CONFIGURED / ACCESS
COTO pilot + AWS Cognito
The invited workspace uses HTTPS and Cognito sign-in with required authenticator MFA. Business access and operator responsibilities are separated. Open invited workspace ↗
COTO / TRUST & COMPANY
Secure access.
Clear settlement.
See the systems configured for the invited pilot, the safeguards to use, and the payment services that remain disabled.
Information updated 28 October 2026. English first.
One trade. Distinct
systems and responsibilities.
CONFIGURED / RECORDS
Private trade records
The backend uses a private encrypted PostgreSQL database, encrypted database connections, limited application permissions and versioned changes. These controls reduce risk; they are not an independent security certification or guarantee.
DISABLED / FUNDS
Bank and crypto checkout
No COTO checkout, escrow, credit, wallet or automatic bank payout is available. No approved payment-provider integration is represented. The platform stores accounting evidence; it does not hold transaction funds.
A secure transaction
starts with clear checks.
- Identify the parties. Confirm legal entities, signing authority, trading locations and the actual seller/importer roles. Pilot access approval is not a substitute for due diligence.
- Fix the agreement. Match lot, volume, quality, USD price, delivery, inspection and claims terms to one identified version; both parties approve it.
- Verify payment instructions separately. Use a known authorized contact and a second trusted channel. Never rely only on a changed invoice, QR code or email.
- Use an agreed lawful banking route. The actual buyer and seller arrange payment outside COTO until an approved provider is integrated. Check country, currency, limits and tax/customs implications.
- Reconcile distinct events. Instruction sent, bank credited, funds available, goods dispatched and inspection accepted are separate events. Record evidence and investigate mismatches.
For the proposed contract allocation, read the USD Payment and Reconciliation Schedule ↗.
Before any checkout
can go live.
| Component | Current position | Activation requirements |
|---|---|---|
| USD records | Configured for the invited pilot | Counterparty review, agreed sale and evidence procedures |
| Bank collection / payout | Not integrated | Approved business/provider arrangement, eligible payout route and reconciliation/refund testing |
| Bitcoin / other crypto | Disabled | Qualified provider, approved asset/network/countries, USD conversion and payout, legal review and tested operations |
| Public blockchain | Worker stopped; no active public-chain anchoring | Approved network/RPC, contract, separate owner/writer custody, signing controls and operational testing |
| Escrow / trade finance | Not offered | Separate appropriately authorized provider and executed agreements; no implied COTO custody |
No wallet address or payment instruction on this website is a request to transfer money. A provider name or logo will appear only after its actual role, approval and terms are confirmed.
Use a unique account, complete MFA, avoid shared credentials and keep passwords, recovery codes and private keys private. Report suspicious activity to business@amnayacorp.com without including secrets. An independent penetration test, restored-backup drill and full real-trader payment trial have not been represented as complete.