Sectors

A new presence in the middle of a sensitive action: a transfer above a value, a limit change, a new device. The policy can shorten it to level 1 with a passkey when there is a recent positive act.

Changing critical data, such as e-mail, phone or payment key, only with the person present. Never reuses a previous act.

Two distinct people, each with presence, approving the same operation. Composite receipt, one per operator, linked by the group.

A human with proven presence authorizes an agent with scope, limits and deadline; every delegated action references the mandate and leaves a receipt.

Live presence plus the government database, once the source's accreditation arrives. Only the verdict persists; the raw data never leaves.

An account with consequences, such as one that receives payouts or operates on behalf of others, proves every period that there is a living person, the same as the reference, through a link on the phone. Every proof leaves a receipt chained to the previous one.

A human with proven presence authorizes a software agent with actions, limits and validity; every delegated action references the mandate and leaves a receipt. Revocation leaves a receipt too.

Level 0, no new human: checks that the mandate exists, is valid, has not been revoked and that the action fits the scope and the limits. Resolves on the spot, with a receipt.

Changing e-mail, phone or payment key only with the person present, inside the action. Never reuses a previous act. It is not login: it is a new presence in the middle of a sensitive action.

Two distinct people, each with presence, approving the same administrative operation: a release, a bulk deletion, a critical configuration change. Composite receipt, one per operator, linked by the group.

A study participant or a patient in a long-running program proves presence every period, through a link on the phone, without travelling. Every proof leaves a receipt chained to the previous one.

A consent form or a document signed with the person present: the text goes as a hash, the presence is the proof, and the receipt stands as an advanced signature or leans on ICP-Brasil or gov.br.

Double check with two distinct people present: dispensing a controlled item, releasing a batch, four-eyes approval. Composite receipt, one per operator.

Legal guardian, curator or representative authorizing on the patient's behalf, with scope, deadline and a document hashed in the receipt. Level 2 since 0.28.0; it rises to level 3 when civil identity is accredited.

Live presence plus the government database when registering the patient or the participant, once the source's accreditation arrives. Only the verdict persists; no image stays.

Live presence and match with the reference, every period, through a link on the person's phone; every proof leaves a receipt chained to the previous one. It is the policy in production.

Many acts of the same type with links and a common deadline, created at once through the API or the dashboard.

Applicant present and identified for an administrative act; gov.br account when available.

A human authorizes another with scope, deadline and a document, such as a power of attorney or guardianship, all hashed in the receipt. Level 2 since 0.28.0; it rises to level 3 when civil identity is accredited.

An on-demand lookup at a death-records source only triggers an exception proof; the proof is still the presence.

Every finished act leaves a signed receipt, chained to the same client's previous one, with hashes only. Any auditor verifies it in the browser or on the command line.

General before everything, biometric before any capture; versioned texts, recorded in the receipt.

Generate the link with no code, or integrate through the API with the TypeScript client generated from the contract.

We are not audit, login or a KYC vendor; we do not compute scores, risk or age; we do not retain image, template or context.