Lifecycle
Track key state and operational readiness.
Product / VaultCore
Authorization control for customer-owned key paths.
VaultCore is a control-plane authorization service for key lifecycle state, signer-binding intent, deployment boundaries, and signing receipts. Separate execution-routing services resolve governed backend profiles; VaultCore preserves authorization evidence and Alloy never holds customer private keys.
No custody blur: VaultCore coordinates authority, policy, and receipts around signing paths; customers and their approved providers retain key custody and final signing responsibility.
Product console
Built for customer-controlled environments.
VaultCore supports Alloy’s controlled-deployment story: cloud, private cloud, or bank infrastructure with explicit responsibility boundaries.
Operating boundary
Customer systemsProduct flowsFinance closeCompliance review
Alloy control planeWalletKitPolicyKitRiskGuardReconFlow
Execution boundaryCustody providersCustomer cloudAudit evidence
Controls
Signing authority is a workflow, not just a key.
Authorization
Check tenant, operation, and policy before signing.
Receipts
Preserve evidence for review and replay.
Evidence
Proof the buyer can inspect.
Every route keeps Alloy's public story grounded in operating records, custody boundaries, and right-sized modules.
Next step
Bring your current provider stack.
We will map the first workflow Alloy should stabilize, the custody boundary, and the modules that create evidence.
Join design partners
Prefer email? hello@alloy.build