AlgoVoi Suite Store

Self-hosted software for verifiable evidence and agent payments. Audit and future-proof your signed records, or run your own payment rails, with proof your auditor can verify offline. One-time perpetual licences, no subscription.

Do not take our word for it. Every report these tools produce is signed and independently verifiable with a free, open-source tool, offline, with AlgoVoi nowhere in the trust path.

Pay in USDC on Native Circle USDC on Algorand, Base, Solana, Stellar and Hedera; Voi settles Aramid-bridged aUSDC and Tempo settles Stargate-bridged USDC.e.

AV-RAILSPayments / On-Prem

Payment Rails: SQLite-first (x402 / MPP / AP2 / A2A)

algovoi-rails-sqlite-first

Self-hosted multi-protocol payment rails you run yourself: the four agentic payment protocols across seven native mainnet chains, with settlement negotiated between agents on any two of them, post-quantum signed throughout, with A2A also carried over the gibberlink data-over-sound transport, and live in five minutes on SQLite.

  • Four protocols on one engine and one port: x402, MPP, AP2, A2A
  • A2A over gibberlink (ggwave data-over-sound): the same signed A2A payment message carried agent-to-agent over audio, authenticated by an anchored DID, did:key offline or an enrolled did:web (the agent presents no secret, its identity is the key named in its DID) and authorized by an agent passport you issue (scopes plus a per-transaction or cumulative windowed spend cap), with durable single-use replay protection
  • Seven native chains: Algorand, Base, Stellar, Voi, Hedera, Solana, Tempo, with settlement negotiated between agents on any two of them
  • Settlement and finality verification per chain: right recipient, amount, asset, and finalised
  • Full keystone estate: passport-to-journey lifecycle, federation validator, zero-knowledge receipts, delegation
  • Post-quantum Substrate-2 core, Falcon-1024 signed throughout
  • Three-layer defence, active by default: a fail2ban perimeter firewall driven by runtime signals, Substrate Guard Pro input-bounds admission, and Edge Sentinel IP / geo / ASN / rate / replay protection, every decision Falcon-1024 signed and offline-verifiable
  • Operator Security console in the control panel: view banned IPs and pause or resume each layer, every change audit-logged
  • Multi-tenant control plane with an operator panel and per-tenant isolation
  • Agent-to-agent settlement, included and federation-allocated: create members in the panel and allocate them post-quantum settlement licences at no per-agent fee, each bound to its own agent DID so it settles only transactions it is a party to, every settlement recomputing offline as one content-addressed reference anyone can check
  • Offline-verifiable, no-PII signed settlement and payout receipts
  • SQLite-first: live in five minutes, upgrade to PostgreSQL by import
  • One encrypted, offline-verifiable .algv deliverable, air-gap capable, no PyPI

A one-time buy-out on a perpetual licence: one key installs the full multi-tenant rails, the control plane with operator panel, agent-to-agent settlement you allocate to your own federation members at no extra cost, and the Keystone and Substrate-2 core. SQLite to PostgreSQL, self-hosted, air-gap capable, no PyPI.

$1,000perpetual · one-time
View docs ↗
AV-VCSHealth / Insurance / Defense / Long-Term Data

Verifiable Compliance Suite

algovoi-verifiable-compliance-suite

The verifiable long-term data estate for regulated sectors: health, insurance, defense, and any records that must stay provably intact and confidential for decades. Documents are preserved write-once in a tamper-evident, content-addressed archive, encrypted at rest, RFC-3161 timestamped, and offline-verifiable with no vendor in the loop. Post-quantum signing (Falcon-1024 and ML-DSA-65) keeps the evidence verifiable as cryptography evolves, the durability that long-lived and defense records require. Add records and remove them the compliant way: a legal hold blocks deletion, then a signed erasure tombstone leaves proof the record existed while the content is irrecoverable. The Compliance Command Center re-verifies every signed chain offline and shows one proven posture, every figure recomputed, not asserted. Air-gap capable, no PyPI. The payment-rails estate ships separately as the Payment Rails bundle.

  • Complete on-prem estate: 18 post-quantum signed components, one licence
  • Long-term preservation: write-once, tamper-evident, content-addressed archive
  • Post-quantum signing (Falcon-1024, ML-DSA-65): evidence stays verifiable for decades
  • RFC-3161 timestamping; legal and e-discovery holds; signed erasure tombstones
  • Encrypted at rest, offline-verifiable, air-gap capable, no PyPI
  • Bring-your-own-key custody: HSM, KMS, HashiCorp Vault, PKCS#11
  • Compliance Command Center: manage records, legal holds, retention and disposition, local accounts, and every signed evidence stream from one console, with one proven posture and every figure recomputed not asserted
  • Bulk volume importer: bring an existing document estate in at scale from a folder, SFTP, or rsync, batch-signed at thousands of documents per second with constant memory, one signature per batch, or per-document for maximum granularity; drive it from the console Import page or the CLI
  • Portable sealed .acv containers: ML-KEM-1024 sealed to a named recipient, revoked and recovered from the console, with optional opaque names that keep filenames out of the header
  • Operator-controlled updates: push future upgrades from the console, offline by default, signed and verified before install, air-gap friendly
  • Hardened web console: strict content-security-policy with anti-clickjacking and anti-sniff headers, cookies marked secure over HTTPS, sign-in brute-force backoff, and a step-up re-check before sensitive actions
  • Two-factor sign-in (optional): authenticator-app TOTP with QR enrollment, opt-in then required, no SMS or email so air-gap friendly, every enrollment and sign-in written to the signed audit chain
  • Live SIEM audit forwarding (optional): stream the signed audit chain to your SOC over syslog (RFC 5424 / CEF) or webhook, each record tied back by seq and sha256; off unless configured
  • Signed supply-chain provenance: a CycloneDX 1.5 and SPDX 2.3 Software Bill of Materials plus a SLSA v1 build attestation signed with the AlgoVoi release key, all verifiable offline; load the SBOM straight into Dependency-Track, Grype, or Trivy
  • Verifiable disaster recovery: a signed key-ceremony and backup-restore attestation chain (genesis, split custody, rotation, recovery drill) hash-linked and offline-verifiable, plus a documented RTO and RPO runbook shipped in the bundle
  • Evidence supporting HIPAA, GDPR, eIDAS, and long-term retention mandates

One licence installs the whole estate: substrate2 core, Command Center and control plane, Records Vault, Recovery Vault, Archive Auditor, the doc-archive engine with HSM, KMS, Vault and S3 key custody, Compliance Gate, Retention Chain, Sanctions Monitor, Travel Rule, and the Verifiable Audit Log, plus the keystone lifecycle evidence and a clean-box validation gauntlet. Air-gap capable, no PyPI.

$1,000perpetual · one-time
View docs ↗
AV-PROOFCompliance

Privacy Proofs

algovoi-proofs

Privacy-preserving compliance proofs (ZK).

You run your own ZK prover.

$750perpetual · one-time
View docs ↗
AV-EVIDPost-Quantum / Long-Term Evidence

Evidence Auditor

algovoi-evidence-audit

Find the signed documents in your archive whose signatures are invalid, expired, weak or exposed to future quantum forgery, before an auditor or court does. Point it at your archive and it verifies every signature (classical RSA/ECDSA and post-quantum), flags the weak, expired, broken-chain and quantum-exposed ones, and produces a signed, tamper-evident audit report your auditor checks with the free verifier. Re-run each cycle to prove nothing changed. Read-only, self-hosted, air-gap capable. The middle rung between the free verifier and the Compliance Suite.

  • Batch-verify a whole folder or archive: PDF (PAdES/CMS), detached .p7s, and reseal attestations
  • Per-document flags: invalid, unsigned, weak-digest (SHA-1), expired cert, broken chain, partial-coverage PDF, quantum-exposed
  • Signed, tamper-evident audit report (HTML + JSON + CSV) verifiable by the free av-reseal-verify, no licence needed to check it
  • Baseline diff: re-run against a prior report to show changed / new / removed
  • Offline trust-path + CRL validation; air-gap capable, no upload
  • Read-only: it verifies and reports, it never stores or governs your records

Uses the free av-reseal-verify to check each document and to verify the report it signs. Storage, retention, legal holds, console and at-scale sealing live in the Compliance Suite.

$150perpetual · one-time
View docs ↗
AV-RSLPost-Quantum / Long-Term Evidence

Reseal: Quantum-Seal Existing Evidence

algovoi-reseal

Protect the documents you must keep for years against future quantum forgery, while their classical signatures still verify. Re-anchor documents you already have: verify the classical RSA/ECDSA signature today, then bind it into a post-quantum (Falcon-1024 + ML-DSA-65/87), RFC-3161 timestamped, offline-verifiable attestation. The rescue only works while the classical signature still verifies. The free av-reseal-verify tool (PyPI, Apache-2.0) inspects exposure and verifies seals; this licence unlocks the sealing engine.

  • Verify PDF (PAdES/CMS) and detached .p7s signatures, capture the full cert chain as bytes
  • Offline trust-path + CRL revocation validation (air-gap capable, no OCSP fetch)
  • Dual post-quantum signatures, two profiles: Compact (Falcon-1024 + ML-DSA-65, L5+L3) or Matched (Falcon-1024 + ML-DSA-87, L5+L5); one RFC-3161 stamp per batch chain head
  • Verifies offline forever with the free open verifier, no AlgoVoi in the trust path; --expect-kid anchors authenticity
  • Shadow-PDF partial-coverage and SHA-1 weak-digest detection, carried into the seal

Free av-reseal-verify (PyPI) triages exposure and verifies seals; this paid engine mints the PQ attestations. Air-gap capable.

$25perpetual · one-time
View docs ↗

Need multi-deployment, warranty/indemnity/SLA or a custom Substrate 2 binding? Talk to us.