Wallet and key custody
Custodial, non-custodial or hybrid wallet models chosen against your risk appetite, with recovery and support procedures written before launch.
Industry context
Blockchain and Web3 applications in retail and e-commerce
We build Web3 applications where wallets, tokens and on-chain records have to work for customers who never think about the blockchain underneath.
Web3 applications put a wallet, a token or an on-chain record in front of real customers, so the hard parts are key custody, smart contract security and what happens when a transaction cannot be reversed. We design the off-chain services, the contract upgrade path and the support process together, so the application behaves predictably for people who have never used a blockchain.
Retailers trade on thin margins, with peaks around Ramadan, Eid and White Friday and customers who move between app, website and store in a single purchase. Merchandising, store operations and digital teams each own part of that journey, so we plan changes around the trading calendar. In the UAE, virtual asset activity falls under VARA in Dubai, the DFSA in DIFC, the FSRA in ADGM or the Securities and Commodities Authority, and in Saudi Arabia SAMA and the Capital Market Authority set the rules, so we confirm the regulator for each market before design.
After stabilisation we hand over to your teams or keep running the service with you.
Alongside sector regulation, we often map delivery evidence to cross-industry baselines such as the UAE Information Assurance Regulation issued by TDRA, the NCA Essential Cybersecurity Controls in Saudi Arabia and the NIST Cybersecurity Framework, which many risk reviewers already use.
What we deliver
Specialists in retail and e-commerce and platform engineers, with you from design to stable operation.
Smart contract assurance
Contract code under version control, automated tests, review before deployment and a documented upgrade or pause mechanism.
Off-chain integration
Node and API providers, indexing and event handling that connect on-chain activity to your existing customer, payment and reporting systems.
Consumer and data rules
We design consent, returns and customer data handling around consumer protection rules and personal data law in each market, such as the UAE PDPL and the Saudi PDPL, with ZATCA e-invoicing requirements where Saudi sales are in scope.
Transaction monitoring
On-chain activity screened and logged, with alerts routed to the compliance team that owns each market.
Support for irreversible actions
Support scripts and escalation for lost access, failed transfers and disputes, agreed before launch.
What to have in place first
A Web3 application is ready to build when the asset, the market and the custody model are decided, because each one changes the design.
- Merchandising and digital teams have agreed who owns product and price data.
- Legal and compliance have agreed which tokens, assets or records the application may handle in each market.
- The custody model, and who carries the key risk, has been decided.
Plan blockchain and Web3 applications in retail and e-commerce
Tell us where you are today and which dates matter. We will propose a first phase with scope, owners and an itemised quotation.