Keep Your Funds
Safe From Here On
Safeheron offers enterprise-grade digital asset self-custody services and MPC privatization solutions, ensuring the highest level of security for your assets.
Secure, Efficient, Scalable
Top-tier, battle-tested security solutions for 260+ institutions since 2021.
RAISED
PEAK AUC
SECURELY TRANSFERRED
Committed to the highest standards of security and compliance.
Certified and Insured
Partner with Top Security and Compliance Partners
Compliance in Action
Explore Our Trust Center
MPC Self-Custody
Enterprise-grade digital asset self-custody services
Eliminate single-point failures to manage digital assets
- MPC and TEE technologies protect your digital assets with the highest level of security.
- Manage wallets and transfer funds on multiple terminals, including the mobile App and Web Console.
- Policy Engine flexibly controls access authorization.
- Off-chain multisignature enhances approval privacy and significantly reduces on-chain transaction fees.
Interact with dApps under multi-party control
- Supports all public EVM-compatible blockchains and DeFi protocols.
- Policy Engine meticulously delegates transaction permissions.
- Real-time contract monitoring and phishing detection safeguard every transaction.
- Customize RPC nodes for diverse business scenarios.
- Collaboratively manage smart contract owner’s permissions to reduce single-point risk in critical operations.
Enterprise-grade digital asset self-custody services
- Seamlessly create and manage millions of MPC wallets with APIs.
- Automatic gas fuelling and sweeping significantly improve integration efficiency and accelerate your business success.
- Web3 API securely controls the entire lifecycle of smart contracts.
- API Co-Signer automates transaction approval and signing.
- MPC and TEE technologies provide multi-layer security to eliminate single-point-of-failure risk for private keys.
MPC Node Suite
White-label MPC privatization solutions
Flexibly build MPC wallets for seamless integration into your applications
- Fully privatized, with hardware-level data security and privacy protection under your control.
- A secure, universal, and cross-platform MPC-TSS key management solution.
- Support diverse business scenarios to accelerate your success.
Safest software is
open source
Safeheron independently developed MPC algorithms and is now the world's first company to open-source the mainstream MPC-TSS algorithm in C++.
Why choose us?
100% control over assets
3-of-3 MPC-TSS key management eliminates the single-point failures with full asset control.
Open-source algorithms
Safeheron open-sourced the world's first MPC-TSS algorithm library implemented in C++.
Maximum security
Safeheron’s multi-layer security defenses against state-level attacks.
Certified and insured
Safeheron is certified with ISO/IEC 27001:2022 and SOC 2 and is insured by Lockton.
Extensive features
Safeheron offers one-stop management for Web3, DeFi, NFTs, and smart contracts.
Governance and policy
TEE Policy Engine customizes multi-dimensional policies and approval workflows.
Technical support
Robust technical support encompasses use cases, solutions, technologies, and security expertise.
Diversified solutions
Battle-tested SaaS services and MPC privatization solutions.
Hear from our customers
Our partnership with Safeheron has unlocked new possibilities in digital payment through advanced MPC and TEE technology. This collaboration strengthens our security, scalability, and compliance, enabling us to meet the highest standards. With Safeheron’s powerful MPC self-custody solution, dtcpay continues to provide our users with institutional-grade security, seamless transactions, and an intuitive user experience, reinforcing our commitment to advancing the future of digital payments.
As a trusted financial service provider, we have strict standards when choosing our security infrastructure provider. Safeheron turns out to be a great match. Its MPC self-custody solution eliminates private key risks while providing enterprise-grade security with ease of use. With Safeheron’s sophisticated technology, we are confident to provide our customers with a reliable and secure digital payment experience.
The Safeheron team has in-depth expertise and extensive practical experience in blockchain security. With a highly robust security mechanism, a comprehensive permission management system, and an excellent user experience, Safeheron has provided strong support for our institutional trading services in the Asia region. We look forward to further deepening our collaboration.
UXUY has developed a highly secure key management service powered by Safeheron's MPC technology. In today's challenging cyber environment where digital assets face numerous security threats, Safeheron's mature solution provides us with robust technical assurance. Through this innovative MPC solution, we have effectively reduced the risks of private key leakage and asset theft, delivering users a seamless experience that combines both security and convenience.
With Safeheron’s hardcore MPC technology, we ensure the highest level of security for our clients' crypto funds within our crypto-to-fiat feature. In addition, Safeheron's customer support exemplifies excellence, promptly resolving issues to maintain our uninterrupted operations.
Partnering with Safeheron has been transformative for AlphaYield. Their MPC + TEE platform delivers the enterprise-grade security and operational efficiency we need to execute large institutional trades with complete confidence, while their exceptional team consistently goes above and beyond to support our evolving needs.
Security, flexibility, and compliance — all solved on one platform. Since integrating Safeheron, our business volume has tripled.
Latest Updates from Safeheron
What Are the MAS Outsourcing Guidelines?
What do the MAS Outsourcing Guidelines require of institutions that use third-party service providers? The core principle fits in one sentence: outsourcing does not diminish the obligations of an institution, its board and senior management to comply with Singapore laws and regulations. On this basis, the guidelines require institutions to assess the materiality of their outsourcing, conduct due diligence on service providers, set out more than ten key terms in the contract, and put business continuity and exit arrangements in place. Singapore-licensed institutions that use third-party wallet, custody or cloud services all fall within these requirements. Which Institutions Do the MAS Outsourcing Guidelines Apply To? MAS has issued two sets of outsourcing guidelines, both effective from 11 December 2024. One applies to banks and merchant banks and is accompanied by the legally binding MAS Notices 658 and 1121; the other applies to financial institutions other than banks and was revised on 24 January 2025. The institutions listed in the non-bank version include Major Payment Institutions (MPIs) and Standard Payment Institutions (SPIs), and payment services licensees that provide Digital Payment Token Service are also covered. Paragraph 1.1 of both guidelines says the same thing: outsourcing does not diminish the obligations of an institution, its board and senior management to comply with the relevant laws and regulations in Singapore. An institution can […]
Who Is Responsible for Compliance When Using a Third-Party Wallet Provider?
Who is responsible for compliance when using a third-party wallet provider? Responsibility remains with the regulated, customer-facing institution that uses the service. Regulators in the EU, the UK, Singapore and Hong Kong have all made clear that outsourcing a function to a third party does not transfer regulatory responsibility along with it. Under the standards of the Financial Action Task Force (FATF), whether the wallet provider itself needs to be regulated depends on whether it controls customer assets. What Do the EU Rules Say? The EBA Guidelines on outsourcing arrangements, published by the European Banking Authority (EBA) in 2019, provide that outsourcing a function cannot result in the delegation of management body responsibilities, and that institutions remain fully responsible for their regulatory obligations. The Digital Operational Resilience Act (DORA), which has applied since 17 January 2025, likewise states that financial entities remain at all times fully responsible for complying with their obligations under the regulation, including when using third-party ICT services. On white labelling specifically, the EBA’s 2025 Report on White Labelling further states that the provider contracting with the customer bears ultimate responsibility for compliance, and is also fully responsible for anti-money laundering and counter-terrorist financing obligations. The report also lists “a lack of transparency about the roles and responsibilities of each party” as one of the risks white […]
How Can a Business Issue a Stablecoin?
How can a business issue a stablecoin? First choose an issuing jurisdiction and obtain a local issuance licence, then establish fully backed reserves, redemption and disclosure mechanisms as regulators require, and finally build the technical components for minting, burning and freezing. The US GENIUS Act, the EU’s MiCA, Hong Kong’s Stablecoins Ordinance and Singapore’s stablecoin framework all allow only authorized entities to issue regulated stablecoins in their jurisdictions. What Licences Are Needed to Issue a Stablecoin? In the US, the GENIUS Act provides that only a “permitted payment stablecoin issuer” may issue payment stablecoins. This includes approved subsidiaries of insured depository institutions, federal qualified issuers and state qualified issuers; state qualified issuers with no more than US$10 billion in outstanding issuance may opt for state-level supervision. According to an announcement by the Office of the Comptroller of the Currency (OCC), the Act takes effect on 18 January 2027. In the EU, MiCA requires issuers of e-money tokens (EMTs) to be credit institutions or electronic money institutions, and to submit a crypto-asset white paper to the competent authority and publish it; issuing asset-referenced tokens (ARTs) requires separate authorization. MiCA explains the difference between these two token types. In Hong Kong, issuing a fiat-referenced stablecoin requires a licence from the Hong Kong Monetary Authority (HKMA) and paid-up share capital of at least […]
What Is the Difference Between a White-Label Wallet, Wallet-as-a-Service and an Embedded Wallet?
What is the difference between a white-label wallet, Wallet-as-a-Service and an embedded wallet? The three describe different sides of the same thing: white label emphasises that the brand belongs to the business while the technology comes from a provider; Wallet-as-a-Service (WaaS) emphasises that wallet functionality is delivered through APIs; and an embedded wallet emphasises that the wallet is built directly into an app and used seamlessly by end users. A single product can be all three at once. What Is Each of the Three? A white-label crypto wallet is a business model. The European Banking Authority (EBA) defines white labelling as an arrangement in which an institution agrees with a partner to distribute and provide financial products or services under the partner’s own brand. Applied to wallets, customers see the business’s brand, while the underlying technology comes from the provider. Wallet-as-a-Service (WaaS) is a delivery model: wallet infrastructure is provided via APIs, allowing businesses to integrate digital asset wallet functionality into their own apps without building the underlying layer from scratch. An embedded wallet is a product form: the wallet is built directly into an app and created automatically when the user signs up, with no need to install a separate wallet or safeguard a seed phrase. How Do the Three Relate to Each Other? The three answer different questions. […]
What Are the Steps to Develop a White-Label Crypto Wallet?
What are the steps to develop a white-label crypto wallet? With a white-label solution, a business does not need to write the underlying code itself, but it still has four things to do: determine the custody model and licensing, evaluate and integrate a provider, configure policies, approvals and compliance processes, and finally complete testing before going live. This article assumes the business has already decided to use a white-label solution; the comparison with building in-house is covered in how a business can launch a digital wallet. Step 1: How Do You Determine the Custody Model and Licensing? The custody model determines whether a business needs a licence. Guidance from the Financial Action Task Force (FATF) considers most custodial wallet providers to be virtual asset service providers, because they hold or safekeep virtual assets on behalf of others; providers that only develop or sell unhosted wallet software generally are not. The EU’s MiCA lists “safekeeping or controlling crypto-assets, or the means of access to them (such as private keys), on behalf of clients” as a crypto-asset service, which may only be provided in the EU by an authorized crypto-asset service provider (CASP) or by licensed entities such as credit institutions that have notified the competent authority. A business therefore needs to determine first who holds the keys or key shards for […]