Mainnet is not open yet. SigVault is young software that will handle real money. We publish our threat model, our trust boundaries, and our limitations — read them before you deposit.
A hardware wallet on someone's desk, a service signing through the SDK — one session collects from all of them. Partial signatures relay through the coordinator, which can do nothing with them until the threshold is met.
to bc1q…7m4k · fee 4.2 sat/vB
The seller refused. Two of three is still a quorum, so the escrow settles without them — and would not have settled with the arbiter alone.
The private key never leaves the device. SigVault sees the signature, never the key that made it.
A quorum, a recovery path, and a timelock — composed in the builder and compiled straight to a descriptor. Pick a scenario to see the shape it produces.
Any two of the three entities can spend. The CFO and the controller sit in different legal entities, so a single compromised office is never a quorum.
If the operating quorum is lost, four named board members can recover — but only after the timelock, and only three of them together.
tr(unspendable,{multi_a(2,K_cfo,K_controller,K_auditor),and_v(v:older(26280),multi_a(3,K_b1,K_b2,K_b3,K_b4))})
Every path on the left compiles into this one expression. It is what the network checks at spend time — nothing outside it can move the funds, including us.
Read the walk-throughCombine devices from different vendors in a single multi-party vault.
Free
Get started with basic vault management.
Holder
For serious Bitcoiners securing significant holdings.
Enterprise
For organizations managing Bitcoin treasury.
Self-hosting is free on every tier. Pair your own wallet service and the coordinator becomes something you run, not something you subscribe to.
Compare plans in full