Built for auditors and compliance reviewers
Every gateway action is signed, and every signature is verifiable.
An audit trail is only as useful as it is independently verifiable. SynOI signs every gateway action with a hybrid Ed25519 + ML-DSA-65 (post-quantum) scheme and publishes the verification key, so you can check any receipt without a SynOI account or a call to us.
What this covers
Every action routed through a gateway produces a signed receipt, and an auditor can verify it without contacting SynOI.
- Receipt minted on every gateway call
- Canonical JSON body, hybrid Ed25519 + ML-DSA-65 signature
- Offline verification with JCS canonicalization plus Ed25519 and ML-DSA-65 verifiers, no account (hosted verifier at oid.synoi.systems: planned, not yet deployed)
- Export as CI artifact, SIEM event, or evidence-journal entry
- Anchoring to OpenTimestamps / Rekor planned Q4 2026, for tamper-evidence beyond SynOI
- Auditor receives a windowed view by design