Royal-blue infrastructure for safer commerce

Build Protected Transactions Into Your Product

One transaction layer for agreement, funding, delivery, confirmation, release, and dispute handling. You keep the customer experience; TrustedPayer keeps the workflow coherent.

Engineered for:Marketplaces•Services•Commerce•Enterprise
OriginationStep 01

Your product

Your customer brand & user journey

  • Your brand and journey
  • Your users and roles
  • Your notifications
UI & Client ExperienceInitiates Deal →
Protocol Engine
TrustedPayer
Active

TrustedPayer

Deterministic transaction lifecycle

  • Deal and milestone state
  • Release and pause rules
  • Dispute and audit records
← Receives TermsEnforces Payout →
SettlementStep 03

Configured partners

Licensed custody & identity rails

  • Payment and custody setup
  • Identity verification
  • Settlement and reporting
Banking & Trust EscrowExecutes Funds

One lifecycle. Every state visible.

Draft, funded, progress, confirmation, and release, with a documented pause path.

Draft
→
Funded
→
Progress
→
Confirm
→
Release
Deterministic Progression Rail

The Deal Lifecycle. Every state visible.

From creation to final reconciliation, every transition is governed by strict rules, signed events, and full exception handling.

01Initiation

Create

Your product posts the deal terms, currency, amount, participants, and configured release rule.

Idempotent POST /v1/deals validates all terms before committing state.
02Custody Lock

Fund

The buyer deposits into the segregated trust account. TrustedPayer records the confirmed hold.

Funds are legally isolated from both platform and operational capital.
03Execution

Progress

Milestones, tracking numbers, and deliverable files are submitted with immutable timestamps.

Both parties observe synchronized progress markers and delivery evidence.
04Inspection

Confirm

The authorized party confirms acceptance, or triggers an instant pause on dispute.

Configurable 24-72h inspection window protects against premature release.
05Settlement

Release

TrustedPayer executes payout according to the agreed rule and fires signed webhooks.

Instant settlement to seller's verified bank account or digital wallet.
06Audit Trail

Reconcile

Complete double-entry accounting records, event logs, and tax exports returned to your systems.

Full cryptographic audit history for compliance and finance operations.
Developer Quickstart

Create a protected deal in one API call

curl -X POST https://api.trustedpayer.com/v1/deals \
  -H "Authorization: Bearer tp_live_sec_89f021..." \
  -H "Idempotency-Key: deal-req-uuid-99214" \
  -H "Content-Type: application/json" \
  -d '{
    "reference": "order-laptop-macbook-pro",
    "currency": "NGN",
    "amount": 1450000,
    "release_condition": "buyer_confirmation",
    "inspection_window_hours": 48,
    "buyer": { "external_id": "usr_99120", "role": "buyer" },
    "seller": { "external_id": "usr_33108", "role": "seller" }
  }'
Authentication: Bearer Token · Idempotency GuaranteedTest live in Sandbox
The Real Problem in Modern Commerce

Payment is easy. Agreement is the hard part.

A protected transaction needs clear terms, accountable parties, evidence of delivery, controlled releases, and a fair way to pause when something changes.

Ad-Hoc Approach

Assembled in-house

High Risk & Overhead

Wallet states scattered across systems

Held funds, balances, and payouts are tracked in disparate databases without a single transactional ledger.

Release logic hidden in manual scripts

Payout sign-offs depend on internal customer support Slack channels and improvised cron scripts.

Dispute evidence lost in inboxes

Waybill receipts, defect photos, and messages are sent over random emails with zero audit timestamping.

No shared record for either party

Buyers and sellers see conflicting status screens, leading to angry escalations and chargebacks.

9 to 18 months of platform development

Engineering quarters wasted assembling ledger states, banking custody, and KYC logic from scratch.

Time-to-market: 9-18 monthsFragile maintenance
Recommended Architecture
Structured Platform

Built on TrustedPayer

Governed & Predictable

One documented deal and wallet lifecycle

Every transaction, milestone, and payout follows a single state machine exposed via webhooks.

Release conditions configured per agreement

Automated inspection timers, milestone approvals, or multi-signature sign-offs run automatically.

Structured dispute & evidence workflow

Instant release pausing with tamper-proof delivery attachments and impartial reviewer intervention.

Audit trail returned to your systems

Signed HMAC webhooks stream immutable event logs into your operational dashboards in real time.

Sandbox to production in days, not quarters

Standardized REST endpoints, complete test harness, and guided regulatory review for rapid go-live.

Time-to-market: Days in SandboxZero custom custody code

Mechanism over promise

Every platform statement is backed by an atomic state transition in the ledger, verifiable by both parties.

Explore the Domain Model
Modular Platform Architecture

Six Core Capabilities. One Transaction Layer.

Adopt the modules your commerce product needs today, and scale seamlessly into complex multi-party milestone escrow.

MODULE 01

Deal Creation & Negotiation

Create one shared record holding the parties, amount, currency, scope, delivery terms, and approval conditions. Both sides clarify terms before funds move.

  • Draft and invitation states
  • Terms amendments
  • Role-based permissions
Standard REST APIActive in Sandbox →
MODULE 02

Wallets & Funding States

Connect funding flows directly to segregated bank custody. Track available, held, pending, released, and returned amounts per deal with cryptographic certainty.

  • Virtual account rails
  • Ledger audit states
  • Settlement references
Standard REST APIActive in Sandbox →
MODULE 03

Milestones & Sign-offs

Break complex commercial engagements into reviewable checkpoints. Each milestone carries amount, due date, evidence criteria, and confirmation owner.

  • Checkpoint proof-of-work
  • Confirmation ownership
  • Partial release support
Standard REST APIActive in Sandbox →
MODULE 04

Delivery & Inspection

Connect courier tracking, dispatch waybills, physical inspection windows, and affirmative acceptance records so both parties see the exact same evidence.

  • 48h inspection timers
  • Waybill attachments
  • Proof-of-delivery sync
Standard REST APIActive in Sandbox →
MODULE 05

Dispute & Resolution Workflow

When an agreement condition is contested, pause the affected release automatically, collect time-stamped evidence from both parties, and resolve fairly.

  • Automated fund pauses
  • Structured evidence vaults
  • Arbitration execution
Standard REST APIActive in Sandbox →
MODULE 06

Signed Webhooks & Audit Records

Keep internal accounting systems, databases, and customer notifications in real-time sync with HMAC-SHA256 signed event delivery and replay capabilities.

  • HMAC event signatures
  • Audit replay log
  • Reconciliation exports
Standard REST APIActive in Sandbox →
Commercial Blueprints

One Transaction Layer. Tailored Commerce Blueprints.

The underlying platform does not change. What changes is the customer journey you design for your buyers, sellers, contractors, and approvers.

Marketplaces

High-value listings without building escrow ops

Give buyers and sellers a structured way to agree terms, use milestones, and resolve exceptions without your team assembling custody from zero.

  • Buyer & seller onboarding flows
  • Listing-level protected deals
  • Dispute queues for trust & safety
Service Businesses

Turn client proposals into governed engagements

Convert an accepted proposal into a protected deal with a deposit, delivery checkpoints, approval steps, and controlled payout as stages are signed off.

  • Progress deposits & retainers
  • Multi-stakeholder sign-offs
  • Delivery sign-off evidence vaults
Commerce Platforms

Protection where transaction risk is highest

Attach agreed inspection conditions to orders for categories where buyers and sellers need certainty, keeping your existing storefront intact.

  • Order-to-deal mapping
  • 48h physical inspection timers
  • Return & dispute mitigation
Enterprise

Coordinate multi-party vendor commitments

Manage approvals, vendor deliveries, evidence, exceptions, and financial reporting across teams while keeping every commitment tied to release rules.

  • Departmental approval chains
  • Vendor compliance scorecards
  • Procurement audit reconciliation
Platform Integrity

Verifiable Guarantees. Mechanism over promise.

Security is not marketing copy. It is a set of deterministic platform behaviours that your developers can independently test and audit.

Cryptographically Signed Events

Every webhook carries an HMAC-SHA256 signature that your application verifies before applying any state change.

✓ Verified in Sandbox

Idempotent State Mutators

Every state-changing API request requires an idempotency key so network retries never create duplicate deals or charges.

✓ Verified in Sandbox

Segregated Trust Custody

Funds are deposited directly into designated client-escrow trust accounts at regulated banking institutions.

✓ Verified in Sandbox

Double-Entry Audit Ledger

All financial balances are tracked across credits and debits with zero floating math or unallocated capital.

✓ Verified in Sandbox
Get Started in Minutes

Start with a test deal today

The fastest way to evaluate TrustedPayer is to run the complete lifecycle yourself. The sandbox takes minutes and never moves real money.