Built in Japan for bank and central bank sandboxes

Making regulated digital money spendable.

The merchant acceptance layer for national stablecoins and bank-issued digital money. Identity verified before any value moves.

A customer holding a phone showing a bank-branded BitVoy account with balances in several currencies

You issue. We make it spendable.

A digital currency pilot is judged on one thing: real transactions at real merchants. BitVoy supplies the acceptance side, the checkout, the merchants, and the audit evidence a supervisor wants to see.

Coins marked with yen, dollar, euro and pound symbols
Issuers and pilot programmes

Live merchants for your currency

Your stablecoin or digital currency becomes spendable at real stores within the pilot. Every payment produces a supervisory record: verified identity, authorized intent, execution, settlement.

Banks

Deployed under your own brand

Your institution owns the customer experience and the relationship. BitVoy provides the acceptance technology underneath, and your compliance policy is enforced at the payment layer.

Cross-border inbound

Foreign visitors, local settlement

Visitors and overseas customers pay at local merchants, settling into locally regulated money through your institution. New inbound volume, fully supervised.

Built for bank sandboxes

A sandbox has twelve months to prove that a digital currency can be issued, circulated and redeemed safely. Issuance is the part that gets done. Acceptance is the part that decides whether the currency is used, and it is where three of the five usual evaluation criteria are decided.

What a sandbox has to prove

  1. SafeguardingCollateral adequacy and protection of the reserve. Sits with the issuer.
  2. CybersecurityOf issuance, circulation and redemption. Sits with the issuer and depository.
  3. Consumer protectionNo payer loses funds to a mistaken or forged payment. Decided at the point of payment.
  4. Anti-money-launderingEvery payment attributable to a verified person. Decided at the point of payment.
  5. StabilityNo systemic risk as use scales, including links to existing card networks. Decided at the point of payment.

What BitVoy hands the supervisor

Every payment through the layer produces one record with four fields. It is created by the payment flow itself, not reconstructed from chain data afterwards.

Authenticated identity
The verified person behind the payment, established before execution.
Authorized intent
The exact amount, asset and recipient the payer consented to. Nothing else can execute.
Device binding
The passkey ties the authorization to a specific enrolled device.
Timestamps
Each authorization bound one to one to its on-chain execution.
BitVoy does not move, hold or issue funds. It is technology serving the regime's registered participants, the way a terminal vendor serves an acquiring bank. Issuance stays with the issuer, custody with the depository, rails with the banks.

How a payment works

Most digital-asset payment systems move funds first and reconcile later. BitVoy inverts that. Every payment begins as a signed intent, identity is verified before value moves, and settlement produces a record a supervisor can read.

1

Intent created

The merchant issues a payment intent: exact amount, currency and destination.

2

Identity verified

Eligibility checks run before anything moves, not after settlement.

3

Customer approves

The customer signs that specific intent with a passkey. One biometric tap.

4

Relayer executes

BitVoy submits the payment on the customer's behalf. No gas fees, no wallet set-up.

5

Settled on the issuer's chain

Finality confirms funds to the merchant, with an auditable record tied to the approved intent.

Live today

Recorded on a live merchant integration in Japan. From cart to confirmed payment in one short clip. The customer pays in a regulated yen stablecoin, settlement is confirmed, and the paid order is created automatically.

Regulated stablecoins in dollars and yen are live at checkout today. National and bank-issued currencies plug into the same flow as they launch, without re-integration.

Built for regulation, not around it

TYPICAL RAILS Funds move first Deposit detected Reconciled after the fact BITVOY Intent signed Identity verified Funds move Audit record

Passkey-native

A single biometric authentication completes the payment. No private keys for users to lose, nothing to phish.

Threshold key management

Signing keys are split three ways with two-of-three signing. No complete private key exists anywhere in the system.

Non-custodial by design

Funds move directly from customer to merchant on the issuer's chain. They never pass through BitVoy.

Policy as configuration

Engineered under Japan's Payment Services Act and built to map onto any jurisdiction's framework. Compliance is enforced at the intent layer, before settlement.

The team

BitVoy is developed by Bay Bridge Inc., Tokyo. The architecture was designed by Keiichi Noda, senior researcher in blockchain security at the Keio Research Institute, and its core is covered by patent filings at the Japan Patent Office. We are engaged with stablecoin initiatives connected to the BIS and have presented our architecture directly to Japan's FSA.

Keiichi Noda

Keiichi Noda

Founder and Chief Executive

Brian McCaffrey

Brian McCaffrey

Co-founder and Chief Business Officer

Hiroki Sakakibara

Hiroki Sakakibara

Chief Technology Officer

Masayuki Oohira

Masayuki Oohira

Chief Financial Officer

Masaru Imai

Masaru Imai

Developer

Running a pilot? Let us show you the acceptance side.

A first briefing takes thirty minutes: technical integration, the supervisory record, and what it takes to put your first merchants live.