SOLUTIONS · PRIVACY
Visible to you,invisible toeveryone else
Run a validator-only L1 and the chain's data stops at the network's edge. Only nodes you admit can sync, query, or even see it.
- NETWORK ACCESS
- VALIDATOR-ONLY
- DATA RESIDENCY
- OPERATOR-CONTROLLED
- OUTSIDE VISIBILITY
- NONE
MECHANISMS
Validator-only networks
One configuration flag closes the chain. Only validators and the nodes they admit can connect, sync, or serve its data.
Data residency
Validators are machines you place: keep every copy of the ledger in a jurisdiction, a data center, or your own racks.
Encrypted transport
Traffic between nodes runs over TLS. Even on the network path between your data centers, the chain's data is never readable in transit.
ARCHITECTURES
MODEL 01
Walled Garden
Full control over who enters the perimeter
You decide who participates. The network sits behind a permissioned perimeter: no outsider can query it, read its transactions, or join without approval. Inside, everything is visible to participants; outside, the network is invisible.
BEST FOR
Closed consortia, single-institution tokenization, regulated market infrastructure.
MODEL 02
Partitioned Ledger
Each party holds only their own ledger
Every counterparty pair runs its own isolated ledger, exchanging settlement proofs directly rather than on a shared global one. Non-parties see nothing: no amounts, no identities, no timing.
BEST FOR
DVP settlement, inter-bank clearing, FX netting, bilateral repo.
MODEL 03
Encrypted Settlement
Amounts encrypted on shared infrastructure
Transactions run on shared infrastructure, so everyone keeps shared liquidity and interoperability, but amounts, counterparties, and logic stay encrypted. Settlement is verified without anyone reading the underlying values.
BEST FOR
Tokenized assets, cross-institution liquidity pools, digital bonds.
USE CASES
TOKENIZED DEPOSITS
Commercial bank money, on-chain
Partitioned ledger · ICM burn-and-mint · Permissioned validators
Institutions want to move commercial bank money on-chain, but a deposit at one bank is not the same instrument as a deposit at another, and a shared public ledger would expose balances and flows to competitors. Moving value between issuers has to reconcile two different liabilities without either side broadcasting its book.
Every issuer's deposit is a distinct asset, settled between counterparties without a shared global ledger.
- ASSET MODEL
- PER-ISSUER
- CROSS-ISSUER
- BURN-AND-MINT
- VISIBILITY
- COUNTERPARTY-ONLY
REPO & SECURITIES LENDING
Positions priced, never broadcast
Partitioned ledger · Bilateral channels · Validator-only access
Intraday repo and lending positions signal trading strategy, and broadcasting them to a shared ledger hands that signal to competitors. Desks need on-chain settlement without an on-chain book.
Each counterparty pair settles on its own ledger, invisible to the rest of the street.
- LEDGER
- PER-PAIR
- VISIBILITY
- PARTIES-ONLY
- STREET VIEW
- NONE
RESOURCES