If it breaks policy, it never gets signed.
Every transaction decoded and checked field by field inside the enclave, before the signature exists. No blind signing.
Decode everything, sign only what passes.
Every payload is decoded into fields before any signature exists. Fortkey evaluates every field against your rules before the signature is produced.
- Counterparty, venue, and asset whitelists
- Velocity limits, time windows, slippage tolerance
- Compose rules with AND, OR, and NOT
Counterparty and venue
Behavioral and operational
Test it before it goes live.
Replay a sample transfer or paste a custom transaction and watch it pass or reject against the exact rule, before anything ships.
- Simulator built into the console
- Rejections name the rule that fired
- Change policies with confidence
Approvals, access, and audit.
Sensitive changes require m-of-n sign-off, trading is separated from administration, and every action lands in an exportable log.
- Multi-party approvals, no self-approval
- RBAC per user, group, and wallet
- Sessions with one-click invalidation
Bring your own policy.
Delegate decisions to your own server with a signed webhook response, or have custom policy rules built with our team on request.
- Signed webhook delegation
- Custom policy rules built with our team on request
- Address books usable directly in rules
Evaluate before signing
Decision source: signed webhookA real-world use case
The whitelist fired before the signature existed.
During a desk's integration test, a transaction to an unknown counterparty was rejected inside the enclave by the whitelist rule. The signature was never produced, and the rejection named the exact rule that fired.
Counterparty whitelists
Explicit allowlists per wallet, group, or venue.
Velocity limits
Max transactions per minute or hour, per key or group.
Slippage enforcement
Reject orders that exceed your declared tolerance.
Self-match prevention
Stop wallets in the same group from crossing themselves.
Time-window enforcement
Restrict signing to defined trading windows.
Cancel-on-disconnect
Auto-cancel resting orders when a session drops.