We’re Live — and Here’s the Work Behind It

There's a version of a launch announcement that's all confetti and no substance. This isn't that one. SchnelPay is live today, and I want to tell you what actually went into getting here — the decisions, the ones that were harder than they looked, and the bets we made on purpose.

Because the easy version of this product would have been a lot easier to build. Here's why we didn't build it.

The decision that shaped everything: not holding your keys

The simplest way to run a crypto on-ramp is to hold the crypto. You take custody, you control the wallet, and the user trusts you with their assets. It's easier to build, easier to operate, and it's how a lot of the industry works.

We decided not to. SchnelPay is non-custodial — when you buy, the crypto lands directly in your wallet, never ours. Zero platform custody.

That's a harder architecture. It means we never get to be the convenient middleman holding everyone's balance. But it also means there's no honeypot of customer funds to lose, freeze, or mismanage, and it means the promise on the homepage — your wallet, your keys, your control — is how SchnelPay works today, by design, not a slogan bolted on top. If we ever add custodial options down the road, they'll be exactly that — an option, openly disclosed, and only once we're properly authorized to offer it — never a default we switch on behind you. If you've watched what happens when custodians fail, you know why we started here.

Why you choose the provider, not us

Most on-ramps pick a payment provider and that's what you get. We integrated both Stripe and Coinbase, and we let you choose which one to check out with.

That was more work — two integrations instead of one, two sets of rails to test and maintain. We did it because locking you into our preferred provider is just a smaller version of the custody problem: deciding something on your behalf that you're perfectly capable of deciding yourself. You already trust one of these. Use that one. Either way, the crypto ends up in your wallet and the security around it is the same.

The bet most people would have skipped: quantum-safe from day one

Here's the one we didn't have to make, and made anyway.

Today's crypto is secured by classical cryptography that a sufficiently powerful quantum computer will eventually break. “Eventually” is doing a lot of work in that sentence — nobody knows if it's five years or fifteen. The rational-sounding move for a small team shipping a first product is to punt: ship on classical crypto now, add post-quantum later when it's forced.

We didn't punt. SchnelPay ships with a genuine post-quantum signature scheme — ML-DSA, the algorithm NIST standardized for exactly this threat — running in production on day one. Not a roadmap bullet. Not “coming soon.” Live, now, on real traffic.

And we built the security layer on a principle we've written about at length: you never trust a single lock, and you never assume today's locks are the last ones you'll need. The post-quantum scheme sits alongside a classical layer, and — this is the part that actually lasts — the whole thing is built so the primitives can be replaced. The durable security property isn't any one algorithm. It's the ability to swap it before it's the thing that fails you. (If you want the long version of that argument, it's the throughline of our recent two-part series on hybrid security and crypto-agility.)

We're a small team. We shipped a NIST post-quantum standard in production before most of the industry has started. I'm genuinely proud of that one.

What “small team” actually meant

I'll be honest about the shape of this. There were no compliance departments and decade-long migration roadmaps. There were a handful of decisions that each had a clearly harder path and a clearly easier one, and a stubborn refusal to take the easy path on the things that matter — custody, provider lock-in, security you can't retrofit later.

Moving fast and being careful are supposed to be opposites. The way you get both is to be careful about architecture — the decisions that are expensive to reverse — and fast about everything else. Non-custodial, provider-agnostic, quantum-safe, swappable: those are the load-bearing walls. We took our time on those. Everything else, we shipped.

What live means

Live means you can go to SchnelPay right now, check out with the provider you already trust, and hold crypto that's yours — secured against a threat most of the industry is still treating as tomorrow's problem.

We built the version that was harder to build because it's the version we'd want to use. Come see if we got it right.