Trust should not require surrendering your data.
Authpermit started from one observation: every organization is asked to trust people, companies, devices, software and now AI agents — and every product built to help does it by collecting more data into someone else's database. We think the trust layer and the data plane should be separable.
What we build
A control plane for identity, verification, credentials, security, automation and intelligence, and a data plane that stays wherever the customer decides: our cloud, their bucket, their network, or fully air-gapped.
Principles
- Data stays with its owner whenever technically and legally practical.
- AI accelerates; evidence, cryptography, issuers, policy and people decide.
- Same path for every channel — no privileged backdoors, not even for our own agents.
- We monetize infrastructure, computation, verification and protection — never data.
Standards
NIST SP 800-63-4 (identity assurance, fraud controls, federation), ICAO Doc 9303 (machine-readable travel documents), W3C Verifiable Credentials, OAuth 2.1 / OIDC, the Model Context Protocol, OpenTelemetry.