Sodot Crypto Vault

The secure control plane for all your crypto keys and governance. Generate, store, and use keys (exchange API secrets, custodian API keys, and on-chain wallets) with zero key exposure, policy-driven signing, and a full audit trail. Self-hosted in your own cloud.

The Crypto Vault is not a custodian and not an execution venue. It is the security and governance layer that sits underneath them.

What it does

• Manages all your keys. Import exchange API secrets without ever exposing them; generate Ed25519 and RSA keys, and on-chain wallets for EVM and Solana networks, with multi-party computation.
• Governs who can do what. A deny-by-default Administrative Policy over users, groups, and actions.
• Controls how keys sign. Ordered Signing Policies (Approve, Deny, External Rule Server), with transfer rules conditioned on network, asset, destination, and USD value.
• Signs arbitrary payloads for machine users and AI agents over a signed REST API.
• Signs on-chain transactions. Vaults group wallets; submit an unsigned transaction and receive a signature once the vault's Signing Policy approves the decoded transfer. You assemble and broadcast.
• Freezes instantly. A kill switch at key, wallet, vault, user, venue, or whole-system scope.
• Proves everything. An exportable, SIEM-ready audit log.

Where to go next