Salud Vault — Your Life. One Card. Everywhere.

Three pillars · One card

Your Secured Agent
for Your Whole Life.

One subscription. One card. Your financial wallet, healthcare identity, and DeFi gateway — all secured by hardware encryption and available anywhere you are.

01 — Security

🏦

Bank Vault in Your Hands

Your Vault card is a Tangem-powered hardware cold wallet — EAL6+ certified secure element, no data on servers, no bank account required. A second paired card stays safely at home as your backup. Two cards, one impenetrable financial identity.

Hardware-level encryption — private keys never leave the card
Paired home card = instant backup at any moment
25-year durability, waterproof, NFC-enabled
No seed phrase to lose or memorize
Your keys. Your assets. Always yours.

02 — Health Identity

🏥

Healthcare Credential Vault

The same EAL6+ chip used in US passports stores your health insurance ID, HSA/FSA benefits, Rx plan, and MinuteClinic access — all on hardware that never touches a server. Tap once at CVS to present insurance, pay, and collect rewards simultaneously.

Health insurance ID — tap to present at MinuteClinic or any provider
HSA / FSA smart contract enforces eligible expense rules
CVS Pharmacy Rx benefits — tap at pharmacy counter
HIPAA-aligned by design: credentials off-server, on-chip
Medical identity theft protection via hardware isolation

03 — DeFi Gateway

⚡

Next-Gen Finance for Everyone

The NFC tap IS the DeFi signature. ERC-4337 account abstraction hides every blockchain complexity — no gas fees, no seed phrases, no MetaMask. Your grandparent and your DeFi power user both tap the same card. The infrastructure is invisible.

ERC-4337 smart account — NFC tap signs any transaction
Paymaster sponsors gas — users never hold or spend ETH
USDC yield via Aave — idle balance earns automatically
Programmable payments: rent, utilities, remittance on autopilot
EIP-7702 (Ethereum Pectra, May 2025) — future-proof standard

Healthcare Credential Vault

Your health identity,
secured at passport grade.

CVS Health operates over 1,000 MinuteClinic locations, 9,000 pharmacies, and serves 37 million members through Aetna. Today, every one of those customers carries a separate insurance card, FSA card, loyalty card, and payment card. Salud Vault consolidates all four — on hardware that cannot be remotely breached.

Medical identity theft costs the US healthcare system an estimated $30 billion annually. A credential that exists only on a tamper-proof chip — never in a database — cannot be exposed at the issuer level. The Tangem EAL6+ certification is Common Criteria at the highest grade: the same standard required for US passports and government-issued smart IDs.

For unbanked and immigrant populations, the Vault also becomes a trusted health identity anchor — enabling access to healthcare services that previously required a verified bank account or government ID to access payment systems.

🏥

Health Insurance ID

Aetna / CVS Health plan credentials — tap to present at MinuteClinic or any in-network provider

HIPAA

💊

CVS Pharmacy Rx Benefits

Prescription plan ID, formulary access, and refill history — tap at the pharmacy counter

EAL6+

🏦

HSA / FSA Account

Smart contract enforces eligible expense rules automatically at point-of-sale

Smart Contract

🩺

MinuteClinic Access & Payment

One tap books appointment, verifies insurance, and processes copay simultaneously

Tap-to-Pay

🛡

Medical Identity Protection

Credentials isolated in secure element — no server-side database exposure to breach

Off-chain

🔄

ExtraCare Health Loyalty

CVS ExtraCare rewards integrated — health purchases earn directly to Vault USDC balance

Programmable

DeFi Consumer Gateway

Tap the card.
That's the DeFi.

Every complexity of blockchain — gas fees, seed phrases, wallet addresses, network selection — disappears. Non-technical users access the full power of programmable finance without knowing any of the underlying infrastructure.

01 ——

Tap card to phone

Tangem's EAL6+ chip generates a cryptographic signature via NFC. The private key never leaves the card's secure element — not even during signing. No passcode, no app login, no seed phrase.

02 ——

ERC-4337 UserOperation

The signature authorizes a UserOperation — a bundled intent that can include multiple simultaneous actions (pay copay + earn yield + log health record) in a single transaction.

03 ——

Paymaster covers gas

A Salud Vault Paymaster contract covers all network fees. The user never holds ETH, never sees a gas fee. The experience is indistinguishable from tapping a bank card at a terminal.

04 ——

Polygon PoS settlement

Transactions confirm in 2–3 seconds at under $0.01 infrastructure cost. USDC balance is real, on-chain, and user-controlled. No custodian can freeze what the user holds in hardware.

05 ——

Programmable money for everyone

Automate rent, utilities, healthcare copays via smart contract schedules. Idle balance earns Aave v3 yield (~4–6% APY). Send weekly remittance automatically. All from one card tap.

// Technology Stack

HardwareTangem EAL6+ · Samsung chip

ConnectivityNFC · ISO 14443-A

Account standardERC-4337 smart account

EVM upgradeEIP-7702 · Pectra May 2025

Gas modelPaymaster sponsored

Settlement chainPolygon PoS

StablecoinUSDC · Circle

Yield protocolAave v3 · ~4–6% APY

Card spendingTangem Pay · Rain · Visa

Cash-in networkPayNearMe · CVS POS

FX / RemittanceCircle · Bitso · dLocal

SDK licenseTangem SDK · MIT open-source

KYC / AMLPersona · tiered onboard

Credential storageOn-chip · off-server · HIPAA

Transaction cost< $0.01 per operation

Settlement speed2–5 seconds

Real-world use cases

Six ways the card works today

🏪

Load cash at CVS, spend anywhere

Maria walks into CVS, picks up the Salud Vault two-card set, loads $300 cash at the same register. Card activates in 3 minutes with an NFC tap to her phone. She pays rent, groceries, and utilities with her Visa card that afternoon. No bank account. No credit check.

Financial Inclusion

✈️

Send $200 to family in Guadalajara

José loads $500 at CVS. He taps his card, opens the app, enters his mother's phone number in Mexico. She receives funds via SPEI in 5 seconds. Total cost: under $2. Western Union would have charged $20–40 for the same transfer and taken 1–3 days.

Remittance

🩺

MinuteClinic — one tap, everything handled

Sarah taps her Salud Vault at MinuteClinic check-in. Insurance credentials verify instantly. After her visit, she taps again — copay deducted from her HSA balance. No fumbling for separate insurance card, FSA card, or payment card. One tap does all three.

Health Vault

💊

Prescription pickup — zero friction

Carlos picks up his monthly prescription at CVS Pharmacy. One card tap presents his Rx benefits ID, verifies formulary coverage, and processes copay — all in a single NFC interaction. ExtraCare points post to his Vault balance automatically.

Healthcare

📈

Idle USDC earning yield automatically

Between paychecks, Ana's $400 Vault balance earns Aave v3 yield — approximately 4–6% APY on idle USDC. No action required. When she spends, the Paymaster routes from yield-bearing to spending balance seamlessly. DeFi — completely invisible to the user.

DeFi Gateway

🔁

Automated bills — programmable finance

David sets up a smart contract schedule: $800 rent on the 1st, $120 electric on the 15th, $50 remittance to El Salvador every Friday. One tap to authorize all three. The ERC-4337 account executes automatically — no bank account, no overdraft, no missed payments.

Programmable Money

Distribution · The unfair advantage

Available at Your
Neighborhood CVS.

No appointment. No bank account. No credit check. Walk into any CVS, pick up the Salud Vault two-card kit from the gift card planogram, load your card with cash, and walk out with a hardware cold wallet, Visa debit card, and healthcare credential vault — all in one.

Salud Capital's retail supply chain business controls planogram positions in over 9,000 CVS Health locations nationwide. The Salud Vault kit launches as a standard gift card SKU — the same display that sells Green Dot and Vanilla cards today. No separate retail negotiation required.

85% of Americans live within 10 miles of a CVS Pharmacy. For unbanked and underbanked communities, that proximity is the on-ramp to the financial system that legacy banks have never provided.

Activate at CVS Today →

9,000+

CVS Retail Locations

1,000+

MinuteClinic Locations

85%

Americans within 10mi

87M

CVS Rx Plan Members

37M

Aetna Health Members

3 min

Average Activation Time

Security architecture

Passport-grade security,
gift card simplicity.

The Tangem EAL6+ certification — Common Criteria at the highest level — is the same standard required for US passports and government smart IDs. Your credentials and keys are stored in hardware that physically cannot be accessed remotely.

🔐

EAL6+ Secure Element

Samsung-manufactured chip certified at Common Criteria EAL6+ — the same grade as US passports. Private keys generated and stored entirely on-chip. Extraction is physically impossible without destroying the card.

📡

NFC-only signing

The chip communicates only via physical NFC proximity — it cannot be reached over the internet, Bluetooth, or any remote channel. Every transaction requires the physical card to be present.

🏥

Off-server health credentials

Healthcare credentials exist only on the chip. No cloud database stores your insurance ID, Rx benefits, or HSA data. A breach of any server — Salud's or CVS's — cannot expose what was never stored there.

🔑

No seed phrase

Tangem's two-card backup architecture uses the second card as a hardware recovery key — not a 24-word phrase. Lose one card, recover with the other. No words to lose, no phishing surface.

🏛

HIPAA-aligned by design

Health data is never transmitted to or stored by Salud's systems. The chip presents credentials directly to point-of-care readers — aligning with HIPAA's minimum necessary standard by architecture.

🛡

Siloed compliance model

KYC for card compliance is handled by Rain Financial as an independent layer. The self-custody wallet remains fully private. Regulatory compliance and personal sovereignty coexist by design.

Product Architecture · Internal Reference

Three-Pillar Architecture
How It All Connects.

One Tangem EAL6+ card surfaces three complete product layers — each independently valuable, collectively unmatched. The table below maps every user touchpoint, technology partner, and revenue stream across all three pillars.

Salud Vault × Tangem — two-card set

EAL6+ NFC · Samsung secure element · 25-year lifespan · co-branded blister pack · CVS planogram SKU

💳

Financial Wallet & Remittance

USDC · Visa · PayNearMe

🏥

Healthcare Credential Vault

CVS · Aetna · MinuteClinic · HIPAA

⚡

DeFi Consumer Gateway

ERC-4337 · Aave · Polygon · Gas-free

Dimension	Financial Wallet	Health Vault	DeFi Gateway
User Experience
Entry point	Pick up kit at CVS planogram. Pay + load cash at same register.	Tap card at MinuteClinic check-in or CVS pharmacy counter.	Tap card to phone. One NFC interaction signs any transaction.
Activation time	~3 minutes	Instant tap-to-present	Included in wallet setup
Prior account needed?	No bank account. No credit check. Cash only.	Linked to existing CVS / Aetna plan credentials.	No ETH. No MetaMask. No seed phrase.
Core Product Features
Balance type	USDC stablecoin — on-chain, user-controlled, Visa-spendable	Health spending accounts (HSA / FSA) — smart contract enforced	USDC yield position — Aave v3 ~4–6% APY while idle
Key action	Load cash → spend Visa → send remittance (<1%, 5s)	Present credentials → pay copay → collect ExtraCare rewards	Tap to sign → batch ops → automated schedules execute
Cross-border	MX · BR · PH · GT · SV corridors · SPEI / PIX off-ramp	Global provider network via Aetna international plans	Any on-chain payment, any EVM chain — seamless to user
Technology Layer
Hardware	Tangem EAL6+ · Samsung secure element · NFC ISO 14443-A · Common Criteria EAL6+ (passport-grade) · shared across all three pillars
On-chain standard	USDC (ERC-20) on Polygon PoS	HSA/FSA eligibility rules — ERC-4337 smart account logic	ERC-4337 + EIP-7702 (Pectra) · Polygon PoS
Gas model	Paymaster sponsored — user pays $0 in ETH	Paymaster sponsored — healthcare ops fully subsidized	Paymaster (Alchemy AccountKit) — Salud absorbs gas
Settlement speed	2–5 seconds · <$0.01 / tx	Instant credential tap · 2–5s payment settle	2–5 seconds · batch ops in single UserOperation
Partner Stack
Hardware / SDK	Tangem co-brand program · MIT SDK · [email protected]
Card / spend rails	Rain Financial + Visa (Tangem Pay)	Rain + Visa for HSA/FSA spend authorization	Rain + Visa for DeFi-to-fiat spend bridge
Cash-in network	PayNearMe · CVS POS barcode reload	N/A — credential layer, no cash-in needed	N/A — funded from wallet balance
Stablecoin	Circle USDC · Programmable Wallets API	Circle USDC for HSA/FSA settlement	Circle USDC · Aave aUSDC yield token
FX / remittance	Circle · Bitso (MX) · dLocal (BR/PH/LA)	N/A	Any on-chain DEX via ERC-4337 UserOp
KYC / AML	Persona · Tiered onboarding: phone-only → ITIN/passport → full KYC · Siloed from self-custody wallet (Rain handles compliance)
CVS ecosystem	9,000+ pharmacy cash-in · Planogram SKU	1,000+ MinuteClinic · 87M Rx members · 37M Aetna	CVS as on-ramp; DeFi operates globally post-activation
Security & Compliance
Credential storage	Private keys on-chip only. Never on server.	Health ID on-chip · off-server · HIPAA-aligned by design	Smart account keys on-chip · Paymaster is separate compliance layer
Regulatory path	MSB / FinCEN · State MTLs via bank charter · CFPB Reg E	HIPAA privacy rule · HHS OCR · no PHI on servers	ERC-4337 is smart account infrastructure — not a money transmitter
Fraud model	NFC-only signing — card must be physically present	Credentials never leave chip — no database breach vector	Hardware-signed UserOperations — no private key exposure
Business Model & Revenue
Revenue streams	Card interchange · Remittance margin · Monthly plan fee · Cash-in spread	Healthcare payment interchange · HSA/FSA management fee · Loyalty revenue share (ExtraCare)	Aave yield spread · Automation subscription · DeFi protocol referral fees
Cost model	Tangem unit cost ~$15–25 · PayNearMe API · Circle USDC · Rain BIN fee	Incremental to pillar 1 — credential provisioning only	Alchemy Paymaster gas cost · Aave v3 integration (free API)
Launch phase	Q3 2025 · 500 CVS pilot locations	Q4 2025 · 2,500 locations · Aetna pilot	Q1 2026 · 9,000 national rollout
Competitive Moat
Primary moat	Salud controls 9,000 CVS planogram positions. No competitor can replicate shelf without separate negotiation.	Only card that IS your health identity + payment + DeFi wallet. No incumbent product combines all three.	NFC-tap DeFi UX is the first consumer-grade abstraction. Non-technical users access full DeFi stack invisibly.
Vs. Green Dot	No monthly fee. No reload fee. Adds remittance. Self-custody.	Green Dot has no health credential product.	Green Dot has no blockchain or yield product.
Vs. Western Union	<1% vs 4–8%. 5s vs 1–3 days. Card product included.	No health product.	No DeFi product.

Vault Plans

Choose Your Vault.
No contracts. No credit check.

All plans include the hardware Vault card + wireless connectivity. Activate at any CVS today. Transaction fees from your card usage subsidize your wireless — the more the Vault ecosystem transacts, the lower your connectivity cost.

Starter Vault

$15/mo

no contract · no credit check

Vault Card + Cold Wallet
2GB Data · Unlimited Talk & Text
Mobile Wallet + Virtual Debit
CVS Cash Load
Service Marketplace Access

Get Starter

Connect Vault

$29/mo

no contract · no credit check

Vault Card + Physical Debit
10GB Data + Hotspot
International Calling
1 Free Transfer / Month
Healthcare Service Access

Get Connect

From planogram
to platform.

Pilot
Q3 2025

Financial wallet + 500 CVS locations

Launch co-branded Salud Vault × Tangem two-card kit in top-5 US–Mexico remittance markets (Los Angeles, Houston, Chicago, Dallas, Phoenix). Core product: CVS cash-in, USDC balance, Visa spend, MXN remittance via SPEI. Measure activation rate, monthly active spend, and remittance attach rate.

Health
Q4 2025

Healthcare credential vault + MinuteClinic

Layer two activates: health insurance credential storage, HSA/FSA smart contract spend enforcement, MinuteClinic tap-to-pay, CVS ExtraCare Health loyalty integration. Expand to 2,500 locations. Begin pilot with Aetna CVS Health plan members and their dependents.

DeFi
Q1 2026

ERC-4337 smart account + yield + programmable payments

Layer three activates: Aave v3 yield on idle USDC, automated bill payment via smart contract schedules, batch transaction capability. EIP-7702 integration following Ethereum Pectra. Full 9,000-location national rollout. Add BR, PH, GT, SV remittance corridors.

Platform
2026+

Open DeFi rails — any service, any provider

Salud Vault becomes the consumer DeFi gateway for any service reaching unbanked, underbanked, and crypto-native consumers through CVS Health's physical footprint. Healthcare, telecom, insurance, utilities, and government services — accessible via one NFC tap, no blockchain knowledge required.

Your life.
One card.
Everywhere.

Your Secured Agent
for Your Whole Life.

Your health identity,
secured at passport grade.

Tap the card.
That's the DeFi.

Six ways the card works today

Load cash at CVS, spend anywhere

Send $200 to family in Guadalajara

MinuteClinic — one tap, everything handled

Prescription pickup — zero friction

Idle USDC earning yield automatically

Automated bills — programmable finance

Available at Your
Neighborhood CVS.

Passport-grade security,
gift card simplicity.

EAL6+ Secure Element

NFC-only signing

Off-server health credentials

No seed phrase

HIPAA-aligned by design

Siloed compliance model

Three-Pillar Architecture
How It All Connects.

Choose Your Vault.
No contracts. No credit check.

From planogram
to platform.

Ready to put the
future of finance
on a gift card shelf?

Your life. One card. Everywhere.

Your Secured Agentfor Your Whole Life.

Your health identity,secured at passport grade.

Tap the card.That's the DeFi.

Six ways the card works today

Load cash at CVS, spend anywhere

Send $200 to family in Guadalajara

MinuteClinic — one tap, everything handled

Prescription pickup — zero friction

Idle USDC earning yield automatically

Automated bills — programmable finance

Available at YourNeighborhood CVS.

Passport-grade security,gift card simplicity.

EAL6+ Secure Element

NFC-only signing

Off-server health credentials

No seed phrase

HIPAA-aligned by design

Siloed compliance model

Three-Pillar ArchitectureHow It All Connects.

Choose Your Vault.No contracts. No credit check.

From planogramto platform.

Ready to put thefuture of financeon a gift card shelf?

Your life.
One card.
Everywhere.

Your Secured Agent
for Your Whole Life.

Your health identity,
secured at passport grade.

Tap the card.
That's the DeFi.

Available at Your
Neighborhood CVS.

Passport-grade security,
gift card simplicity.

Three-Pillar Architecture
How It All Connects.

Choose Your Vault.
No contracts. No credit check.

From planogram
to platform.

Ready to put the
future of finance
on a gift card shelf?