Binta is not currently licensed to transmit money. For paid production use today, you must operate under a BaaS partner's licenses as their agent, or self-host for your own compliance perimeter.
Licensing roadmap →Mock KYC adapter in alpha. Persona and Sumsub integrations planned for M6. OFAC + PEP sanctions screening via OpenSanctions (free dataset) ships in M6.
Postgres TDE and KMS-wrapped field encryption land with M3. In alpha, user data lives in memory and clears on restart.
TLS 1.3 via Let's Encrypt on binta.com. HTTP-only session cookies for the web app.
Property-tested so money can neither be created nor destroyed. For every tenant, net balance per currency is enforced at write time.
Multi-tenant isolation enforced at the ledger. Role-based access control for ops/compliance analysts ships in M4.
Velocity limits, device fingerprinting, biometric step-up planned for M6. Sardine integration under evaluation.
No insurance in alpha. Target: $5M crime bond + $2M cyber by Phase 2.
On-call rotation of one (the founder). Status page and public post-mortems ship with the Phase 1 go-live.