Inspiration:-
India’s 63M MSMEs face language barriers and strict cross-border compliance (RBI OPGSP, GST Rule 96A). We built PayVoice to make international exports voice-accessible and secure.
What it does:-
A multilingual voice agent (Marathi, Hindi, English) that stages and executes PayPal invoices. It enforces $2,500 export caps, masks PII via AES-256 tokens, requires FIDO2 biometric passkeys to dispatch, and logs tamper-evident SHA-256 audit ledgers.
How we built it:-
Vanilla JS frontend with Node.js/Express. Integrated Web Speech API, Gemini, official @paypal/agent-toolkit, WebAuthn cryptography, and PDFKit for password-encrypted CA statements.
Challenges we ran into:-
Preventing multilingual currency drift and autonomous LLM prompt-injection. We built deterministic policy gates and a two-turn model: the agent only stages; execution strictly requires biometric passkey sign-off.
Accomplishments that we're proud of:-
Achieved a 100% block rate across 10 adversarial attack vectors in our automated security suite, with sub-10ms cryptographic tamper detection and full statutory compliance.
What we learned
Financial AI security must be enforced by deterministic code, not prompts. Vernacular voice with biometric authentication makes cross-border trade accessible and dispute-proof.
What's next for Nebula AI We are planning to make a chrome extension of the project that will make sure that users do not necessarily have to alway visit the website to do the necessary work of the PayPal Sandbox
We’re turning Nebula into a Siri-like voice payment assistant. Users will say “Hey Nebula, send ₹100 to Yash”, and it will instantly understand the amount and recipient, then prepare the PayPal transaction with no menus or typing.
Before approval, the webcam will ask the user to show three face angles (front, left, right) in random order, blocking photos and replayed videos. The only manual step is a final password confirmation.
Face analysis will run locally in the browser, so no images are stored. Next, we’ll add regional language support, spending limits, stronger anti-spoofing and a mobile app.
Built With
- aes-256-gcm
- ai-agents
- audit-ledger
- cross-border-payments
- cryptography
- express.js
- fido2
- financial-scheduling
- fintech
- google-gemini
- msme-exporters
- multilingual
- node.js
- opgsp-compliance
- passkeys
- paypal
- paypal-agent-toolkit
- prompt-firewall
- risk-management
- server-sent-events
- sha256
- speech-recognition
- voice-ai
- webauthn
