The safest place for your money is your own wallet.
Zoyn is built on one idea: a payment layer shouldn’t need your trust, because it shouldn’t have your money. Here is what protects you — in plain language. We can describe our controls to you in more detail under a non-disclosure agreement.
Your money can't be taken from us — we never have it.
Payments go to a wallet you choose. Once the network confirms one, that money is yours. If you keep that wallet yourself — in your own wallet app or on your own device — we hold no key to it and cannot move it. If you keep it inside the payment account whose credential you gave us, that credential can reach it, which is why you can revoke it at any time. If your customer pays by card or bank transfer, the company that takes that payment handles it first, under its own controls and terms.
Your account credentials stay yours.
The checkout accounts your payments run on are opened in your name and stay under your control. We keep the credential you paste encrypted, under a key used for nothing else, and our server can read it only for the moment it is being used. It is powerful: it can change your account's settings, including where future payments go, and on some kinds of account it can also send transactions from wallets kept inside that account. That is why you can revoke it at any time — from your own provider or from Zoyn, and we erase our copy — and why every use of it is logged.
Sensitive data is encrypted twice over.
Anything sensitive we do store is encrypted with a separate key per record, and those keys are themselves protected by a dedicated key-management service. Decrypted values are never logged or kept.
Everything travels encrypted.
All traffic between you, Zoyn, and the services we coordinate runs over TLS 1.2 or higher — the same transport security your bank uses.
We're careful about who we work with.
Every merchant attests at signup that its owners are not on U.S. sanctions lists, businesses in comprehensively sanctioned countries are blocked at onboarding, and the payout and settlement addresses we hold are re-checked against sanctions designations every day — because an address that was clean last week can be designated this week. A check we cannot complete is never recorded as a pass.
Every action leaves a permanent trace.
Every change on the platform is written to an append-only audit log that can't be edited after the fact. Serious events automatically alert our operations team.
Questions about our controls?
We can describe our controls to you in more detail under a non-disclosure agreement. Get in touch and we'll route you to the right person.