Multi-signature security
Customizable quorum policies like 2-of-3 or 3-of-5 protect funds with multiple signers.
Purpose-built for securing significant Bitcoin holdings — primitives that compose into real operational security.
Customizable quorum policies like 2-of-3 or 3-of-5 protect funds with multiple signers.
Native support for Ledger, Jade, BitBox02, Trezor, and Coldcard.
Your keys, your coins. SigVault never sees your private material.
Built on BIP-388, Miniscript, and output descriptors for maximum interoperability across tools.
Configurable recovery paths with timelocks so you never lose access, even if a device is lost.
Every transaction logged and traceable. Compliance-ready reporting for desks and custodians.
No custodial step. No trust assumption beyond your own hardware.
Sign up with email and set up multi-factor authentication. Identity hardened before a single satoshi ever touches the vault.
Plug in your hardware wallets. SigVault auto-detects Ledger, Jade, BitBox02, Trezor and Coldcard — no manual configuration needed.
Pick a template or design a custom multi-sig policy. Set quorum thresholds, time-locks, and recovery paths — all descriptor-native.
Deposit BTC to your vault. When sending, collect the required signatures on each device — fully air-gapped if you prefer.
Organizations let teams, families, and institutions hold a vault together — and keys can come from members of different organizations, without merging anyone's workspace or audit trail.
Co-sign the company vault across founders, finance, and an external accountant — each from their own organization, none with custody.
Joint custody across households. Every member keeps their own SigVault account and shares one device into the family org.
One key from the buyer's org, one from the seller's, one from a neutral third party. No team merge required.
Treasury co-signed by representatives drawn from several member orgs. Audit trails stay inside each org.
Sharing a device gives an org visibility into a public key — not authority to spend. Every layer is revocable in one click.
Accept an invite to become a member with a defined role and a per-permission grant set.
Opt in to expose a hardware device's public key to the org's vault builder. Revocable anytime.
Explicitly consent to your key joining each specific multisig. Per-vault, never blanket.
SigVault never holds keys, signs on a member's behalf, or auto-includes a device in a vault. The org is a coordination layer, not a custodian.
Five native integrations. Firmware-validated, descriptor-aware, and tested against every recent release.





Start with a template, or build a custom multi-sig policy from scratch. No credit card. No custodial middleman.