Trust and data handling.
AgentEnvelope is an authority layer, not a data lake. The hosted portal records the minimum evidence needed for governance, ledgers, audit exports, and supportable operations while keeping sovereign roots and private signing material under your control. That applies whether the actor is an AI agent, worker, workflow, service, device, access grant, order, or instruction.
Not a data lake
The hosted service stores governance evidence and safe metadata, not customer roots or private capability material.
90-day event retention
Governed-event and verification-event logs expire automatically through database time-to-live controls.
Browser verification
Export integrity checks run locally in your browser. The audit file is never uploaded back to AgentEnvelope.
What the service stores
The portal stores continuity and governance state. It does not store the authority that lets agents, workers, services, devices, or delegated instructions sign new actions.
We verify signatures, not identities. The signer proves capability, not disclosure.
Stored
Account identifier, event type, timestamp, record identifiers, agent identifiers, public verifier metadata, encrypted vault ciphertext, safe workspace metadata, hosted mint delegates, domain proofs, billing identifiers, and service-metering records.
Never stored
Vault passphrases, sovereign roots, domain seeds, action seeds, private keys, private capability packs, or plaintext vault contents.
Verify inputs
Hosted verify receives payloads and signatures to compute a result. The persisted verification event stores the record id, agent id, action index, validity, reason, owner, and timestamp, not the submitted payload or signature.
Why it matters
The hosted portal can remember workspace state and provide governance evidence without becoming the custodian of your authority.
Controls you hold
Hosted governance should give you operational memory without trapping your authority. You can export evidence, delete portal state, and keep local verification independent.
Export
Download activity as JSON or CSV from the ledger activity timeline. JSON exports include an embedded SHA-256 digest.
Delete
Delete the sovereign workspace and associated records from the portal when you no longer want hosted continuity.
Verify offline
Use SDK verification locally, or verify an exported activity trail below without sending the file anywhere.
Hosted attestation pin
Hosted verify reports and mint receipts may include an AgentEnvelope attestation. Verifiers can pin this public address when checking a receipt with the SDK.
Published attester address
0x2332d1b716a49a520d9a2de6baebeb5bdafdf994
Verify an audit export
Every JSON activity export embeds a SHA-256 digest computed over its event set. If a single character of the recorded events changes, the digest no longer matches.
Export your activity trail from the activity timeline, then check it here.
Verification runs entirely in your browser. The file is never uploaded.
Sovereign mode is offline
Sovereign verification of an action signature happens locally and is never transmitted to the hosted service. Hosted verification is optional and receives the payload and signature only because it is being asked to verify them. Verification is always free when run locally with the SDK. AgentEnvelope does not claim any third-party compliance certification; this page describes the technical posture of the service as it is built.