Back to blog
Use Cases5 min readSep 2026

Escrow should not publish the price

Escrow is one of the oldest instruments in commerce, and it solves a narrow problem. The buyer does not want to pay before the goods arrive. The seller does not want to ship before the money is real. A neutral party holds the funds until both conditions are met.

For most of that history, the neutral party was a bank, a notary, or a law firm's client account. It knew the amount and told nobody.

Move the same arrangement onto a public chain and you keep the neutrality but lose the discretion. The contract holds the money exactly as intended and publishes the terms while it does so.

What the ledger adds that the bank never did

An escrow contract on a public chain records the amount, the parties, and the timing, and it does so before the deal has even closed. That record is permanent and readable by anyone.

Consider what that means for a marketplace. Every completed sale publishes its price. A buyer who paid full price can read what the previous buyer paid. A supplier can read the margin between what you paid them and what you charged. A competitor does not need to run a pricing study because the ledger is one.

None of this involves anything improper. Charging different prices to different customers is ordinary commerce: volume discounts, negotiated terms, regional pricing, or the deal you made to win a first reference customer. It is legal, universal, and works only because the terms are not published side by side.

Pending escrow is worse than settled escrow

A completed payment leaks history. An escrow in flight leaks intent.

On a public chain, the funds sit in the contract, visible for as long as the conditions take to satisfy. Anyone watching knows that a specific counterparty is about to receive a specific amount, and knows it before the transaction is final. For a large trade or a negotiated purchase, that window is exactly when the information is most useful to someone else.

This is why the confidentiality question is sharper for escrow than for a plain transfer. The mechanism deliberately holds value in public as part of its core function.

What a confidential escrow does differently

Sova offers escrow and conditional payments as part of the platform, alongside payment links and invoices. In confidential mode, balances, amounts, and counterparties are encrypted on-chain with fully homomorphic encryption, so the contract can hold, verify, and release against values that no node reads in the clear.

The escrow still does its job. Funds are locked until the conditions are met, release is enforced by the contract rather than by anyone's good intentions, and Sova never holds the funds. The contracts are immutable and have no admin keys, so there is no privileged party that can reach into a pending escrow.

Sanctions screening runs at the protocol level before settlement rather than after it. That matters even more here: an escrow that discovers a problem only at release has discovered it too late.

Selective disclosure covers the case where the amount does need to be shown. A specific deal can be disclosed to an auditor or regulator when required, without opening the rest of the book to them.

The honest limits

Escrow is a settlement mechanism, not a dispute process. It can enforce that money moves only when conditions are met. It cannot decide who is right when two parties disagree about whether the goods were as described, and encrypting the amount does nothing to help with that.

Escrow and conditional payments are available on the Business and Enterprise plans, not on Free or Pro. A confidential escrow also uses more on-chain resources than a plain transfer, which is why it is metered at five credits rather than one.

Confidentiality here means confidentiality from the public, not from your counterparty. The other side of an escrow necessarily knows the amount because they agreed to it. What changes is that agreeing to a price with one party stops being an announcement to everyone else.

Encryption is also not the whole of privacy. An escrow that opens and later closes still leaves a record that it happened, and an observer with timing data and enough off-chain context may infer something about a deal whose figures they cannot read.

The bottom line

Escrow worked for centuries because a neutral party could hold money without becoming a publisher. A public chain gives you a neutral party that publishes by construction and calls the result an improvement.

A marketplace needs to know that the deal closed. Everyone else needs to know nothing about what it was worth.