# LiquidTrust

> LiquidTrust (Liquid Global, Inc.) is a B2B payments platform that embeds trust into the payment
> itself. Its core product, Micro Escrow(R), holds funds and releases them against defined conditions
> — milestones, approvals, deliveries — so buyers and sellers get recourse without a traditional
> escrow agent. KYC/KYB, AML and sanctions screening are built into the rails, which settle to 200+
> countries with J.P. Morgan as a named payment-rails partner. Pricing is 1% all-in per protected
> transaction, or a flat $10 for Simple Pay transfers where trust is already established.

## Availability of the API

LiquidTrust offers three integration models to marketplaces, banks, and platform partners: referral
(no integration), white-label (branded, LiquidTrust handles compliance and fund flows), and a direct
API integration that embeds conditional payment logic into the partner's own product.

**The API is access-gated.** As of 2026-07-19 there is no public developer portal, no API reference,
no OpenAPI description, no SDKs, no CLI, and no published sandbox or test credentials. Onboarding runs
through sales. The API host `https://api.liquidtrust.io` is live and returns a hardened header set,
but no operations are publicly documented. Do not assume endpoint paths, authentication schemes, or
payload shapes for this API — they are not published.

## Observed API conventions

Observed directly on `https://api.liquidtrust.io` (not from a specification — none exists publicly):

- Deprecation signaling: `Deprecation` and `Sunset` response headers are exposed to clients (RFC 8594).
- Pagination/relations: the RFC 8288 `Link` response header is exposed.
- Distributed tracing: W3C Trace Context `traceparent` and `tracestate` are exposed.
- A vendor header `X-Env-State` is exposed; its value domain is not documented.
- TLS 1.3, HSTS with a one-year max-age and preload, and a locked-down CSP/Helmet header set.
- Unknown and not to be guessed: authentication scheme, idempotency, versioning, error envelope,
  rate-limit policy.

## Security and compliance

- SOC 2 Type II (audited annually), ISO 27001, PCI DSS Level 1, GDPR, CCPA.
- Trust center: https://trust.liquidtrust.io/ (Vanta-hosted)
- AES-256 at rest with AWS KMS and automatic key rotation; TLS 1.3 in transit.
- Responsible disclosure is welcomed via the security page; there is no bug bounty and no
  `/.well-known/security.txt`.

## Products

- Micro Escrow(R) / Protected Pay: https://www.liquidtrust.io/micro-escrow
- Simple Pay: flat $10 direct global payment, no conditional logic
- For marketplaces: https://www.liquidtrust.io/for-marketplaces
- For banks: https://www.liquidtrust.io/for-banks
- For platform partners (API integration): https://www.liquidtrust.io/for-platform-partners

## Docs

- Website: https://www.liquidtrust.io/
- Knowledge base (end-user, not developer): https://www.liquidtrust.io/knowledge-base
- Pricing: https://www.liquidtrust.io/pricing
- Security: https://www.liquidtrust.io/security
- Blog: https://liquidtrust.io/blog
- Status: https://status.liquidtrust.io/
- Contact / talk to sales: https://www.liquidtrust.io/talk-to-sales
- Log in: https://www.liquidtrust.io/login
- Terms of service: https://www.liquidtrust.io/terms-of-service
- Privacy: https://www.liquidtrust.io/privacy

## API Evangelist artifacts

- APIs.json: https://raw.githubusercontent.com/api-evangelist/liquidtrust/refs/heads/main/apis.yml
- Conventions: conventions/liquidtrust-conventions.yml
- Lifecycle: lifecycle/liquidtrust-lifecycle.yml
- Conformance: conformance/liquidtrust-conformance.yml
- Domain security: security/liquidtrust-domain-security.yml
- Vulnerability disclosure: security/liquidtrust-vulnerability-disclosure.yml
- Trust center: security/liquidtrust-trust-center.yml
- Well-known probe record: well-known/liquidtrust-well-known.yml

## Company

Liquid Global, Inc., operating as LiquidTrust. Investors include Anthemis, Resolute, Motivate, and
Mucker. Platform runs on AWS (CloudFront, Route53, EC2/Lambda/RDS in us-east-1) per its status page.