Platform Architecture

The transaction infrastructure for modern commerce

TrustedPayer is a purpose-built transaction layer that handles agreement creation, segregated custody, milestone verification, and controlled payouts. You own the customer experience; TrustedPayer guarantees the workflow integrity.

System Stack

Four clean architectural layers

Cleanly decouple customer acquisition from transaction risk and financial custody.

LAYER 01

Your Application

Your web app, iOS/Android mobile apps, merchant dashboard, or checkout flow. You own 100% of the customer journey.

REST & Webhooks · Custom UI
LAYER 02 · CORE

TrustedPayer Engine

Deals, Parties, Milestone verification, Inspection windows, and Deterministic Dispute Pauses.

State Machine · Idempotency
LAYER 03

Ledger & Audit

Cryptographic audit trails, immutable double-entry balances, and signed event streaming.

HMAC SHA-256 · Double Entry
LAYER 04

Regulated Custody

Licensed banking partners holding funds in segregated, bankruptcy-remote escrow trust accounts.

Segregated Trust · Automated Clearing
Domain Objects

Objects your engineers will build with

The data model is deliberately small and deterministic. Select any object to view its state lifecycle and representative JSON payload.

Agreement CoreActive in Sandbox

Deal

The core agreement: parties, total amount, currency, terms, release conditions, and dispute rules.

Valid State Machine Transitions
1.draft2.fundable3.funded4.in_progress5.delivered6.confirmed7.disputed8.resolved9.released10.cancelled
Schema Representationapplication/json
{
  "id": "deal_01H8X...",
  "currency": "NGN",
  "amount": 750000,
  "status": "funded",
  "release_condition": "buyer_confirmation",
  "parties_count": 2
}
Platform Capabilities

What each module changes in your product

Modular components that integrate independently. Start with simple two-party releases and scale into complex milestone escrow.

01

Deals & Agreements

Create and govern transaction terms between 2 or more parties with strict schema validation and programmable release conditions.

  • Customizable release rules (buyer confirmation, milestone signoff, courier delivery)
  • Multi-party support (buyer, seller, broker, platform fee)
  • Strict state machine with zero ambiguous intermediary states
02

Segregated Wallets & Custody

Programmatic escrow balances held with licensed financial custody partners, separated completely from operational capital.

  • Per-deal virtual account generation and dynamic payment links
  • Immediate cryptographic proof of fund isolation upon confirmation
  • Double-entry ledger ensuring zero math discrepancy
03

Milestone Checkpoints

Break high-value transactions or multi-month contracts into granular checkpoints with individual approval triggers.

  • Partial release orchestration per milestone sign-off
  • Mandatory file attachment and deliverable verification
  • Automatic expiration timers and inactivity safeguards
04

Delivery & Inspection Windows

Bridge physical logistics and digital handoffs with automated couriers and configurable inspection grace periods.

  • Real-time courier dispatch status webhook sync
  • Configurable inspection countdowns (e.g. 48h to inspect goods)
  • Auto-release fallback if buyer fails to inspect after verified delivery
05

Dispute & Evidence Management

Deterministic exception handling that pauses relevant payouts instantly while preserving a verifiable audit trail.

  • Instant freeze on contested funds with zero partial leakage
  • Structured evidence submission portal for buyer and seller
  • Platform admin resolution APIs and fair arbitration workflows
06

Signed Events & Replay

Keep internal databases, ERPs, and customer apps in lockstep with HMAC-SHA256 signed webhooks and full replay logs.

  • Cryptographic request validation to prevent tampering
  • Automatic exponential backoff retries over 72 hours
  • On-demand event replay via developer dashboard or API
Operational Governance

Who does what, in plain language

A trust platform fails when responsibility is ambiguous. We document this precise division for every production integration.

Operational AreaTrustedPayer RoleYour Application Role
Customer RelationshipProvides the headless transaction capability, APIs, and state machineOwns the customer branding, onboarding journey, user support, and front-door UI
Agreement TermsEnforces strict validation, state consistency, and cryptographic immutabilityCaptures commercial terms from your customers and confirms mutual agreement
Fund Custody & FlowOrchestrates segregated custodial holding through licensed banking partnersPresents the funding methods to users and reflects real-time status in your UI
Release ExecutionExecutes payout release only when configured programmatic conditions are fulfilledSends the verified confirmation trigger or inspection signoff from your platform
Identity & VerificationIntegrates biometric and registry verification flows (NIN, BVN, CAC)Applies internal KYC tiers, fraud rules, and user qualification standards
Dispute ArbitrationProvides the freeze mechanism, evidence aggregation, and resolution engineDefines mediation policies and communicates directly with end-users
Financial ReportingGenerates signed webhook events, audit logs, and double-entry ledger exportsReconciles payouts against internal accounting, taxation, and treasury systems

Ready to test transaction lifecycles?

Open the sandbox to create mock deals, simulate customer funding states, and inspect HMAC signed webhooks in your browser.