Effective date: August 17, 2026. OFAC SDN list issue date: 2026-08-28.
What the business does
SLIDINGBOX LLC operates Slidingbox, a pay-per-use software API that temporarily relays client-encrypted data between software systems. A client encrypts an item locally, stores the ciphertext for 60 to 900 seconds, and pays per one-time retrieval in USDC on the Base network using the x402 payment protocol. Slidingbox never receives plaintext or encryption keys, holds no customer funds, wallet keys, card, or bank credentials, and provides no exchange, custody, brokerage, lending, or money-transmission service.
The screened endpoint
GET https://slidingbox.ai/v1/hydrate/:pointer
This is the only endpoint at which money moves and the only endpoint at which sanctions screening runs. Once a payment is cryptographically verified, and before the item is reserved and before settlement is requested, the verified payer wallet address is compared against the digital-currency addresses published on the OFAC Specially Designated Nationals and Blocked Persons List. A match is refused with HTTP 403 and the error code payment_refused: no payment is taken, and the item is not delivered.
The list
- List
- OFAC Specially Designated Nationals and Blocked Persons List — digital currency addresses
- Issue date in force
- 2026-08-28
- Addresses screened
- 124
- Format
- EVM (0x) addresses, matched case-insensitively
The list is compiled into the service and refreshed from the OFAC publication on a periodic basis, which is why the issue date in force is published above rather than described in general terms.
What the screening does not do
- It compares a single wallet address against a single list.
- It does not trace the provenance of funds or apply blockchain-analytics or risk-scoring tools.
- It screens no list other than the OFAC SDN list, and does not identify the payer.
- It cannot detect an address that is not itself listed.
- It is not a control our customers may rely on in place of their own sanctions compliance.
We reserve the right, but do not undertake any obligation, to screen more broadly, by other means, or at all. Responsibility for complying with sanctions and anti-money-laundering law rests with the customer, as set out in section 3 of the Terms of Service.
Where it does not apply
Storing an item is free and unpaid, so no payer address exists to screen. Retrievals made with an issued evaluation key take no payment and are likewise unscreened. The eligibility and prohibited-party obligations in section 3 of the Terms of Service apply to every user regardless.
Blocking, records, and reporting
Where we become aware of a sanctions concern, or where applicable law or a payment provider requires it, we may block, refuse, delay, or terminate access without notice. Payment and sanctions-screening records are retained for up to five years, as described in the Privacy Policy. We may report activity to competent authorities where legally required, and may be prohibited from disclosing that we have done so. Requests from law enforcement are handled under the Law Enforcement and Abuse Policy; abuse reports go to abuse@slidingbox.ai.
Machine-readable
The same facts are published as JSON at https://slidingbox.ai/.well-known/compliance.json, generated from the running configuration and the compiled list.
Compliance questions: support@slidingbox.ai.