Controls are enforced by the platform, not by procedure — and the most important ones can be verified outside our interface.
No complete private key ever exists — at any point, on any device. Keys are generated and used as independent shares held by separate participants, so one compromised node is never enough to move funds. Your node takes part in every signature, and you hold encrypted backups of all shares.
A dedicated offline device is a full MPC participant: it holds its own key share and signs locally. Data moves only as authenticated, replay-protected QR codes, and encrypted recovery material stays with the partner.
Every withdrawal destination is confirmed on third-party explorers such as Etherscan — outside the FortVault interface. Even a fully compromised UI cannot present a false address as verified, because verification happens on infrastructure we do not control.
API integration with leading blockchain analytics providers — built into the transaction pipeline, not bolted on. Deposits, withdrawals and settlement flows are screened automatically; results above your risk threshold hold the operation and open a review case before anything moves.
Limits, whitelists, risk rules and approval flows are enforced on every transaction by the platform itself — not by procedure. Thresholds and approval chains are your configuration: changing policy never requires a code release, and no operation can bypass it.
Every action — initiation, approval, signing, configuration change — is logged and traceable to a named individual with a timestamp. Records cannot be edited or deleted, and the full history is exportable for your auditors and regulator.
No. FortVault is a technology platform. You run your own MPC node, hold backups of every key share, and administer governance. We cannot access or move your assets.
Your assets stay yours. With backups of all key shares, you can recover signing capability without any participation from FortVault.
Most platforms operate all infrastructure and ask you to trust their controls. With FortVault, your node is indispensable to every signature and governance is anchored on-chain, on your side.
Yes — the complete codebase including the MPC implementation, the smart contracts, and the web applications have been assessed by Grant Thornton, and ISO/IEC 27001 certification is in progress. The reports are available on our Audits page.
FortVault services run in independent cloud environments, while at least one MPC key share runs on a node in your own infrastructure — cloud or on-premise. Deployment topology and data residency are agreed per partner.
Yes — a testnet sandbox for your team, a live demo, and a technical deep-dive session.
A live walkthrough and a testnet sandbox, tailored to your regulatory context.
Book a demo