01Knowledge
something you KNOW
Passwords, PINs, security questions.
Humans · at login
- Attestations
- 4,058,253 attestations verified
- Verify latency
- 8.3 µsp99.99 · 125 µs worst case
- Test suite
- 3,897automated tests · 0 failing
- Priority
- 54 claimsfiled 1 May 2026
Measured, not projected — method and raw data on request. The attestation counter is per-process: it counts what the public demo proxy has verified since it last started and resets when it restarts, so it is a rate of life, not a lifetime total. The cumulative record is the sealed evidence chain, which verifies without us.
The thesis
You are being asked to choose. Refuse.
Today autonomy and accountability pull in opposite directions: the more autonomous your operations, the thinner your evidence. EdSSA fuses them — every autonomous action carries its own authorization and leaves proof nobody can edit, including us.
Autonomy and accountability become the same property. That is the deep change. Everything else on this page is a consequence.
Autonomy · 03:00
Machines act where nothing answers.
Machines, fleets and agents act at machine speed, in places where nothing answers.Accountability · 09:00Regulators, boards and insurers demand proof — and logs only assert.
The two moments
Two moments decide whether you trust your stack.
The 3 a.m. moment
Your central authorization point is unreachable.
Field devices, payment paths, agents — everything that must ask, stops. Not because the network died: because one authorization point did.
The audit moment
The regulator asks you to prove what happened.
You have logs. Logs assert — they do not prove.
One integration answers both.
What changes for you
Three things change. Nothing else does.
Availability
Actions keep flowing.
Authorization is verified where the action happens, in microseconds, offline if needed — no round trip to anywhere.
Auditability
Evidence writes itself.
Every action leaves a tamper-evident record your auditor re-verifies on their own laptop — no account, no network, nothing of ours installed.
Continuity
Nothing gets ripped out.
Your IdP, PKI and SSO keep deciding who may do what. We carry that decision to the point of action — and bring back proof.
Adoption
It lands beside your stack — not instead of it.
Your systems, unchanged
They keep their jobs.
- IdP and SSO decide who.
- PKI issues machine identity.
- SIEM collects.
Added
Three things you did not have.
- Verification at the point of action.
- Evidence sealing.
- An auditor verification kit.
Integration scope one requires no application rewrite. Deployment topology is agreed per engagement — architecture review under NDA.
The demo
See it break before you buy it.
We demo before we contract.
One
We pull the uplink. Live.
The comparison side times out. EdSSA keeps authorizing.
Two
We change one row.
The signed record fails immediately. We cannot forge it afterwards either.
Three
You verify it yourself.
An evidence archive, on your own laptop, in airplane mode. No account, nothing of ours installed.
Coverage
Your regime is already on this wall.
34 frameworks, one evidence layer — example report packs generated for every badge, five formats each. Energy to aviation to pharma to finance, one protocol underneath. That is what multi-vertical means in practice.
- SOC 2
- ISO 27001
- GDPR Art. 28
- DORA
- NIS2
- EU AI Act
- HIPAA
- PCI DSS
- FedRAMP
- CMMC 2.0
- NIST CSF 2.0
- NIST AI RMF
- EU CRA
- MiCA
- UK GDPR
- ISO 42001
- HITRUST
- IEC 62443
- ISO 21434
- DO-326A
- IMO MSC.428
- NERC CIP
- Julkri
- Katakri
- Pitukri
- APPI
- PDPA
- DPDP
- AU Privacy Act
- PIPA
- LGPD
- LFPDPPP
- DSCSA
- EU FMD
Illustrative example reports, synthetic data — not attestations or certifications.
For the people who check
Your auditor’s new workflow.
Step one
Receive the archive.
Control-by-control mapping to the regime’s own articles, with the evidence chain attached. Five formats: HTML, PDF, JSON, OSCAL, Markdown.
Step two
Verify it on their own laptop.
Offline, no account, nothing of ours installed.
Step three
Done.
Mathematics instead of attestations. Maps to NIS2, DORA and GDPR Article 28 supply-chain duties.
Entry tiers are live today — €149 / €499 per month. Production engagements are scoped with your partner. See pricing →
Vendor risk
The vendor-risk question, answered first.
Yes — we are young. So:
Evidence independence
Your archives verify without us.
Verification requires nothing from us. If we vanished tomorrow, every sealed record would still verify — by construction, forever.
Continuity
Delivered by people you already trust.
Production is delivered with a certified delivery partner — by preference, the systems integrator already under contract with you. The certified-partner program opens with our first production implementations.
Escrow
Source and documentation, escrowed.
Available with agreed release triggers.
The numbers
Measured, method available.
Performance is measured rather than projected, and patent-backed: priority filed May 2026, 54 claims.
The exit cost of choosing us is designed to be zero. Ask your current vendors the same question.
Read further
Investor or researcher?
The operator page is above. These go underneath it — the architecture, the evidence, and the posture behind both.
Architecture
Auth without a vault.
The four pieces of plumbing that stop existing.
Evidence
The transparency log.
Audit-chain roots anyone can check without trusting the operator.
Posture
Patents, and the discipline around them.
A defensive portfolio, filed 1 May 2026.
Depth
The whitepaper.
The long-form argument, public-safe throughout.