Skip to content
Security & Compliance

Guard the flame.

Your crypto, your control

How we protect your account, your keys and your payments — and how compliance checks are handled where they're needed.

Non-custodial wallet

Cryptorch Wallet is non-custodial. Your private keys stay with you — we can't move your funds.

Credential-based API access

API requests require your client-id and client-secret, and are only accepted from whitelisted server IPs.

Payment notifications

IPN callbacks tell your server when a payment changes status, so you can verify every order.

Partner-led KYC

When you buy or sell crypto with fiat, identity verification is performed by our regulated partner provider in their own widget.

Delivery to your own wallet

Crypto you buy is sent directly to the wallet address you provide.

Monitoring for card programs

Card programs include an admin & monitoring panel to oversee cards, clients and activity.

Compliance

Compliance through regulated partners

Fiat on- and off-ramp services in Cryptorch Buy & Sell are provided by a regulated third-party provider. That provider performs identity verification and the related checks under its own policies.

Cryptorch is operated by AppDynamics Tech Limited, a company incorporated in Hong Kong. Availability of individual products may vary by country.

Read our Terms of Service, Privacy Policy and Payment Policy.

Staying safe

Security tips

  • Never share your recovery phrase or private keys — Cryptorch will never ask for them.
  • Keep your API client-secret on your server only, and whitelist only the IPs you use.
  • Always check the receiving address and network before sending crypto.
  • Verify payment status through the API or IPN before shipping an order.

FAQ

Security questions

Not in Cryptorch Wallet — it's non-custodial, so you hold your own keys. Keep your recovery phrase safe and never share it with anyone, including us.

Questions about security?

Our team is happy to help.