Secure enclave
Keys are generated and stored in device hardware. Extraction is not an exposed operation.
Product · Security
We designed Vaultarc so we cannot betray you
Trust is a poor security control. Every layer below is built so that our good intentions are irrelevant.
Threat model
What happens if Vaultarc disappears
Your keys keep working. Vaultarc uses standard derivation paths, so any compatible wallet can restore your accounts from your own guardians — no proprietary format, no hostage data.
- Company insolvency
- Assets stay on-chain under your keys and are unaffected.
- Server compromise
- No signing material exists on our infrastructure to steal.
- Lost single device
- Any three guardians restore access on a new device.
Layers
Six controls, no single point of failure
Guardian quorum
Recovery requires three of five independent factors, none of which is held by Vaultarc alone.
Transaction simulation
Each transaction is simulated against current state so you approve outcomes, not opcodes.
Policy enforcement
Limits and allow-lists are enforced at signing time, not merely displayed in the interface.
External audits
Two independent firms audit the signing stack quarterly; reports are published in full.
Zero profiling
We collect the minimum needed to operate. Balances are never linked to advertising identifiers.
Get started
Read the audits, then decide
Ask our team for the latest reports and the full architecture write-up — both are available on request.