DigiPay · Agent payments
Your agents can pay. Who checked the payment before it left?
When your software agents pay for things on their own, every payment is checked against your rules and EU obligations before it leaves, and the proof stays with you.
Why now
The human at checkout is gone.
Agents now buy API calls, data and compute on their own, over x402, cards and account-to-account rails. Most payment controls assume a person at the moment of payment; an agent has no such moment, so the control has nowhere to sit. An agent that pays is an AI system, and which AI Act duties attach depends on what it does. For authorised crypto-asset service providers, MiCA record-keeping applies to every transaction, whatever its size.
The guard
What it checks before the agent signs.
- personal data leaking into payment metadata: URLs, descriptions, memo fields;
- budgets per agent, per counterparty and per day, including quotes that creep upwards;
- duplicate and replayed payments;
- recipient addresses that change after first use;
- your allow- and deny-lists.
Each decision, pass or block, becomes a signed record you can verify offline. The guard runs in your environment, beside your facilitator's sanctions screening; it covers personal data, budgets, duplicates and recipient changes, which sanctions screening does not look at.
Open source (MIT): presidio-hardened-x402
and the MCP server presidio-hardened-x402-mcp.
A hosted screening endpoint with a free tier runs at
screen.presidio-group.eu.
The offer
From one day to a pilot.
-
Start here
Agentic Payments Readiness Workshop
One day, on site or remote
- Your agent payment flows: who pays, for what, on which rail, with what authority
- The EU obligations that attach to them: MiCA record-keeping, DORA ICT risk, the AI Act, GDPR data minimisation
- A threat walk-through: metadata leaks, budget drift, replay, facilitator weaknesses
- A live demo of the guard on synthetic data, and a control design for your flows
€4,900
Net price, plus travel for on-site days
-
Then
Design-partner pilot
8–10 weeks
- The guard in your staging environment with an EU policy set
- Decision records mapped to your own record-keeping duties
- Weekly review and a final report
- Synthetic or anonymised data
On request
The workshop fee is credited against the pilot
For business customers only. All prices are net; for business customers in other EU member states, VAT is accounted for by reverse charge.
Digital-asset treasury
A close your auditor can reconstruct.
presidio-hardened-treasury
produces a quarterly close of digital-asset holdings that an external
auditor reconstructs from a single disclosure-pack hash. It is verified
end to end against fixtures. We take on design partners whose external
auditor joins the partnership from the start.
Decision records are one component of your record set. They do not make anyone compliant, and redacting personal data does not satisfy Travel Rule obligations.