Built like the money matters.
This page describes how Andy is being built to handle money and personal data. It is written as policy — what the platform does — rather than a tour of its controls.
Checked before it moves
Every transfer is screened before it is authorised — not after it has already gone. To a sender, that means money doesn't set off and then get stuck; to the institutions we work with, it means nothing moves that shouldn't. The ordering is the point: checks come first, movement second.
Every movement accounted for
A double-entry ledger records every movement of money on the platform. Each entry has an equal and opposite counterpart, so balances are the sum of what actually happened — nothing is implied, and nothing is reconstructed after the fact.
Your data
Sensitive personal data is encrypted at the field level, not only in bulk. Access follows least-access principles: systems and people reach what their role requires, and no more.
Your keys
LaterThe digital dollar balance we plan to offer is built on non-custodial wallets. The keys are yours — not Andy's to hold, and not Andy's to lose.
Andy is pre-launch. These are not features to be added once the platform is big enough to need them — they are the standards it is being built to from day one.