Security & Compliance

Key security and
policy controls

Seed phrase, private key import, 2-of-3 MPC threshold signing, social, email and passkey login, and hardware wallet integration, on one self-custody platform. Keys are protected with HSM and TEE.

5Key models
1Policy engine, all modules
Across every module · Security & policy

Policy and security controls

Rules applied before every signature.

One policy engine and one security stack sit under every module. Spend limits, allowlists and jurisdiction rules are checked before signing, per wallet or platform-wide, for every key model.

Policy engine
  • Allowlists & blocklists
  • Velocity & spend limits
  • Geo and jurisdiction rules
  • Audit trail
Security controls
  • Seed, key import, MPC & social login
  • Hardware wallet integration
  • Key recovery model
  • Role-based access control
  • Transaction policies
  • Audit logs
  • Anomaly & risk detection
  • Infrastructure isolation
  • Encryption standards
  • Disaster recovery
  • Incident response
  • Penetration testing
  • Vulnerability disclosure
Policy engine · before signing
Send 0.4 ETH to saved address
Allowlist
Spend limit
Jurisdiction
Decision
Checking…
Core Principles

These principles apply across the platform, from key storage to audit logs.

Self-Custody Design

Users control their private keys. Texavio never holds a complete key or user funds; its controls protect the infrastructure around the keys.

Zero-Trust Architecture

Every request is authenticated and every action authorised. There is no implicit trust between services, operators or nodes.

Defence in Depth

Independent security layers: MPC, HSM, TEE, policy engine, role-based access control and audit logs. Each layer operates on its own.

Ongoing Testing

Regular third-party penetration testing and real-time threat monitoring.

Certifications & Standards

Five standards covering Texavio’s infrastructure, engineering processes and data handling.

ISO 9001

Quality management system covering delivery processes

ISO/IEC 20000

IT service management and service lifecycle governance

ISO/IEC 27001

Information security management system (ISMS)

CMMI Level 3

Defined, documented and repeatable engineering processes

SOC 2

Controls for security, availability and confidentiality

GDPR

EU data protection: data handling and data residency controls

Compliance Roadmap

Current certifications, work in progress and planned standards for security and privacy.

Active certifications
Current
  • ISO 9001
  • ISO/IEC 20000
  • ISO/IEC 27001
  • CMMI Level 3
  • SOC 2
  • GDPR
In progress
Next
  • ISO/IEC 27017 (Cloud Security)
  • Pen-test programme (CREST-accredited)
Planned
Later
  • ISO/IEC 27701 (Privacy)
  • Zero-trust network certification