AlgoVoi Suite Store

Self-hosted OEM SDKs + the Payment Rails on-prem bundle, paid in USDC on mainnet. Every purchase mints a Substrate 2 receipt.

Pay in USDC on Native Circle USDC on Algorand, Base, Solana, Stellar and Hedera; Voi settles Aramid-bridged aUSDC and Tempo settles Stargate-bridged USDC.e.

AV-RAILSPayments / On-Prem

Payment Rails: SQLite-first (x402 / MPP / AP2 / A2A)

algovoi-rails-sqlite-first

Self-hosted multi-protocol payment rails you run yourself: the four agentic payment protocols across seven chains live today plus Arc (Circle's USDC-native L1), ready for go-live 16 September 2026, post-quantum signed throughout, with A2A also carried over the gibberlink data-over-sound transport, and live in five minutes on SQLite.

  • Four protocols on one engine and one port: x402, MPP, AP2, A2A
  • A2A over gibberlink (ggwave data-over-sound): the same signed A2A payment message carried agent-to-agent over audio, authenticated by an anchored DID, did:key offline or an enrolled did:web (the agent presents no secret, its identity is the key named in its DID) and authorized by an agent passport you issue (scopes plus a per-transaction or cumulative windowed spend cap), with durable single-use replay protection
  • Eight chains: Algorand, Base, Stellar, Voi, Hedera, Solana, Tempo live today, and Arc (Circle's USDC-native L1) ready for go-live 16 September 2026
  • Settlement and finality verification per chain: right recipient, amount, asset, and finalised
  • Full keystone estate: passport-to-journey lifecycle, federation validator, zero-knowledge receipts, delegation
  • Post-quantum Substrate-2 core, Falcon-1024 signed throughout
  • Three-layer defence, active by default: a fail2ban perimeter firewall driven by runtime signals, Substrate Guard Pro input-bounds admission, and Edge Sentinel IP / geo / ASN / rate / replay protection, every decision Falcon-1024 signed and offline-verifiable
  • Operator Security console in the control panel: view banned IPs and pause or resume each layer, every change audit-logged
  • Multi-tenant control plane with an operator panel and per-tenant isolation
  • Agent-to-agent settlement, included and federation-allocated: create members in the panel and allocate them post-quantum settlement licences at no per-agent fee, each bound to its own agent DID so it settles only transactions it is a party to, every settlement recomputing offline as one content-addressed reference anyone can check
  • Offline-verifiable, no-PII signed settlement and payout receipts
  • SQLite-first: live in five minutes, upgrade to PostgreSQL by import
  • One encrypted, offline-verifiable .algv deliverable, air-gap capable, no PyPI

A one-time buy-out on a perpetual licence: one key installs the full multi-tenant rails, the control plane with operator panel, agent-to-agent settlement you allocate to your own federation members at no extra cost, and the Keystone and Substrate-2 core. SQLite to PostgreSQL, self-hosted, air-gap capable, no PyPI.

$5,000perpetual · one-time
View docs ↗
AV-MANDPayments

Payment Mandate

algovoi-payment-mandate

Verifiable recurring/agentic payment authorisation.

$4,500perpetual · one-time
$1,500/yr · 1-year licence
View docs ↗
AV-VCSHealth / Insurance / Defense / Long-Term Data

Verifiable Compliance Suite

algovoi-verifiable-compliance-suite

The verifiable long-term data estate for regulated sectors: health, insurance, defense, and any records that must stay provably intact and confidential for decades. Documents are preserved write-once in a tamper-evident, content-addressed archive, encrypted at rest, RFC-3161 timestamped, and offline-verifiable with no vendor in the loop. Post-quantum signing (Falcon-1024 and ML-DSA-65) keeps the evidence verifiable as cryptography evolves, the durability that long-lived and defense records require. Add records and remove them the compliant way: a legal hold blocks deletion, then a signed erasure tombstone leaves proof the record existed while the content is irrecoverable. The Compliance Command Center re-verifies every signed chain offline and shows one proven posture, every figure recomputed, not asserted. Air-gap capable, no PyPI. The payment-rails estate ships separately as the Payment Rails bundle.

  • Complete on-prem estate: 18 post-quantum signed components, one licence
  • Long-term preservation: write-once, tamper-evident, content-addressed archive
  • Post-quantum signing (Falcon-1024, ML-DSA-65): evidence stays verifiable for decades
  • RFC-3161 timestamping; legal and e-discovery holds; signed erasure tombstones
  • Encrypted at rest, offline-verifiable, air-gap capable, no PyPI
  • Bring-your-own-key custody: HSM, KMS, HashiCorp Vault, PKCS#11
  • Compliance Command Center: manage records, legal holds, retention and disposition, local accounts, and every signed evidence stream from one console, with one proven posture and every figure recomputed not asserted
  • Bulk volume importer: bring an existing document estate in at scale from a folder, SFTP, or rsync, batch-signed at thousands of documents per second with constant memory, one signature per batch, or per-document for maximum granularity; drive it from the console Import page or the CLI
  • Portable sealed .acv containers: ML-KEM-1024 sealed to a named recipient, revoked and recovered from the console, with optional opaque names that keep filenames out of the header
  • Operator-controlled updates: push future upgrades from the console, offline by default, signed and verified before install, air-gap friendly
  • Hardened web console: strict content-security-policy with anti-clickjacking and anti-sniff headers, cookies marked secure over HTTPS, sign-in brute-force backoff, and a step-up re-check before sensitive actions
  • Two-factor sign-in (optional): authenticator-app TOTP with QR enrollment, opt-in then required, no SMS or email so air-gap friendly, every enrollment and sign-in written to the signed audit chain
  • Live SIEM audit forwarding (optional): stream the signed audit chain to your SOC over syslog (RFC 5424 / CEF) or webhook, each record tied back by seq and sha256; off unless configured
  • Signed supply-chain provenance: a CycloneDX 1.5 and SPDX 2.3 Software Bill of Materials plus a SLSA v1 build attestation signed with the AlgoVoi release key, all verifiable offline; load the SBOM straight into Dependency-Track, Grype, or Trivy
  • Verifiable disaster recovery: a signed key-ceremony and backup-restore attestation chain (genesis, split custody, rotation, recovery drill) hash-linked and offline-verifiable, plus a documented RTO and RPO runbook shipped in the bundle
  • Evidence supporting HIPAA, GDPR, eIDAS, and long-term retention mandates

One licence installs the whole estate: substrate2 core, Command Center and control plane, Records Vault, Recovery Vault, Archive Auditor, the doc-archive engine with HSM, KMS, Vault and S3 key custody, Compliance Gate, Retention Chain, Sanctions Monitor, Travel Rule, and the Verifiable Audit Log, plus the keystone lifecycle evidence and a clean-box validation gauntlet. Air-gap capable, no PyPI.

$5,000perpetual · one-time
View docs ↗
AV-PROOFCompliance

Privacy Proofs

algovoi-proofs

Privacy-preserving compliance proofs (ZK).

You run your own ZK prover.

$3,000perpetual · one-time
$1,000/yr · 1-year licence
View docs ↗
AV-EVIDPost-Quantum / Long-Term Evidence

Evidence Auditor

algovoi-evidence-audit

Point it at your archive of signed documents and it verifies every signature (classical RSA/ECDSA and post-quantum), flags the weak, expired, broken-chain and quantum-exposed ones, and produces a signed, tamper-evident audit report your auditor checks with the free verifier. Re-run each cycle to prove nothing changed. Read-only, self-hosted, air-gap capable. The middle rung between the free verifier and the Compliance Suite.

  • Batch-verify a whole folder or archive: PDF (PAdES/CMS), detached .p7s, and reseal attestations
  • Per-document flags: invalid, unsigned, weak-digest (SHA-1), expired cert, broken chain, partial-coverage PDF, quantum-exposed
  • Signed, tamper-evident audit report (HTML + JSON + CSV) verifiable by the free av-reseal-verify, no licence needed to check it
  • Baseline diff: re-run against a prior report to show changed / new / removed
  • Offline trust-path + CRL validation; air-gap capable, no upload
  • Read-only: it verifies and reports, it never stores or governs your records

Uses the free av-reseal-verify to check each document and to verify the report it signs. Storage, retention, legal holds, console and at-scale sealing live in the Compliance Suite.

$599perpetual · one-time
$299/yr · 1-year licence
View docs ↗
AV-RSLPost-Quantum / Long-Term Evidence

Reseal: Quantum-Seal Existing Evidence

algovoi-reseal

Re-anchor documents you already have: verify the classical RSA/ECDSA signature today, then bind it into a post-quantum (Falcon-1024 + ML-DSA-65/87), RFC-3161 timestamped, offline-verifiable attestation. The rescue only works while the classical signature still verifies. The free av-reseal-verify tool (PyPI, Apache-2.0) inspects exposure and verifies seals; this licence unlocks the sealing engine.

  • Verify PDF (PAdES/CMS) and detached .p7s signatures, capture the full cert chain as bytes
  • Offline trust-path + CRL revocation validation (air-gap capable, no OCSP fetch)
  • Dual post-quantum signatures, two profiles: Compact (Falcon-1024 + ML-DSA-65, L5+L3) or Matched (Falcon-1024 + ML-DSA-87, L5+L5); one RFC-3161 stamp per batch chain head
  • Verifies offline forever with the free open verifier, no AlgoVoi in the trust path; --expect-kid anchors authenticity
  • Shadow-PDF partial-coverage and SHA-1 weak-digest detection, carried into the seal

Free av-reseal-verify (PyPI) triages exposure and verifies seals; this paid engine mints the PQ attestations. Air-gap capable.

$99perpetual · one-time
$39/yr · 1-year licence
View docs ↗

Included free with any Substrate 2 licence

Not for sale. These ship free to every Substrate 2 customer, but they are licence-gated (fail-closed): an active Substrate 2 / suite licence is required to install or run them.

AV-CAGLPost-QuantumFree

Crypto-Agility

algovoi-crypto-agility

Migrate a signing and encryption estate classical → post-quantum with provable continuity.

Requires an active Substrate 2 licence to install and run (fail-closed).

Freewith a Substrate 2 licence
View docs ↗

Need multi-deployment, warranty/indemnity/SLA or a custom Substrate 2 binding? Talk to us.