Trust center
Security and compliance, clearly scoped
Last reviewed
August 26, 2026
What Stablecorp controls directly, what our providers control, and where your responsibility begins.
Responsibility boundaries
Stablecorp is a financial technology platform, not a bank. Banking, payment, identity-verification, and stablecoin capabilities are provided through third parties under their own eligibility rules and terms.
Bridge, a Stripe company, provides payment infrastructure used by the platform. Circle issues USDC and provides parts of the stablecoin infrastructure. A partner's role does not make every Stablecorp service a bank product or guarantee that an account or transaction will be approved.
Account protection
Customers sign in through managed authentication. Sessions expire, and protected product areas require an authenticated session.
Server-side authorization applies role and resource-ownership checks to sensitive actions. These controls are part of a layered security model that also includes transaction-level review.
Transaction safeguards
Sensitive money movement may require device-bound user verification before approval. Required safeguards are enforced server-side.
Inbound provider messages are authenticated and integrity-checked before processing. Transaction changes are validated against the permitted workflow so sensitive actions cannot bypass required steps.
Data handling
Production traffic is sent over HTTPS/TLS. Identity, business, and transaction information is shared with the providers needed to deliver the service or complete verification, as described in the Privacy Policy.
Security relies on layered access controls, provider safeguards, and operational review. No online service can promise absolute security.
KYC, AML, and compliance scope
Identity and business verification, sanctions screening, and other KYC or KYB checks are performed through the relevant financial providers before regulated features are activated. Additional review can be required for a specific account or transaction.
Formation, registered-agent, tax, and filing support depends on the plan and engagement you purchase. Stablecorp does not claim to automatically satisfy every federal, state, or home-country obligation. Customers remain responsible for accurate information and should use qualified legal or tax advice where needed.
Verify the providers
Review Bridge at Stripe and Circle's USDC information for their current descriptions, terms, and disclosures.
Report a security concern
Email info@xelio.xyz with the account email, approximate time, and a concise description. Do not include passwords, one-time codes, private keys, or full identity documents. For compliance questions, read our Privacy Policy and Terms of Service, or book time with the team.