Architecture
How email, Privy, and Base smart wallets fit together.
Key management with Privy
Self-custodial keys secured by Shamir sharding and TEEs.
Base smart wallets
Gasless USDC, deterministic addresses, and onchain ownership.
Security model
What HEVN can and cannot do with your money.
Core principles
Non-custodial by construction
HEVN is not a wallet provider holding funds on your behalf. Your balance is USDC sitting in a smart contract wallet on Base. The only key that can authorize spending from that wallet is your Privy embedded wallet — a key that is cryptographically sharded and never visible to HEVN or to Privy itself. There is no HEVN omnibus account, no pooled balance, and no internal ledger that “represents” your money. The onchain balance is the balance.Deterministic identity
Your entire account chain is derived deterministically: Because each step is deterministic, HEVN can compute the wallet address for any email address before the recipient ever signs up. This is what makes sending money by email safe: funds go directly to a smart wallet that only the owner of that email will ever be able to control. There is no escrow step and no custodial holding period.HEVN is never in the money flow
- Deposits (bank transfers, card top-ups, crypto) settle directly to your smart wallet address.
- Payouts to bank accounts are executed by a licensed banking partner: the partner issues a one-time deposit address, and you send the funds from your wallet. HEVN never receives, forwards, or holds the money.
- Cross-chain deposits and withdrawals use the NEAR Intents 1Click API with one-time passive deposit addresses that HEVN does not control.
What the platform layer does
The HEVN API (and the JWT it issues) covers everything that is not money movement:- Contact book, invoicing, and contract management
- Bank details (virtual IBANs / account numbers) issuance
- KYC/KYB, statements, analytics
- Team and multi-user access administration