Get the free 24h audit
Private & secure.

Your data never leaves your hands.
Neither does your money.

Hosting

Non-US. Dedicated. Off-reach.

Every company in the hosting chain is non-US. No CLOUD Act. No FISA 702. The exact jurisdiction is disclosed to your DPO and your regulator, nobody else.

Encryption

TLS 1.3 · AES-256 · HSM keys

Encrypted in transit and at rest. Your tenant, your keys. Nobody shares a secret here.

Edge

Logs stay in your house

Edge, CDN, observability: all non-US. Your logs never cross a border you didn't approve.

Bounty

Public bug bounty, safe harbour

48h acknowledgment. Severity-scaled payouts. Independent graders. Skin in the game.

The stack

Every layer named.
Every jurisdiction shown.

Edge & CDN
sovereign, in-jurisdiction
Application
dedicated, single-tenant
Data & keys
AES-256 · HSM · per-tenant secrets
Observability
self-hosted, logs stay home
US hyperscalers
CLOUD Act · FISA 702
excluded
▼ data probe →
Try it

Send the raid. See what they get.

Raid us and the vault is empty, we never hold your money. Raid a normal processor and it is gone.

Try it · send the raid

See what they get.

MX$ 0 held
Empty by design
Your money never stays here.
The Vault

Lock a deposit in the vault. Survive a custody attack. MetaGrator holds nothing.

Next

Read it yourself.
Then ask us the hard questions.

We will walk your security team through the stack, answer what we can answer, and say plainly where something is a design intention rather than a thing already running.