Untraceable
Sender, receiver and amount are fully encrypted on-chain.
Confidential settlement layer
Confidential transaction layer
The secret to Remi's compliance and privacy on-chain at scale.
- Network
- Stellar
- Asset
- USDC
- Visibility
- Auditor keys
What it delivers
Confidential by default, auditable on demand.
Remi moves value on-chain the way regulated institutions actually need it to move: private to the market, visible to the reviewer, and ready to connect to the banks that clear it.
Selective transparency
Regulators and partners can audit transactions lawfully, when required.
Bank-ready
Enables clean integration with traditional payment networks.
At a glance
The settlement model, in four facts.
USDCSettlement asset
StellarSettlement network
Auditor keysRegulatory visibility
SponsoredUser transaction fees
Design principle
A network utility layer, by design.
Before the mechanics, the framing that governs everything on this page.
Confidentiality & oversight
Private from the public, transparent to the regulator.
The same transaction is confidential to the market and legible to an authorized reviewer. Neither property is bolted on; both are enforced by the ledger.
Private from the public
On-chain, transaction amounts and balances stay confidential. Encrypted balances are held in a confidential wrapper, so counterparties, competitors and casual observers cannot read transaction values from the public ledger.
- Amounts and balances are encrypted on-chain.
- Commercially sensitive flow is never exposed to the market.
Transparent to the regulator
Oversight is preserved by design. Every account escrows an auditor viewing key at registration, and selective disclosure lets an authorized reviewer decrypt one specific transaction — without exposing any unrelated activity.
- Auditor viewing keys are escrowed at registration.
- A single transaction can be disclosed on lawful request.
How it moves
The confidential flow, end to end.
Value enters, moves and exits through four operations. Each step is verified on-chain by a zero-knowledge proof, so confidentiality never comes at the cost of validity.
Confidential flowDeposit → transfer → withdraw
1
01 Deposit
Public USDC moves into a confidential balance. The holder deposits real USDC; the balance becomes encrypted inside the confidential wrapper, verified on-chain by a zero-knowledge proof.
2
02 Merge
Incoming funds are made spendable. Received amounts are merged into the account's confidential balance, ready to be transferred onward.
3
03 Confidential transfer
Value moves between accounts with the amount and both balances kept hidden, while the validity of the transfer is proven on-chain for anyone to verify.
4
04 Withdraw
A confidential balance returns to public USDC when needed, ready for the regulated fiat last-mile of cash-in and cash-out.
Compliance
Compliance is a precondition, not an add-on.
Regulatory visibility is not a feature layered over the system after the fact. It is a condition the ledger enforces before value can move.
Keys escrowed at registration
Every account escrows an auditor viewing key when it registers. The requirement is enforced on-chain by a zero-knowledge proof, so oversight cannot be skipped or opted out of.
Proofs verified on-chain
A verifier contract checks each zero-knowledge proof before any balance changes. Validity becomes a property of the ledger itself, not a matter of trusting a counterparty.
Selective disclosure
On lawful request, an authorized reviewer can decrypt one specific transaction — and only that transaction. Unrelated activity stays confidential throughout.
Positioning
What it is, and what it is not.
The application, compliance and operations layer
Remi is the application, compliance and operations layer that makes Stellar's confidential-transfer capability usable by regulated operators, partner banks and PSPs. It is delivered as an open-source reference implementation.
Not an instrument, not a dependency
It is not a financial instrument, and it is not a dependency of the business. No transaction is gated on holding a native asset — user and recipient fees are sponsored, so the layer stays usable without anyone managing a balance to pay for it.
Foundations
Built on real USDC, on Stellar.
The confidential layer settles in the asset institutions already recognize, and removes the friction that would otherwise force users to manage the network's native asset.
Real USDC, wrapped
The confidential layer wraps real USDC through Stellar's Asset Contract pattern (SAC / SEP-41), with no dependency on issuer cooperation. Settlement stays in an asset institutions and partners already recognize.
Fees are sponsored
User and recipient fees are covered by sponsored transactions — fee-bump and sponsored reserves — so senders and recipients never need to hold or manage XLM to move value. There is no gate to clear before a transfer settles.