How does AiraPay keep my money safe

Canada — PSP License

AiraPay holds a Payment Service Provider (PSP) licence issued under Canada's Retail Payment Activities Act (RPAA), supervised and enforced directly by the Bank of Canada. This licence enables AiraPay to conduct merchant acquiring and payouts within Canada and across its live corridors.

To ensure client funds are safe:

• AiraPay is required under the RPAA to hold client funds in end-of-day segregated accounts, separate from AiraPay's own operational capital at all times.
• Client funds held under the PSP licence are not accessible to AiraPay's creditors in the event of insolvency, liquidation, or bankruptcy.
• AiraPay supports Visa, Mastercard, and Amex acquiring, and guarantees minimum chargebacks to its institutional clients.
• The PSP licence supports AiraPay's live CA↔IN and US↔IN corridors, with T+0 settlement roadmap underway via EverX (H2 2026).

Canada — FINTRAC MSB

Both AiraPay and EverX hold active Money Services Business (MSB) registrations with FINTRAC — Canada's financial intelligence unit. These registrations cover both fiat and crypto rails under the Proceeds of Crime (Money Laundering) and Terrorist Financing Act.

AML/ATF obligations under FINTRAC registration include:

• Full anti-money laundering (AML) and anti-terrorist financing (ATF) compliance program maintained at all times.
• Real-time transaction monitoring across all payment corridors — CA↔IN, US↔IN, and future corridors.
• Know Your Customer (KYC) and Know Your Business (KYB) onboarding for all clients before any funds are processed.
• Mandatory Suspicious Transaction Reporting (STR) to FINTRAC within 30 days of detection.
• Large Cash Transaction Reports (LCTR) filed for applicable transactions per FINTRAC thresholds.

India — FinGenie Tech Pvt. Ltd.

India operations are conducted through FinGenie Tech Pvt. Ltd., an AiraPay subsidiary incorporated in New Delhi (CIN: U72900DL2022PTC394660). FinGenie Tech holds an active India Payment License that enables the India-side of AiraPay's live CA↔IN corridor.

How client funds are protected in India:

• FinGenie Tech operates as a regulated payment entity under applicable Indian payment laws, ensuring compliance on the IN-side of every cross-border transaction.
• Client funds received in India are processed in compliance with Reserve Bank of India (RBI) guidelines applicable to payment intermediaries.
• AiraPay's CA↔IN corridor has been live since 2023 — India is the world's #1 remittance recipient at $129B (2024, World Bank).
• The India Payment License covers the US↔IN corridor as well, enabling both corridors from a single regulated subsidiary.

Brazil — Atlas Exchange

Atlas Exchange, an AIRA Group strategic JV, has submitted its Virtual Asset Service Provider (VASP) licence application with the Banco Central do Brasil. Upon approval, Atlas Exchange will operate OTC desk and payment services in Brazil's $2.4T digital payments market.

What Atlas Exchange will enable upon VASP approval:

• Fiat-to-crypto-to-fiat payment rails into the Brazilian market — PIX-connected for instant local settlement.
• OTC desk for institutional crypto↔fiat settlements with tight spreads and zero slippage block trades.
• Entry into Latin America's largest crypto OTC market, supported by Brazil's PIX ecosystem (processed $4.6T in 2024, +53% YoY).
• Brazil now has more crypto users than bank account holders — Atlas Exchange is positioned as the regulated infrastructure layer for this market.

Fund Segregation

Across all jurisdictions where AiraPay is licensed and operating, client funds are held in segregated accounts with regulated financial institutions. These accounts are entirely separate from AiraPay's own operational capital.

• Client funds are never commingled with AiraPay's own operational funds at any point in the payment lifecycle.
• Segregated accounts are held with Schedule I Canadian chartered banks and regulated financial institutions in each operating jurisdiction.
• In the unlikely event of AiraPay's insolvency, client funds held in segregated accounts are not available to AiraPay's general creditors.
• AiraPay's proprietary infrastructure — not a wrapper or aggregator — means funds move through rails AiraPay owns and controls directly.

PCI DSS Compliance

AiraPay maintains PCI DSS compliance — the Payment Card Industry Data Security Standard — covering all card data handled across its platform.

• PCI DSS compliance is maintained across AiraPay's full payment stack, covering card acquiring via Visa, Mastercard, and Amex.
• All data in transit and at rest is protected with end-to-end encryption in accordance with PCI DSS requirements.
• AiraPay's in-house technology stack — not a third-party wrapper — allows direct control over security standards across every layer.
• Minimum chargeback rates are guaranteed to institutional clients, backed by AiraPay's compliance and risk infrastructure.