Institutional cold storage. Keys that never go online.

Software-first, hardware-agnostic cold storage your organisation runs on computers it already owns. Unlimited licences for every signer, a client portal for licences, roles and activations, and support with defined response times.

Air-gapped signing

Keys are generated and used only while the computer is disconnected. Only the signed transaction ever reaches the network.

Hardware-agnostic

Fortress is software-first: it runs on Windows or macOS computers you already own, from removable media you control. No hosted keys, no custodian.

Multi-party approval

Citadel adds offline M-of-N approval, enforced by the software, so no single person moves funds alone.

Team and licence control

Admin, Member and Viewer roles, device activations and a licence audit log in the client portal.

Defined response times

Standard, Premium and Platinum support tiers, from 8 hours down to 1 hour for initial response.

Unlimited licences

One annual agreement covers every signer and every edition across your organisation.

AES-256-GCM

Wallet material is stored under authenticated encryption, so tampering is detected.

Air-gapped by design

Key operations happen with the computer disconnected from every network.

Developed in-house

The wallet software is designed and built by our own team.

Standard BIP39 seeds

Your recovery does not depend on any single vendor, including us.