Security is the substrate.
Zero-trust architecture with layered transaction controls and key isolation across the signing path.
Built into the signing path.
Every transaction is gated
Each signing request passes authentication, access controls, payload decoding and policy evaluation before a signature can exist.
Keys remain isolated
Key material is generated and used only inside client-controlled, hardware-isolated enclaves. It never leaves the enclave and is never exposed to Fortkey operators.
Defense in depth
Tamper-Proof Enclaves
AWS Nitro Enclaves isolate key operations in a secure environment.
Layered KMS Encryption
Multi-layered KMS ensures not even admins can bypass access to private keys.
Configurable Policies
Define user permissions, transaction limits, and address book checks.
Attested Communications
mTLS enforces encrypted communication everywhere.
International Standards
ISO 27001:2022 certified by Insight Assurance.
Best Dev Practices
Strict CI/CD processes, 4-eyes principle, secure code quality.
Independently verified
ISO 27001:2022
Insight Assurance
Certified
Pen-Test
Cognisys
Completed
Pen-Test
Fox-IT
Completed
Pen-Test
Cyber Cloud
Completed
Pen-Test
Aikido
CompletedAuditable, replaceable, and yours.
ISO/IEC 27001 certified
Independently audited information security management. Certificate available on request.
Visit Trust CenterLimited third-party risk
Deployed on-prem, the whole infrastructure stays under your own control: keys, policy and audit remain in your perimeter.
Runs alongside your custodian
Your custodian keeps the treasury. Fortkey secures assets in motion alongside it, with keys generated fresh in your own enclaves.
Review our full security posture
Our Vanta Trust Center provides real-time visibility into Fortkey's security controls, certifications, and audit evidence, verified by a third party.
Hosted and verified by Vanta
Have security questions?
Or email info@fortkey.io