Wallets
AA-native wallets
ERC-4337 smart-contract wallets. Passkey login, no seed phrase. Session keys for safe automation. Paymaster-backed transactions: you sponsor gas, the user never sees ETH. Social and MPC recovery optional. Non-custodial by default. The end-user holds signing authority via passkey or MPC share. Multi-chain across Base, Arbitrum, Optimism, Ethereum, and Polygon.
Wallet deep-dive →
Ramps
Ramp aggregation
Single-ramp on-ramps fail ~50% of the time in Europe (Onramper 2024 data). OVAAL routes across MoonPay, Ramp Network, Transak, Banxa, Mercuryo, Sardine — with success-probability scoring per card BIN + country + KYC tier. One quote shows the all-in rate (fee + spread + FX + network). Automatic fallback on mid-transaction failure.
Ramp deep-dive →
Bill-pay
Embedded bill-pay
Partner users set recurring bills (rent, utilities, subscriptions). OVAAL handles USDC/EURC conversion + SEPA Instant payout via partner-chosen EMI. Pre-execution simulation, slippage caps, oracle deviation guards, verifiable receipts. MiCA-aligned: EMT-default stablecoins, Travel Rule handled at outbound, audit log retained 7 years.
Bill-pay deep-dive →
Automation
Automation engine
Partner users write plain-language rules: "Buy €100 ETH every Friday," "Sell 10% BTC at $120k," or multi-step DeFi macros. Every rule runs a pre-trade simulation. Hard caps per-tx + per-day. MEV-safe execution via CoW batch auctions or private RPC. Session-key-scoped signing — no key exposure for automation. Revocable instantly via API.
Automation deep-dive →
Compliance stack
Compliance plumbing
Travel Rule messaging (partner-chosen provider). AML screening (partner-chosen provider). Address screening pre-transfer. MiCA-aligned stablecoin defaults. EMI partner rails. Audit log exportable as signed JSON/CSV with Merkle-rolled on-chain anchors. Partner compliance pack: DPA template, sub-processor list, legal opinions on file, joint incident runbook.
Compliance deep-dive →
One SDK
All five in one integration
Partner integrates the @ovaal/sdk TypeScript package once. All five capabilities available via the same auth pattern, the same webhook signature scheme, the same error taxonomy, the same pagination rules. Partner's eng team learns one surface, not five. Versioned API with 12-month deprecation notice on breaking changes.
SDK + API overview →