Authentikor Vault
The record behind every check. Every seal, certificate and company verification Authentikor issues is backed by a record in the Vault. When someone checks, the answer comes from the Vault, not from the email, the document or the website in front of them.
What it is
One record behind everything you send.
A picture can be copied. A PDF can be edited. An email can be faked. So your clients never have to trust any of them on its own. They check, and the Vault answers with the record: who issued it, what it was issued for and whether it is still valid.
The Vault keeps the records for your seals, your company verification and the certificates you issue. Your clients need no account and no software. They check in a web browser, and the answer they get is the Vault's.
How it is protected
Nine layers of protection around the Vault and the checks it answers.
Memory-safe machine code.
The Vault is built in memory-safe code and compiled to native machine code. That rules out, by design, the memory errors behind many well-known attacks.
Master keys stay off the servers.
The keys at the top of Authentikor's chain of trust are not kept on its servers. Breaking into a server does not hand them over.
A person approves every verified company.
A business is shown as verified only after an authorised person at Authentikor approves it and confirms the approval with a second factor. Every approval is recorded.
Admin controls are off the open internet.
The controls that run the Vault are reachable only over a private, encrypted connection, and they need a second factor.
Nothing inside is trusted by default.
Apart from the public checks anyone can make, the Vault answers only the parts of Authentikor that prove who they are and sign what they ask.
Each company is kept apart.
Your records are kept separate from every other company's, and the database itself enforces it.
Documents are locked the moment they arrive.
Papers you send to verify your business are encrypted on arrival, each with its own key. Every file is checked for malware before it is stored.
Every check leaves a trace.
Every code check is recorded, so you can see how often your codes are checked. Reviews and approvals go into a tamper-evident audit log.
Encrypted backups, kept apart.
The Vault is backed up several times a day. The backups are encrypted, and a copy is kept away from the live system.
What a check proves
The Vault does more than store records. It keeps every answer honest.
- A changed document stands out.
- The check shows what the record was issued for, such as the document number, the amount and the last digits of the bank account. If the page in your hand says something else, the change shows.
- A copied seal still tells the truth.
- Copy a seal onto another document and the check still shows what it was really issued for.
- Revoked means revoked.
- When a certificate is revoked, a check shows it as revoked. An old copy cannot bring it back.
- Honest about who is verified.
- Every seal names who issued it. If the business behind it is not verified, the seal and the check say so plainly.
- Limits you set.
- You choose how many times a code can be checked and for how long.
Talk to us about the Vault
Tell us a little about your business and the demo you would like.
Call +27 87 150 9305
Mon to Fri 8:00 to 17:00