Deflow
Non-custodial compliance payment gateway for crypto checkouts.
Demo
About
Deflow bridges the gap between regulatory requirements and Web3 privacy. We separate fund flow from compliance screening: money moves strictly between payer and merchant contracts, while checks run in an isolated enclave. Non-custodial: Deflow never takes custody of funds. Payments go into the merchant’s dedicated smart contract (MerchantGateway) during a short screening window. The contract has only two exits: forward to the merchant on approval, or refund to the payer if flagged or timed out. Funds cannot be frozen. Zero Data Liability: Personal documents and paid AML intelligence never touch the merchant's servers, Deflow's backend, or the blockchain. Verification executes inside a Chainlink CRE enclave (TEE). The blockchain only ever receives an opaque, single-use nullifier, a verified tier, and an expiry timestamp. Compliance: Deflow runs automated sanctions and fund provenance (KYT) checks out of the box for every payments in real time. Merchants toggle identity checks (Sumsub / World ID) only when transaction thresholds or local jurisdictions require it.
How it's made
Deflow combines Solidity gateways on Base Sepolia, a Next.js checkout and a Go Chainlink CRE confidential workflow running in a TEE. Sumsub KYC stays inside the enclave, only a merchant-scoped nullifier reaches the chain. KYT uses GoPlusScreener (instead of Sumsub AML because of costs) to score wallet risk before settlement. Privy provides merchant wallets and approval policies. Payments are escrowed, then settled or automatically refunded. World ID support was prepared but disabled because we were not granted access during the hackathon.