Skip to content
PSXPay

Compliance

What runs in the store, and what we ask of the merchant

Four controls, one score, and a short list of requirements that every merchant agrees to. This page explains them in plain language; the Platform Agreement is the binding version.

What installs

One control for each question an underwriter asks

Who may buy. What each buyer agreed to. Whether that record can be trusted. Whether the storefront's language stays within research-use bounds.

After install

  • Qualified-buyer gate, 21+ and researcher affirmationsActive
  • Signed intended-use attestation before purchaseRequired
  • Research-use-only and not-for-human-use noticesDisplayed
  • SHA-256 hash-chained attestation ledgerChained
  • Storefront scan and 0 to 100 scoreLive

The buyer gate

Before the catalog loads, every visitor affirms that they are 21 or older and a qualified researcher, under fixed research-use-only and not-for-human-use notices. The gate records the affirmations with a timestamp. It does not verify credentials, and we say so plainly: the record is of what the buyer declared.

Illustration of the buyer gate.

The signed attestation

After passwordless sign-in with a one-time code, the buyer states their counterparty type and intended use and signs with a typed name. The attestation is tied to the email address that received the code, so every later order traces back to a person who made a specific statement.

Illustration of the intended-use attestation form.

The ledger

Each attestation becomes an entry hashed with SHA-256 together with the hash of the entry before it. Altering one entry breaks every hash after it. The ledger exports to CSV with full hashes, so a processor, bank or lawyer can verify it without trusting us.

Illustration of a sealed ledger entry.

Illustrations. The live screens take your theme's styling.

Requirements

What every merchant agrees to

  1. Sell research-use-only peptides only to qualified business and institutional buyers. No consumer sales.
  2. Make no human-use, dosing, therapeutic or health claims anywhere you control: product pages, blog, social accounts, affiliates, packaging inserts.
  3. Keep the gate, attestation, notices and scanner active on every storefront that uses the service, and never serve the scanner different content from what buyers see.
  4. Not be listed on the Mastercard MATCH list or a similar terminated-merchant list, and not have had a processor or acquiring bank terminate you for cause in the past five years.
  5. Hold every licence and registration your business needs, and tell us within two business days if any of this stops being true or a processor, bank, network or regulator takes action.

When a store falls short

Processing unlocks at 80. If the score falls below 65, we email you and a 24-hour window starts. Reach 80 inside it and nothing changes; otherwise processing through PSXPay pauses until the score is back at 80. Where the law, Stripe or a card network requires it, or a store is selling for human use, we may act sooner. See how it works for the full sequence.

What we share, and with whom

Merchants consent to our sharing scan results, scores and attestation logs with Stripe, its acquiring banks and the card networks when it is relevant to underwriting, risk review or an investigation. We do not sell this data or share it for advertising. Details are in the Privacy Policy.

Apply to join