concise description. Do not include passwords, one-time codes, private keys, or full identity documents. For compliance questions, read our Privacy Policy and Terms of Service, or book time with the team.