Skip to main content
AroPay is a confidential payments solution: it lets businesses send sealed, private payments on public ledgers without exposing confidential information. Amounts and balances are encrypted on-chain with fully homomorphic encryption, so you keep the auditability and finality of a public blockchain while payroll, supplier pricing, and treasury flows stay private. AroPay runs on the Aro Confidential Rails, built on Zama Protocol FHE. The value layer is cAROUSD (Aro Confidential US Dollar), an ERC-7984 confidential token designed to be backed 1:1 by liquid stablecoins (USDC and USDT) through the Aro Liquidity Commitment, with sealed transfers and regulator-grade disclosure controls built into the rail itself.

​
Where AroPay is today

The solution is currently available as an MVP sandbox for B2B users, running on Ethereum Sepolia while development completes, with a Mainnet deployment to follow. The platform itself orchestrates private payments in any environment; what changes is the money behind it:

Sandbox (current, Sepolia)

The development environment. A test stablecoin stands in for USDC/USDT and a built-in faucet provides funds, so you can integrate and rehearse flows end to end. Everything else, including the FHE rail, is real and on-chain.

Production (Mainnet, coming soon)

The same platform and API orchestrating real value: cAROUSD minted and redeemed 1:1 against USDC/USDT reserves. Integrations built against the sandbox carry over.
These docs cover the sandbox environment. Every account ships with admin-provisioned credentials, custodial wallets, and live on-chain access to the confidential rail, driven either from the web dashboard or, primarily, from a versioned JSON API.
The dashboard is an API client. Everything you can click in the UI maps one-to-one onto the same /api/v1 endpoints documented here, so anything you prototype by hand is already automatable.

​
What you can do with it

Fund a wallet

Get money into a wallet. In the sandbox, the built-in faucet sends test stablecoin plus an automatic gas top-up.

Mint confidential funds

Convert public stablecoin into cAROUSD, an encrypted ERC-7984 balance that hides amounts on-chain.

Send private transfers

Move value publicly (standard ERC-20) or privately with FHE-encrypted amounts: one endpoint, two rails.

Redeem back to stable

Burn cAROUSD and receive stablecoin 1:1, with asynchronous settlement you can track end-to-end.

​
Start here

Quickstart

From first login to a private transfer in about five minutes.

How AroPay works

The architecture: wallets, rails, the operator, and mint modes.

API reference

Every endpoint with schemas, examples, and an interactive playground.

​
The platform at a glance

​
How accounts work

AroPay sandbox accounts are provisioned by your Aro Media contact; there is no self-serve sign-up during the MVP. You receive a one-time temporary password, set your own password on first login, and from there can enable two-factor authentication, register passkeys, and create API keys for programmatic access.
Already have credentials? Head straight to the quickstart; it walks the full loop: wallet → faucet → mint → private transfer → redeem.