Decrow logo
Decrow
Beta
Private treasury payouts for global teams
Get started
Security

Security for private payroll on Solana.

Decrow is designed around non-custodial treasury control, confidential USDC execution, encrypted recovery paths, role-scoped approvals, and audit history.

Start a workspaceExplore private payroll

Non-custodial treasury signing

The company connects its own Solana treasury wallet in the browser. That wallet signs and funds payroll execution, while Decrow coordinates the workflow.

Cloak-backed confidential execution

Decrow uses Cloak for confidential settlement while preserving payroll states for recipients, approvals, execution attempts, retries, and audit history.

Encrypted recovery material

Shielded funding recovery data is persisted in encrypted form so funded-but-not-withdrawn runs can be retried or recovered without logging raw secrets.

Trust model

Decrow owns payroll operations. Cloak owns private settlement.

Company treasury wallet remains the signer and funding source.
Approvals and readiness checks happen before execution.
Execution attempts, item status, signatures, failures, and audit events stay attached to each run.
Frontend errors are sanitized; sensitive diagnostics belong in server logs only.

Does Decrow hold customer funds?

No. Decrow is not a custodial payroll wallet. The connected company treasury wallet signs and funds execution.

How does Decrow handle confidential payroll execution?

Decrow uses Cloak-backed confidential USDC execution on Solana and keeps operational records around the private settlement flow.

What happens if a confidential payroll run partially fails?

The run remains retryable or recoverable from the funded state. Decrow stores encrypted recovery context and tracks execution state without exposing raw secrets to users.