The Family vault is cryptographically isolated inside the host platform’s MPC infrastructure. Even if the main wallet is fully compromised, the vault stays sealed. Non-custodial. Inheritable. Operator-blind.
Every person already carries a naturally unique biological identifier. Aveum extracts a deterministic cryptographic verification key from that identifier, creating a permanent, forensic-grade trust anchor without relying on names, addresses, photographs, passwords, or stored genomic data.
Aveum has developed the ArK-512P which is a deterministic cryptographic kernel that transforms constrained genomic signals into compact, non-reversible identifiers through a multi-algorithm cascade. The system combines SHA-256, SHA-512, and BLAKE2b in a patent-compliant architecture that maintains 100% determinism while providing quantum-resistant security through domain separation and key derivation functions. Your DNA is not stored, it is computed. It cannot be stolen, phished, replayed, or lost.
Split-Key Verification. The kernel produces a 256-bit canonical key K. The user receives only a 15-character slice (the GIS, 60 bits). The remaining 196 bits (K-tail) are held exclusively inside the trusted compute enclave. On-chain, only keccak256(K || nonce) is stored, a full 256-bit hash that is computationally impossible to brute-force. Neither the user alone, the enclave alone, nor the public ledger alone can reconstruct the full key. Verification requires all three pieces to align in the same place at the same time.
Genomic Identification Signature (GIS) generation runs exclusively inside IBM Trusted Compute enclaves, IBM Z, LinuxONE, IBM Key Protect for IBM Cloud. PostgreSQL 15, Python 3.12, QEMU s390x emulation. GIS derivation under 2ms, 15,675 ops/sec throughput validated (8 cores). ArK-512P kernel on s390x hardware with Secure Execution. HPCS working with HOT/COLD tier databases deployed, Crypto Express. Components: IBM Confidential Computing (8 vCPU, 32GB), HPCS (standard), PostgreSQL. FIPS 140-2 Level 4, 10,000+ ops/sec per partition. 256 GB DDR5 ECC Expandable to 1TB, always-on encryption, no disk, no network, no operator access. The kernel binary and all cryptographic logic are sealed. Provides parallel attestation mirroring with FIPS 140-3 and CC EAL4+ certification.
Every vault operates as a completely sealed ecosystem. Transfers are restricted exclusively to the vault’s associated source wallet or internal sub-vault movements. No API connections to exterior addresses. The smart contract enforces this at the address-check layer, no override, no admin bypass, no third-party whitelist.
Each primary vault supports up to 10 sub-vaults for heirs. If the primary authenticator is inactive for 12 months plus a 30-day grace period, a time-locked inheritance trigger executes automatically, distributing all assets, uniformly, to nominated sub-vaults. No lawyers, no courts, no human intervention. Immutable on-chain audit trail.
Not for traders. Not for speculators. For the family office that needs to protect multi-generational wealth across jurisdictions, asset classes, and decades.
No name, no address, no photograph is ever stored. Your identity is reduced to a cryptographic signature derived from your own biology, and nothing more.
Spouse access. Trustee oversight. Minor heir safeguards. Your digital estate passes to the people you choose, on the terms you set, secured by the one thing they cannot lose, DNA.
On-premise or private cloud. Swiss jurisdiction. No reliance on foreign cloud providers. Your family’s wealth never leaves your control.
A standard WGS or genotyping array is processed through the ArK-512P cascade inside a sealed confidential compute enclave. 512 non-coding SNP loci and mtDNA hypervariable regions are transformed through a multi-family cryptographic cascade, ultimately into your 15-hex GIS token, 100% deterministic and unique globally. No health data, no ancestry information, no PII. Ark-512PFV Algorithmic System is Calibrated on 3,202 human genomes, to a targeted depth of 30X using Illumina NovaSeq 6000 instruments
A dedicated smart contract Family Vault, is deployed on-chain, cryptographically bound to your GIS. The vault’s decryption key never lives in the host wallet’s memory, MPC environment, or HSM. It exists exclusively inside the confidential compute enclave, released only when a valid .VCF Genome Sequence File is presented anchored to your exclusive Family Vault Allocation.
Nominate up to 10 beneficiaries. Each heir completes GIS verification and receives their own sub-vault within your ecosystem. Inheritance percentages are fixed at nomination, immutable for the contract term. Spouse, trustee, and minor heir safeguards are built into the protocol and all are required to submit a valid .VCF Genome Sequence File for GIS and Sub-vault processing.
If the unthinkable happens, a period of no login occurs naturally, and after a consecutive 12 months from the last login, a 30-day notice period begins, and if no login occurs at the end of this notice period, following exactly 395 days, the main vault is liquidated by automatic distribution of all assets in the Main Vault, to nominated sub-vaults or in equal proportion unless Trustee Vault Slot or Spouse Vault slot is filled (Special Rules apply with some degree Main Vault Control). In any event, this process is fully automated. No human intervention is required.
No single party in this architecture can act alone. Aveum provides the Protocol and Architecture and holds no keys and no customer data. The enclave generates the GIS with zero operator access. The vault executes only after all upstream verifications are cryptographically confirmed.
The chain: Aveum protocol → Fireblocks or any WaaS / Direct embed → Institutional clients → HNW families. IBM Z/LinuxONE primary. Zero AWS. Zero PII. No single party acts alone.
GIS is a Genomic Identification System, which is a proprietary technology. Under strict genetic sequencing protocols the GIS genetic .vcf payloads are computed through a cryptographic multi-family cascade which extracts a unique identifier for every human (including twins). The GIS system was developed for forensic level identification programs for Governments and the technology is far superior to any identification protocol ever developed for a commercial purpose.
Closed-transfer architecture, defense in depth: In Locked Mode you maintain defense in depth. No API connections to exterior addresses at any Vault layer except the Main Source Wallet tied to the Main Family Vault (you). Every transfer is restricted to the vault’s associated source wallet or internal sub-vault movements. Smart contract enforces at the address-check layer. OPS API /authorize gate enforces at the service layer. Under normal operations (not Locked Mode), Sub-Vaults that are over 18 are required to have an associated Source Wallet; this is their offramp. They will also be required to log in to the Family Vault with GIS and can make up to 3 transfers in or out of the Vault in a 12-month period if not locked out. All Lock mode operations are open at Liquidation date. For Institutional customers, MPC TAP policy enforces at the custody layer. No override, no admin bypass, no third-party whitelist. IBM HPCS holds estate keys under Keep Your Own Key sovereignty, no Aveum, IBM, Fireblocks or Institutional operator can extract them.
AVEUM
Genomic Systems
Not a consumer product. A generational trust. We are accepting a limited number of family office engagements for Q3 2026. Inquire for architecture overview, pricing, and OEM licensing terms. All deployments are on Ethereum mainnet through institutional MPC custody (Fireblocks or other approved providers).
Over $400 billion in digital assets are permanently inaccessible. 20% of all Bitcoin is lost forever not because the technology was breached, but because keys were forgotten, hardware failed, and owners passed away without a succession plan. The blockchain has never been hacked. People have.
Zero personal data flows through our infrastructure. VANs are opaque identifiers. GIS anchors are cryptographic hashes. The institution manages their own KYC.
Vault hierarchy, GIS binding, inheritance rules, closed-transfer enforcement, all on-chain. SDK and APIs are convenience layers over contract state.
No single party can act alone. Aveum provides Ark-512P (protocol, wallet architecture and compute layers) it holds no keys and no customer data. IBM HPCS holds estate keys under KYOK. Fireblocks executes only after upstream verifications confirm.