1) Trust & ComplianceWho is the contracting entity and what is your regulatory status?EU contracts are signed with AIO Algorithm Tech EOOD, a licensed VASP in Bulgaria. MiCA authorization is in progress. AIO Technology LLC (Dubai) is the technology services company.How are client funds held?Per-merchant segregated custodial wallets; keys are held in HSM/KMS. AIO does not lend, stake, or proprietary trade client assets.Will AIO ever move funds without our authorization?No. Movements occur only with your explicit authorization. You can configure payout thresholds and optional dual-approval.What baseline security controls are enforced?2FA/TOTP for all operator accounts (cannot be disabled), IP allow-listing, role-based access, scoped/rotatable API keys, and HMAC-signed callbacks. Dashboard pages show API Key restrictions, callback secret reset, and audit logs/records for callbacks.
2) Deposits (Pay-ins)How does a pay-in work end-to-end?Your system creates a pay-in → buyer pays the shown address → AIO validates the on-chain transaction → credits the correct wallet → AIO sends a signed webhook so you can mark the order complete.One-time vs long-term pay-ins?One-time pay-ins lock chain/token/amount and require exact payment. Long-term pay-ins return a reusable address with a 90-day lease that auto-renews on each deposit; if there’s no activity for 90 days it becomes Overdue and the address is deactivated until a new deposit or manual close.Confirmations before credit?Configurable by you; AIO completes the pay-in when your confirmation/threshold is met.Under/over-payments or unsupported tokens?Under/over-payments follow your configured rules. Unsupported tokens are recorded as UnknownSubTransaction and can be admin-bound after review.Deposit fees?Platform fee starts at 0.3% on pay-ins (volume-tiered). Network gas is pass-through.
3) Withdrawals (Payouts)How do payouts work?Your system requests a payout (with chain, token, amount, to_addr) → AIO broadcasts on-chain → monitors confirmations → sends a completion webhook. Approvals follow your threshold/dual-control settings.Payout fees and timing?0% platform fee; network gas is pass-through. Timing depends on chain conditions and any compliance checks.
4) Swaps & Settlement (USDT-only)What swap/settlement options are supported?USDT settlement only, on any supported chain that has USDT (e.g., EVM chains, TRON, Solana). Deposits in other assets can be converted to USDT on a supported chain per configuration/compliance. (No other stablecoins at this time.)
5) Developer Integration (from docs)Where are the docs?aio-docs.apifox.cn — includes auth, pay-in/pay-out APIs, pricing endpoints, and callback specs.How do we authenticate API requests?Include your API key in the header: Aio-Api-Key: <api-key>. Signatures and encryption are described in Security docs. Create and restrict keys in Dashboard → Integrations → API Management; you can set IP restrictions per key.Key endpoints we’ll use first?List Transactions GET /v2/txGet Transaction Info GET /v2/tx/info/{txid}Create Pay-in POST /v2/tx/pay-inCreate Long-term Pay-in POST /v2/tx/pay-in-longtimeCreate Payout POST /v2/tx/pay-outPrice GET /v2/price and Calculate Fiat→Crypto GET /v2/price/calc_vs_priceHow do callbacks (webhooks) work?Configure your URL in Dashboard → Integrations → Callback Management. We send HTTP POST with headers including Algorithm: HMAC-SHA256, Body-MD5, Date, and Aio-Sign (HMAC using your secret). Implement idempotency (e.g., by tx_id/sub_tx_id). AIO retries on failure with exponential backoff (up to 16 attempts). You can reset the secret in the dashboard.
6) Dashboard (controls & records)What do I see on Overview?Daily/weekly/all Pay-in/Payout counters, Received/Sent tx counts, Wallet Assets by chain/token, quick Swap/Payin/Payout actions, and a Gas Saved chart.Transactions pages?View All Transactions, Sub Transactions, Pending, and Swap Transactions with filters, amounts/fees, and status (e.g., Pending, Completed, Overdue, Closed). Each entry links to Details.Integrations → API Management?Create/enable API keys, edit key-level restrictions (e.g., IP allow-listing), rotate/delete keys, and view request logs.Integrations → Callback Management?Configure Callback URL, enable/disable, reset callback secret, and review Callback Records with response codes and execution times. Callback response bodies are retained for 30 days in the records view.Settings → Safety?TOTP/2FA is enforced and cannot be turned off. Configure IP allow-listing for the organization; only listed IPs are allowed when enabled.Settings → Account Management?Manage sub-users, roles, status, and 2FA state.Settings → Profile?Update operator email and password.
7) Getting Help / Real-time Developer SupportHow do we talk to your developers during integration?Contact us and we’ll add you to our Slack or Telegram support group where our developers respond in near real-time for onboarding and troubleshooting.