Is a Capacity Exchange Safe?

The short version

• The safety question worth asking is not whether the operator promises to look after you. It is whether the operator could harm you even if it wanted to.
• The operator's own accounts cannot run negative, and the company is never the obligor on any member's Silva balance.
• Trading Headroom is a cap on mutual credit between members, sized from analysed activity. It is not a loan the company hands you.
• If the network ever winds down, positive-balance members rank ahead of the company, and negative balances settle in cash at par to fund the pot that pays them.
• The rules, the wind-down ranking and the operator constraints are written into the published Terms, and the ledger is tamper-evident. You can check the structure for yourself.

Why the safety question is the right one to ask

Any owner weighing a new network with their money and their reputation should ask the hard thing first. If this fails, where do I stand? It is a fair question, and the honest answer separates a Capacity Exchange from the older models people sometimes confuse it with.

A Capacity Exchange is a B2B network where UK SMEs sell spare capacity (unsold time, unfilled rooms, empty seats, surplus stock) for Silva instead of cash, then spend Silva on real business expenses. Silvatree is a Capacity Exchange designed as a modern, structurally safer evolution of traditional Trade Exchange models.

That phrase, structurally safer, is not a slogan. It points at how the system is built, and a structure you can inspect beats a reassurance you have to take on faith.

What makes a Capacity Exchange safe or unsafe?

The single idea worth taking away: safety here is architectural. A promise can be broken by whoever made it. A rule wired into the ledger cannot be, because the software refuses the action.

Most of the differences that matter are structural, and they sit in three places. Who is allowed to run a negative balance. Who owes your Silva if things go wrong. And whether you can read the rules and the record yourself. Take them one at a time.

Can the operator spend the network's value into itself?

This is the fault line. In the older trade-exchange model, the operator can issue itself a credit line and run its own large negative balance into the network. That is the operator quietly spending the network's value into its own account. When it fails, members can recover close to nothing, because the value has already gone.

A Capacity Exchange closes that door. The operator's accounts cannot go negative, and the company is at no point the obligor in respect of any negative Silva balance held by any member. It is the ledger keeper, not a party to your trades and not a lender.

Trading Headroom is where people reach for the word credit, so it is worth being precise. Your Trading Headroom is a ceiling on how far your Silva balance may dip below zero while you earn it back through sales. It is sized from your analysed trading activity, not from a credit check, and no interest or fee is charged on a negative balance. It is the operational expression of mutual credit between members, recorded on the ledger. It is not a loan, an overdraft or an advance from the company. Analysed capacity to trade, not borrowed money.

What happens to your Silva if the exchange winds down?

This is the most-asked question in any serious conversation, and a Capacity Exchange should have a written answer, not a shrug.

Under the published Wind-Down Protocol, the order is deliberate. Members in negative Silva positions must settle their balance in pounds sterling at par, where one Silva is treated as one pound. Those cash recoveries form the Wind-Down Pot. Members in positive Silva positions then receive a pro rata distribution from that pot, at par where the pot supports it.

The company puts itself last. It holds a Reserve Fund on the ledger, and that holding is structurally subordinated, which means positive-balance members rank ahead of the company. A Silva slice of every transaction feeds the Reserve Fund, so the cushion scales with how much the network actually trades rather than with how many names are on the list. Positive-balance members are first in line, backed by the Reserve Fund, with the company behind them.

Compare that to a network where the operator is itself a large debtor. There, the value members are owed has already been consumed, so a wind-up returns little. The ranking is the protection, and it only means anything because it is written into the Terms rather than offered as goodwill.

How do you check any of this for yourself?

A safety claim you cannot verify is just marketing. So the last structural point is transparency.

Every trade is written to a cryptographically-chained, tamper-evident ledger. The record cannot be quietly rewritten after the fact, which is what makes the balances something you can rely on rather than something you have to trust.

The rules are public. The operator constraints, the wind-down ranking and the settlement mechanics live in the published Terms and Conditions, and the non-negative-operator rule is enforced at three layers of the software, from the app to the ledger itself, with a Technical Compliance Statement available on request. You do not have to take the safety story on trust. You can read where you would stand.

Here is the same contrast set out plainly.

The comparison is with the generic older model, drawn from operators' own published rules. Read any specific network's terms before you judge it, and compare the wind-up clauses side by side.

What a Capacity Exchange does not protect you from

Trust is won by being straight about the limits, so here they are.

It does not guarantee your trades. The Reserve Fund and the Wind-Down Protocol protect the value of your Silva balance at network level. They do not insure the quality, delivery or fitness of any single trade. Each trade is a voluntary agreement between two members, and that responsibility stays with both of you. You still have to do good work, and so does whoever you buy from.

It does not spend your Silva for you. Silva is only worth what you can buy with it, so the network has to offer things your business actually needs. If nobody is selling what you want, a healthy balance sits idle. The sensible move is to plan your spending first, then earn to match it.

And Silva is not cash. It is spending power inside the network, not money you can withdraw during membership. That closed-loop design is part of what keeps the operator outside e-money and lending rules, and it is the reason the safety story rests on the wind-down structure rather than on being able to cash out when nerves hit. If you want to understand that trade-off, how Silva works sets it out.

None of that undoes the core point. On the risks a structure can remove (an operator spending the network into itself, an unclear pecking order on wind-down, a record that can be quietly changed), a Capacity Exchange removes them by design.

The takeaway

Safe is the wrong word if it means a promise. The better question is whether the operator could harm you even if it wanted to, and a Capacity Exchange is built so that it cannot: no negative operator balance, no company obligor on your Silva, positive-balance members first in the wind-down queue, and a ledger you cannot secretly rewrite. Architecture beats promises because you can check architecture.

Start with what the category actually is. Read the pillar explainer, What Is a Capacity Exchange?, and then judge any network you are offered against the structure, not the sales pitch.