Control how digital assets are operated, not just stored. Zero third-party reliance.
Private keys are the most sensitive component of digital assets. The Vault protects them through multiple independent layers, supported across all deployment models.
The Vault uses true threshold MPC — a T-of-N signature scheme where each private key is split into shares distributed across client devices and TEE-secured servers. The key is never assembled in full at any single point, eliminating the risk of theft even in the event of a breach.
Trusted Execution Environment (TEE) provides hardware-level isolation for key operations. Even if the surrounding server infrastructure is compromised, operations inside the TEE remain protected — key shares cannot be extracted.
Private keys are generated and stored within the client’s own perimeter. The Vault infrastructure never has unilateral access to keys or the ability to sign transactions without client authorisation.
Multi-party computation wallet architecture is supported across all three deployment models — In-house, Cloud, and Hybrid — with the same security guarantees at every level. This is what separates genuine MPC custody from platforms that claim MPC but store key material in a single system.
Rule-based workflows for transaction authorisation. Define who approves what, under which conditions, and with what quorum requirement — for every wallet and operation type. Structural governance enforced before any key share activates.
Audit-ready architecture with deep operational visibility, built for regulated environments.
Every operation captures initiator, approvers, timestamps, and device identifiers.
Full visibility across all wallets for compliance and finance teams.
Tamper-resistant databases ensure audit logs cannot be altered retroactively.
Nothing is anonymous. Every decision is tracked to a specific user & device.
Choose where The Vault runs. The MPC key management and policy engine operate identically in every configuration.
Full on-premise · Maximum control
Deployed on client infrastructure, with all keys and data inside the client perimeter and zero external dependencies.
Fully managed · Quick deployment
Managed infrastructure with the same MPC guarantees and policy engine, and no compromise on control.
White-label · Crypto-as-a-Service
White-label custody for your clients under our regulated licence, with AML, KYC and Travel Rule handled for you.
