Skip to content
(347) 262-9435

Consumer Fintech

In active development — not yet open to the public

Apsis

Lock money into your own vault. Nobody — including us — can open it early. On the date you set, it lands back in your bank, with interest.

Join the waitlistBuild something like it
  • Solidity
  • Foundry
  • Base
  • Next.js
  • GraphQL
  • Privy
  • Ponder
Apsis — Lock money into your own vault. Nobody — including us — can open it early. On the date you set, it lands back in your bank, with interest.

The problem

What this is for

Every savings product asks you to trust a policy, and a policy is something the institution can change. The account with the withdrawal penalty has an override; the envelope has a hand. For money you have decided not to touch, the useful property is not a better interest rate — it is the absence of a way to change your mind at 2am.

Ways to withdraw early
0

No admin key, no upgrade path

Reversal window
10 min

Enforced on-chain, not by support

What the fee touches
Yield only

Principal is never taken from

How it works

In the order you meet it

Every savings product asks you to trust a policy. Apsis replaces the policy with a timelock: USDC is held non-custodially on Base under a contract that will not release early for anyone, including the people who wrote it. A ten-minute cooling-off window covers genuine mistakes, and after that the date is the date. Balances and fees are verifiable on-chain, so the guarantee is something you can check rather than something you are told.

  1. 01

    Choose an amount and a date

    The date is the whole product. It can be pushed further out later, but the contract has no function that brings it closer — not for the account holder, and not for the people who wrote it.

  2. 02

    The money moves into a vault that is yours

    Each user gets their own timelock contract rather than a share of a pooled balance. It is deployed with no proxy admin, no upgrade path and no owner-only escape hatch, and the initializer is disabled in the constructor.

  3. 03

    Ten minutes to change your mind

    A deposit can be reversed inside a ten-minute window, penalty-free, which covers the wrong amount or the wrong date. After that the date is the date.

  4. 04

    On the day, it comes back

    Release is permissionless: anyone can trigger a matured vault, so getting your money back does not depend on Apsis existing or being reachable. Funds can only ever move to the verified bank account on file — never to an arbitrary address.

What it does

Capabilities

  • Timelock vault with no early-release path for anyone, including us
  • Permissionless release — anyone can trigger a matured lock, so nobody depends on us being around
  • A lock can be extended but never shortened
  • Ten-minute on-chain reversal window for genuine mistakes
  • Fees taken from yield only, never from principal
  • Deployed and verified end to end on Base Sepolia; mainnet follows the audit

Engineering

Decisions worth defending

The part of a build that is worth reading is rarely the feature list. These are the calls that shaped the product, and the reasons they were made.

The invariant is the product, so it lives in the contract

Anything enforced in application code is enforced by whoever deploys next. The no-early-release rule is in immutable Solidity instead: there is no admin key, no upgrade path, and the only destinations the contract can pay to are the off-ramp and the fee collector.

The fee is taken from yield, never from principal

Settlement computes what the position earned and takes a share of that alone. If the yield source lost value the fee is zero and the remainder still pays out — the contract does not revert and does not reach into the deposit.

One custody exception, documented rather than hidden

Automatic deposits require the server to hold a signing key for the user's embedded wallet, because the wallet provider's policy engine could not be scoped narrowly enough for transactions carrying calldata — confirmed against the live API rather than assumed. That is a real exception to the non-custodial claim, and it is written down in the architecture notes as one.

Limits

What it does not do

Every product page lists what the software can do. This one lists what it cannot, because that is the half you would otherwise find out afterwards.

  • Not open to the public. The live site is a waitlist.
  • Deployed and verified on the Base Sepolia test network. There is no mainnet deployment.
  • The test deployment uses a mock dollar token and a mock yield vault; a real yield protocol is later work.
  • The bank on-ramp and identity checks are written but not yet connected to a live provider.
  • Amount and duration floors exist and are not final.

Questions

What people ask

Can I get the money out early if something happens?
No, and that is the feature rather than an oversight. There is a ten-minute reversal window after a deposit for genuine mistakes; after that the contract has no function that releases before the date, for anyone. If you may need the money, this is the wrong place for it.
What if Apsis shuts down?
Release is permissionless. Anyone can trigger a matured vault, and the contract will only pay to the bank account on file. The company being gone does not strand the deposit.
Can I use it today?
Not yet. The contracts and the backend are built and verified end to end on a test network, but the money path is not complete and there has been no security audit. Join the waitlist and you will hear when it opens.

Also from the studio

Other things we built and run

Next step

Have an idea that needs building?

Tell us what the software has to do and who it is for. We come back with a scope, a first milestone, and a number. Discovery is free and commits you to nothing.

Request a consultationSee field services
  • Free discovery
  • Fixed first milestone
  • You own the code
  • We run what we ship