Confidential treasury · FHE-native · Arbitrum Sepolia

Corporate Treasury.

Confidential by Design.

ShieldCard enforces spend policy on encrypted data, settles approved spend on-chain, and gives auditors exactly the access they need — nothing more.

Deploy for Your Team Explore Live Demo How It Works GitHub

FHE-sealed

amounts & limits

3-tier

risk routing

Testnet

MockUSDC settlement

The problem

On-chain transparency
cuts both ways.

Blockchains are auditable by design. That's a feature — until your financial controls become public information.

Competitors see your vendor relationships

When payment to a vendor appears on-chain, the vendor address and amount are both public. Your sourcing strategy is visible to anyone watching the chain.

Budget caps enforce nothing

Any policy limit stored in plaintext contract storage can be read and gamed. There is no enforcement that isn't also disclosure.

Approval patterns reveal strategy

The sequence of approvals and amounts correlates with business decisions. A competitor watching approvals can infer runway, headcount, and expansion plans.

How it works

Three steps.
Zero plaintext exposure.

Employee submits encrypted

The spend amount is encrypted in the browser via CoFHE before any network call. Only the ciphertext leaves the device.

Policy evaluates privately

The FHE contract compares the encrypted amount against an encrypted limit. No plaintext. No leaks. The result is also encrypted.

Authorized reveal only

The employee reveals their result via a cryptographic permit. The admin publishes the outcome to the on-chain audit trail.

The thesis

Encrypt. Decide. Settle and prove.

Confidential compute with economically secured correctness. Public accountability via verifiable audit packets — no wallet required to verify.

Act 1

Encrypt

Employee encrypts the spend amount in-browser via the Fhenix CoFHE SDK. Only ciphertext handles enter the contract.

Act 2

Decide

FHE policy engine evaluates encrypted amounts against encrypted thresholds. Routes to Auto-Approved / Needs-Review / Auto-Denied without decrypting.

Act 3

Settle and prove

Approved requests move through a multi-approver vault. Testnet MockUSDC pays out. Every settlement appends to a tamper-evident hash chain.

FHE-encrypted compute · No real payments · Testnet MockUSDC

Architecture

FHE in
production.

Powered by Fhenix CoFHE — an off-chain FHE coprocessor for EVM chains. Encrypted state lives on Arbitrum Sepolia. Computation happens in a confidential enclave.

Encrypted at rest—Amounts, thresholds, and dept budgets stored as FHE handles on-chain
Private computation—Policy tiers, risk bitmap, and dept accumulation run on ciphertext
Vendor compliance gate—Suspended or unchecked vendors flag risk bits without revealing amounts
Permit-gated reveal—Only authorized addresses can request decryption via CoFHE permit

Data flow

Employee Browser

Encrypts locally

encrypted

FHE Contract

Evaluates on ciphertext

encrypted

Authorized Party

Decrypts with permit

FHE operations

FHE.addFHE.lteFHE.selectFHE.asEuint32FHE.decrypt

Fhenix CoFHE · Arbitrum Sepolia

Live on Arbitrum Sepolia

Deploy Your Confidential
Treasury in Minutes.

Three contracts on Arbitrum Sepolia. Encrypted policy enforcement, scoped auditor access, and a tamper-evident settlement rail — live in under two minutes.

Deploy for Your Team Observer view — no wallet needed