Sovereign Hardware. Zero-Custody Settlement.
Air-gapped cryptographic signers, sovereign compute nodes, and titanium backups. Settle directly on Bitcoin or Solana; zero server spending authority, 90-day delivery purge.
Curated by operational discipline
Curated Selection
Featured Hardware
Ordering Protocol
Three-step private settlement.
Direct watch-only settlement with cryptographically isolated shipping records.
Select Verified Hardware
Inspect open-source firmware provenance, secure element ratings, and tamper-evident packaging criteria before committing funds.
Pay From Self-Custody
Locked 15-minute payment window using unique BIP-84 derived addresses or static Solana rails. Spending keys never touch our server.
Discreet Fulfillment
Neutral, unbranded packaging with customs cleared. Courier information is encrypted with AES-256 and permanently purged 90 days after delivery.
Operational Standards
Core protocols & dispensary FAQ.
Verified documentation on custody limits, data purging, and international transit.
Privacy Architecture
Cryptographic segregation of orders, username-only accounts, and scheduled 90-day post-delivery data purging.
Discreet Shipping Matrix
Plain unbranded boxes with customs cleared to 31 countries. No external logos or hardware descriptors.
Hardware Warranty Protocol
Direct manufacturer provenance with 12–36 month defect coverage and offline cryptographic refund handling.
How does watch-only settlement protect customer funds?▼
Our web servers only hold an xpub / watch-only descriptor for Bitcoin and a static public address for Solana. The private keys capable of spending funds are kept in offline, air-gapped cold storage. Even in the event of a full server compromise, attacker access to customer or treasury funds is architecturally impossible.
When and how are delivery records purged?▼
Shipping names and addresses are encrypted at rest with AES-256. Exactly 90 days after delivery is marked complete, an automated cron worker cryptographically overwrites and purges the delivery details from the database, retaining only non-identifying transaction totals for accounting reconciliation.
What happens if my transaction confirms after the 15-minute quote expires?▼
Our on-chain payment monitor continuously tracks the generated derivation address. If your transaction broadcasts within the window but confirms in a later block, the monitor automatically marks the invoice as settled. In the rare event of severe mempool congestion causing an underpayment, customer support initiates an offline refund to your original address.
Are hardware devices delivered with tamper-evident seals?▼
Yes. All air-gapped signers, hardware wallets, and cryptographic nodes are sourced directly from verified manufacturer batches and shipped with serialized, tamper-evident security tape. Outer courier packaging is strictly neutral with no company branding or indication of high-value electronics.







