Identity, signing, and governance. Standards-first, privacy-preserving by design.
Verify identities. Sign documents with legal validity. Classify identity evidence with the IEAL specification. Built on open standards from W3C, NIST, ISO, and IETF. Vendor-neutral, specification-driven, publicly auditable.
Platform
Identity infrastructure, integrated
Verifiable credentials, document signing, credential wallet, and assurance classification. Every feature carries an honest ship-status label (hover any badge for details, or see the full roadmap for definitions).
Credential Wallet Shipped
Digital ID credential wallet across three surfaces. Browser extension for web verification, desktop app for signing keys outside the browser TCB, mobile app for biometric capture and presentation. Store, present, and share credentials with selective disclosure. SD-JWT + JSON-LD, DIDComm v2, Shamir 2-of-3 recovery. Extension: shipped. Desktop and mobile apps: in progress.
Document Signing Shipped
PDF signing with tamper-evident hash, QR verification, and Solana timestamp anchor. Firma Digital verification (Costa Rica national PKI) works today. Signing and verifying are available across all surfaces: browser extension, desktop app, and mobile app. Signing pipeline evolves per the roadmap.
Verify Web Components Shipped
Drop-in JavaScript components for document verification. No login, no backend, no data transmitted. Apache 2.0 open source.
KYC / KYB In progress
Identity and business verification with document AI, sanctions screening, and beneficial ownership analysis. Integration path shipping under CORTEX API. Approval workflows in build.
Identity Assurance (IEAL) In progress
Three-axis classification of identity evidence (Capture, Algorithm, Storage) with composite levels L0 through L6. Aligned with NIST SP 800-63-4. Working Draft v0.1 published. Vendor integrations customer-triggered.
Treasury Planned
USDC and EURC wallets with Circle integration and CCTP bridge for cross-border settlement. Organization-scoped, fully audited, and integrated with governance approvals. Planned 2026 Q4.
LEI Issuance Planned
Legal Entity Identifier issuance and annual maintenance, GLEIF-compatible. Integrated with KYB verification. Planned 2027.
Digital Currency Rails Planned
Stablecoin on-ramp, off-ramp, and cross-border settlement rails. Costa Rica CRCD digital colón proof of concept pending BCCR partnership. Planned 2027+.
Document Signing
Sign with legal validity
Multiple signing methods, from simple electronic to legally binding digital signatures. Every method produces a verifiable, tamper-evident document with an on-chain timestamp anchor.
Firma Digital In progress
Verify: shipped. Sign: in progress. PKCS#11 integration with Costa Rica's national PKI (BCCR / SINPE). Legal equivalence under Ley 8454.
Web3 Wallet Shipped
Sign with Solana wallet (Phantom, Backpack, Solflare). Ed25519 signature anchored on-chain. Verifiable forever.
Mobile Passkey In progress
Auth: shipped. Signing: in progress. FIDO2 WebAuthn from phone. Biometric-gated, device-bound. No passwords, no tokens. End-to-end signing pipeline in build.
PDF Attestation Shipped
Signed PDFs with embedded QR verification. Tamper-evident hash and Solana anchor. Any PDF viewer opens the document; verification requires no Attestto infrastructure.
Governance
Organization infrastructure
Corporate governance primitives from audit logs to multi-party approval workflows. Where cryptographic enforcement makes sense, we anchor it. Ship status is labeled honestly.
Audit Logs Shipped
Every governance action logged with actor, timestamp, and cryptographic proof. Anchored on Solana for immutability. Exportable for compliance.
Domain Governance In progress
Attestto controls the go-cr.sol, or-cr.sol, and sa-cr.sol namespaces on Solana Name Service. Subdomain delegation via did:sns method specification. Public spec at spec.attestto.com/did-sns.
Approval Flows In progress
Multi-step approval workflows with audit trail. Currently deployed for KYC and document-signing flows in CORTEX. Broader governance workflows on the roadmap.
Multisig Vaults Planned
Solana Squads v4 integration. 2-of-3 or custom thresholds for vault key recovery. Product-level governance multisig planned 2026 Q4.
Org Structure Planned
Departments, roles, and branches with role-based access control. Traditional org tenancy shipped in CORTEX; on-chain org membership planned 2027.
Cap Table Research
On-chain ownership percentages and voting thresholds. Research-only. Interest depends on regulatory clarity for on-chain equity structures.
APIs and SDKs
Credential infrastructure as an API
Issue verifiable credentials, verify presentations, manage revocation. Open-source SDKs on GitHub today. Hosted API endpoints roll out in phases.
Issue Shipped
Issue W3C Verifiable Credentials signed with Ed25519 or P-256. SD-JWT selective disclosure built in. Schema-validated, optionally Solana-anchored.
Attestto-com/vc-sdkVerify Shipped
Verify credentials and presentations in real-time. Three-layer verification: institutional trust anchor, registry lookup, ledger anchor. Any two-of-three sufficient.
Attestto-com/attestto-verifyPresent In progress
OpenID for Verifiable Presentations (OpenID4VP). Selective disclosure via SD-JWT so verifiers see only what is needed. Zero-knowledge predicates on the research roadmap.
Attestto-com/id-wallet-adapterRevoke In progress
Revocation status lists on-chain and off-chain. Status checks without contacting the issuer. Offline-capable verification in build.
Attestto-com/vc-sdkStandards
Open specifications and conformance
Everything we build conforms to international standards. Every specification is public. Every implementation is open source. All specification text is Creative Commons Attribution 4.0.