HAIL
HAIL provides a cryptographic trust layer for AI agent commerce, giving platforms verifiable proof that every agent action was authorized by a real person. The platform uses passkeys, signed UCAN delegation tokens, and a hash-chained audit log to enforce customer-set limits and produce offline-verifiable dispute bundles. Its single SDK integrates in under a day and checks each action in well under a second.
- Cybersecurity
- AI Agents
- Artificial Intelligence
- Software Only
Funding
Founders
Founder details are not available yet.
Product
Problem
AI agents and their human customers look identical to platforms — the agent borrows the customer's login and acts, so platforms cannot tell them apart. When a charge is disputed, platforms have no proof that the customer authorized the action or set limits, and ordinary database logs can be silently rewritten, leaving platforms unable to prove who was really behind an action.
Solution
HAIL provides a trust layer for AI agent commerce, giving platforms cryptographic proof that every agent action was authorized by a verified human. The platform lets customers link their AI agents to their own verified identity using passkeys, set granular rules such as spending caps, time windows, and allowed actions, and have every agent action checked and recorded before it proceeds. HAIL verifies the agent's identity, the customer's authorization, and that the action falls within the customer's limits, then writes the result to a tamper-proof, hash-chained and Merkle-anchored audit log. When a dispute arises, platforms can export a single offline-verifiable dispute bundle (~4 KB) containing five cryptographic proofs that settle the question without needing HAIL to be online.
Target Audience
Primary customers are platforms where AI agents create real liability, including e-commerce, travel, legal SaaS, healthcare platforms, and fintechs and banks subject to strict rules on automated decisions and AI-agent liability.
Features
- Multi-party Ed25519 keypairs for human, agent, and server identities with passkey-based customer authorization
- Signed UCAN delegation tokens that cryptographically enforce spending caps, time limits, and allowlists rather than relying on policy
- Hash-chained and Merkle-anchored audit log where altering one entry breaks every subsequent hash
- Offline-verifiable dispute bundle (dispute_bundle.json) containing five independent cryptographic proofs, verifiable by anyone without HAIL
- One SDK integration requiring no more than a day to deploy, with per-action checks completing in well under a second
- Dual deployment options: HAIL Cloud (SaaS) or self-hosted for data residency, with EBA Art. 28 and GDPR compliance built in