Certisyn
Certisyn operates a deterministic verification layer that continuously tests institutional claims about organizations, AI agents, and metered systems against independent evidence, producing cryptographically sealed verdicts anyone can re-check on ordinary hardware. The platform issues Verification Attestation Objects (VAOs) signed with Ed25519 under published keys, with six core protocols contributed to the IETF as Internet-Drafts.
- Regulatory & Compliance Technology
- Cybersecurity
- Software Only
- Artificial Intelligence
- AI Agents
- Defense Tech
- Enterprise Software
Funding
Founders
Founder details are not available yet.
Product
Problem
Traditional audit reports verify that a process was completed, but they do not confirm that the underlying claim is true. Institutions making consequential decisions across capital markets, defense supply chains, regulatory disclosure, and cross-border settlement lack a mechanism to deterministically verify claims and evidence as they travel across organizational boundaries.
Solution
Certisyn operates a deterministic verification layer that produces bounded, auditable, cryptographically sealed outputs — called Verification Attestation Objects (VAOs) — that travel with claims across organizations and contexts. The platform runs a single verification core surfaced through seven purpose-built entry points, each tuned to specific institutional regimes, buyers, and evidence types. Every VAO carries an append-only, cryptographically linked derivation chain replayable by any party with access to the canonical evidence set, enabling reliance without trusting the issuer. The system supports sovereign-grade workloads with tenant isolation as a property of the data itself, including an Edge Hawala mode where customer data never crosses the wire. Certisyn also contributes core protocols to the IETF as Internet-Drafts, including an Attestation Reconciliation Protocol for cross-sovereign register verification and standards for ACSC Essential Eight and AI governance verification.
Target Audience
Primary customers are institutions making high-stakes decisions across capital markets, defense-industrial supply chains, regulatory disclosure, cross-border settlement, and sovereign-grade reliance, including organizations operating under EU AI Act, CSRD, DORA, CMMC, DFARS, and FOCI compliance obligations, as well as security and AI governance teams, regulators, insurers, and audit and assurance firms.
Features
- Per-record Ed25519 seals at the tenant edge with on-chain Regime Manifest commitments and automatic apoptosis on any cryptographic mismatch
- Post-quantum-ready cryptography using ML-KEM-1024 and ML-DSA-65 hybrid signature envelopes, with hash-agile transport supporting SHA-512, SHA3-512, and SHA-256
- Seven institutional front doors running the same deterministic verification core, issuing VAOs tuned to the regime, buyer, and evidence type
- Continuous autonomous monitoring via five operational agents (Sentinel, Warden, Auditor, Chronicler, Envoy) verifying audit-event immutability, RLS coverage, retention adherence, and supply-chain posture
- Versioned Compliance Vault holding every policy, control, and evidence artifact under SHA-256 digest for audit-evidence projection
- Six IETF-contributed Internet-Drafts covering attestation reconciliation, ACSC Essential Eight verification, AI governance verification, coverage attestation profiling, conformance continuity, and the Chorale Protocol
- Edge Hawala mode for workloads where customer data must not cross the wire, with verification performed at the consuming application
- Software-only architecture that runs on existing meters, sensors, and stacks with no trusted chip, enclave, or proprietary box in the chain
- Coverage of four subject types: organizations and suppliers, AI agents, metered systems, and OT/IoT/critical infrastructure