Skip to main content
Finalization is the step that makes a payout tamper-proof. Your organization’s signer signs the payout’s contents — after that, recipients, amounts, and schedule cannot change, and the payout can be funded but never altered.

What finalization does

When you call payout.finalize(signer), the SDK:
  1. Computes the payout hash from its funding token, timing rules, and rail.
  2. Builds a Merkle tree over the exact payments, so each recipient’s claim is provable against the signed root.
  3. Signs the result with your signer and stores the signature, hashes, and per-recipient proofs with the payout.
Because the signature commits to the full payment set, changing anything afterward invalidates it — this is the guarantee behind the “tamper-proof” note in the dashboard’s signing dialog. See Security. Open fundingUrl to fund the finalized payout in the dashboard (for example https://sandbox.pvium.com/batch/0x…). The page shows the signed payout details. Share the link with the person responsible for your treasury wallet so they can review the payout and authorize funding under your organization’s approval process.

Create and finalize in one call

For scheduled payouts, call pvium.payout.createFinalized to create and sign the payout in one call:

Finalize options

Signers

Use your organization’s signing key to sign the payout finalization. To create or register this key, open your organization settings in the dashboard and go to the Signing Keys tab. See Signing keys for setup instructions.
  • createSignerFromPrivateKey(key) creates an EVM signer from a private key held in backend configuration.
  • Pass a custom signing function when your key lives elsewhere, such as an HSM or KMS.
Keep private signing keys on your backend or in your signing service. Anyone with access to the key can sign payout finalizations.

Payout keys

To let an automated service pay from a funded pool, authorize a payout key for that pool. Set a maximum amount per transaction, a maximum total amount, and an expiration. The service uses the payout key to make payments within those limits without access to your organization’s signing key.

Signing keys

The funding signer, payout keys, and how to authorize them from the dashboard or SDK.