Built for auditors from day one.
Every production surface in ZeniPay Agents was designed so an auditor could verify it offline without trusting us. Signed audit exports, tamper-evident Merkle trees, TOTP step-up on approvals, encrypted-at-rest secrets in Supabase Vault, and row-level security on every table.
Evidence collection is built into the product — every sensitive action writes to an append-only, triggered-immutable audit log.
All TOTP seeds + signing keys live in Supabase Vault. Application code never touches plaintext.
Global keypair, rotatable. Published SPKI at /.well-known/audit-signing-key.pub for offline verification.
Every agents.* table has RLS. Service-role writes; authenticated users read scoped to their org membership.
Compatible with Google Authenticator, 1Password, Authy. Optional dual-control on sensitive policies.
Welford rolling 30-day baselines across org / card / agent scopes. Z-score above 3 raises; above 6 auto-pauses.
Verify an audit export yourself.
Auditors receive a streamed NDJSON file. Re-hash the entries with canonical JSON, rebuild the Merkle tree, compare the root against the signed trailer, then verify the Ed25519 signature with our published public key. No network calls, no trust in our infra at verification time.