Built to hold
up to scrutiny.
Connex handles proof infrastructure for cross-institutional payment handoffs. The security of that infrastructure is not a feature - it is the product. Here is how we build it.
How we protect the proof layer.
Tamper-Evident Proof Bundles
Every proof bundle generated by Connex is cryptographically signed. Any alteration to a proof record after the fact, by any party, including Connex, is mathematically detectable. The signature scheme is based on established, publicly documented cryptographic standards.
Multi-Node Witness Consensus
Proofs are generated through a multi-node witness consensus process. No single node, and not Connex itself, can unilaterally generate, alter, or suppress a proof. The architecture is designed so that control over the record is distributed, not centralised.
Zero Knowledge by Design
Connex does not capture, store, or process transaction amounts, account numbers, customer names, or personal financial data. We capture only the structural metadata of the handoff, the minimum information needed to generate a verifiable proof, and nothing more.
No Payment Path Dependency
Connex connects alongside existing payment infrastructure without sitting in the transaction path. A security incident at Connex cannot block, delay, or alter any payment. Our infrastructure cannot become a vector for attacking the payment systems we connect to.
Authenticated and Encrypted
All connections to the Connex API are authenticated using institution-specific credentials and encrypted in transit. API access is scoped to the minimum permissions required for each integration, ensuring no institution can access another institution's proof records.
Verify Without Trusting Us
Every proof bundle can be independently verified by any authorised party using standard cryptographic tools. You do not need to trust Connex's systems or processes to validate a proof. The mathematics provides the assurance, not our word.
Limits that are not negotiable.
Report a vulnerability.
If you discover a security vulnerability in any part of the Connex infrastructure, please report it responsibly to security@connextechnologies.org. We take all reports seriously, will investigate promptly, and will communicate directly with the reporter about findings and any remediation steps.