Built for auditors and compliance reviewers
Every action routed through a gateway is signed, and its signature verifies independently.
An audit trail is only as useful as it is independently verifiable. SynOI signs every gateway action with a hybrid Ed25519 + ML-DSA-65 (post-quantum) scheme and publishes the verification key, so you can check any receipt without a SynOI account or a call to us.
What this covers
Every action routed through a gateway produces a signed receipt, and an auditor can verify it without contacting SynOI.
- Receipt minted on every gateway call
- Canonical JSON body, hybrid Ed25519 + ML-DSA-65 signature
- Offline verification with JCS canonicalization plus Ed25519 and ML-DSA-65 verifiers, no account (hosted verifier at oid.synoi.systems: planned, not yet deployed)
- Export as CI artifact, SIEM event, or evidence-journal entry
- Anchoring to OpenTimestamps / Rekor planned Q4 2026, for tamper-evidence beyond SynOI
- Auditor receives a windowed view by design