VELLUMOne transaction moves the money and marks the invoice paid, so the two can never disagree.
Businesses do not publish what they charge, who they buy from, or what they ordered last quarter.
Why
VELLUMOne transaction moves the money and marks the invoice paid, so the two can never disagree.
Invoice data we can read
The key is generated in your browser and carried in the link fragment — which browsers never send to a server. We hold ciphertext we cannot open.
On-chain per invoice
A Poseidon hash over the terms plus a 248-bit salt. On its own it discloses nothing.








Your customer pays from a shielded balance. The amount and both parties stay private, and the invoice is marked paid in the same transaction — so the record and the money can never disagree.
on a public chain

The key is generated in your browser and carried in the link fragment — which browsers never send to a server. We store ciphertext we cannot open.
Payment moves from a shielded balance. The amount and both parties stay private, and the invoice is marked paid in the same transaction.
Hand an auditor one invoice; they recompute its on-chain commitment and watch it match. They learn about that payment and nothing else.