Security
Signatures bound to the payment.
Every AI agent and every approving phone gets its own key, issued from a root we keep in-house and bound to that one device. A payment goes through only when the keys match, and every check is kept as proof.
How a signature works.
- 01
The keys must match
An agent’s payment request is signed with the agent’s own key and sent to the approver’s phone. Nothing goes through unless the keys match.
- 02
Automatic, or a tap
Inside the rules or mandate a person signed, approval is automatic. Anything else sends a notification. The approver sees the payee, account and amount, and signs after a face, fingerprint or PIN check. Signed is designed never to receive or store biometric data.
- 03
The details are signed
A signature covers the exact payee, account and amount the approver saw. If any of them changes, it no longer matches.
- 04
Every check is recorded
Each check is written to a tamper-evident record.
Questions a security reviewer would ask
What happens if Signed is down?
Signed runs in the cloud and in our own data center, so an outage at one doesn’t stop it. If both are ever down, the gate is designed to stay closed. Downtime doesn’t approve a payment on its own.
Can a fooled approver still sign a fraudulent payment?
Yes. A signature proves who approved and what they saw, not that they were right. Rules that route a request to someone outside the deception help, and a low single-approver limit caps the damage.
Does it check that a bank account belongs to the vendor?
No. That check, called payee validation, has to come from a partner. For a changed account, Signed adds an extra approver and a waiting period. That slows the payment. It can’t prove the account is genuine.
Does it detect deepfakes?
No, and the gate doesn’t rely on it. A deepfake can copy a voice, but it can’t sign from the real person’s phone. A required signature does depend on that person not being fooled.
Can an agent approve its own payment?
No. An agent key can request a payment, never approve one. Approval keys live only on enrolled phones, so every payment outside a mandate needs a person.
Is there a guarantee if a signed payment turns out to be fraud?
No. Signed carries no guarantee.
Does Signed store fingerprints or face scans?
It’s designed not to. The phone checks the face, fingerprint or PIN and only then uses the signing key. Signed receives the signature, never the biometric.
Is the design the same for enterprises and consumers?
The keys, the match and the record are the same. For consumers, the check runs inside the bank, app or store that added it, and they hold the record.
Bring your security reviewer.
IT and security reviewers are welcome from the first conversation. We share the full security design with them under NDA.