Hold digital assets with keys locked inside attested enclaves. Every transfer clears your quorum policy first, and every step lands in a tamper-evident audit trail
Run it on the cloud you trust
The same signer, policy engine and audit trail on each cloud, in your own account. The signer runs in the provider's attested enclave and its KMS releases keys only to the measured signer image.
Everything it takes to hold assets without holding your breath
Sealed signer
Keys exist only inside an attested enclave.
Key isolation
Not even our operators can reach your keys.
Tamper-evident audit
Every action is hash-chained and replayable.
Quorum approvals
Value-tiered rules decide who approves, signed on each approver's own key.
Unlimited vaults
Segregated vaults on demand, each with its own address on every network.
Scoped access
Roles bound to vaults, assets and chains; privileged actions need a second factor.