The Power Within

|
SCROLL
What We Built

A digital safe deposit box for the assets that define your family’s future.

The Family vault is cryptographically isolated inside the host platform’s MPC infrastructure. Even if the main wallet is fully compromised, the vault stays sealed. Non-custodial. Inheritable. Operator-blind.

01

DNA Derived Biometric Identity

Every person already carries a naturally unique biological identifier. Aveum extracts a deterministic cryptographic verification key from that identifier, creating a permanent, forensic-grade trust anchor without relying on names, addresses, photographs, passwords, or stored genomic data.

Aveum has developed the ArK-512P which is a deterministic cryptographic kernel that transforms constrained genomic signals into compact, non-reversible identifiers through a multi-algorithm cascade. The system combines SHA-256, SHA-512, and BLAKE2b in a patent-compliant architecture that maintains 100% determinism while providing quantum-resistant security through domain separation and key derivation functions. Your DNA is not stored, it is computed. It cannot be stolen, phished, replayed, or lost.

Split-Key Verification. The kernel produces a 256-bit canonical key K. The user receives only a 15-character slice (the GIS, 60 bits). The remaining 196 bits (K-tail) are held exclusively inside the trusted compute enclave. On-chain, only keccak256(K || nonce) is stored, a full 256-bit hash that is computationally impossible to brute-force. Neither the user alone, the enclave alone, nor the public ledger alone can reconstruct the full key. Verification requires all three pieces to align in the same place at the same time.

02

Confidential compute infrastructure.

Genomic Identification Signature (GIS) generation runs exclusively inside IBM Trusted Compute enclaves, IBM Z, LinuxONE, IBM Key Protect for IBM Cloud. PostgreSQL 15, Python 3.12, QEMU s390x emulation. GIS derivation under 2ms, 15,675 ops/sec throughput validated (8 cores). ArK-512P kernel on s390x hardware with Secure Execution. HPCS working with HOT/COLD tier databases deployed, Crypto Express. Components: IBM Confidential Computing (8 vCPU, 32GB), HPCS (standard), PostgreSQL. FIPS 140-2 Level 4, 10,000+ ops/sec per partition. 256 GB DDR5 ECC Expandable to 1TB, always-on encryption, no disk, no network, no operator access. The kernel binary and all cryptographic logic are sealed. Provides parallel attestation mirroring with FIPS 140-3 and CC EAL4+ certification.

03

Closed transfer architecture.

Every vault operates as a completely sealed ecosystem. Transfers are restricted exclusively to the vault’s associated source wallet or internal sub-vault movements. No API connections to exterior addresses. The smart contract enforces this at the address-check layer, no override, no admin bypass, no third-party whitelist.

04

Generational inheritance by default.

Each primary vault supports up to 10 sub-vaults for heirs. If the primary authenticator is inactive for 12 months plus a 30-day grace period, a time-locked inheritance trigger executes automatically, distributing all assets, uniformly, to nominated sub-vaults. No lawyers, no courts, no human intervention. Immutable on-chain audit trail.

Built for families.

Not for traders. Not for speculators. For the family office that needs to protect multi-generational wealth across jurisdictions, asset classes, and decades.

Privacy as a birthright.

No name, no address, no photograph is ever stored. Your identity is reduced to a cryptographic signature derived from your own biology, and nothing more.

Legacy without compromise.

Spouse access. Trustee oversight. Minor heir safeguards. Your digital estate passes to the people you choose, on the terms you set, secured by the one thing they cannot lose, DNA.

Sovereign infrastructure.

On-premise or private cloud. Swiss jurisdiction. No reliance on foreign cloud providers. Your family’s wealth never leaves your control.

How It Works

Set up once. Secure for life.

Genomic identity verification.

A standard WGS or genotyping array is processed through the ArK-512P cascade inside a sealed confidential compute enclave. 512 non-coding SNP loci and mtDNA hypervariable regions are transformed through a multi-family cryptographic cascade, ultimately into your 15-hex GIS token, 100% deterministic and unique globally. No health data, no ancestry information, no PII. Ark-512PFV Algorithmic System is Calibrated on 3,202 human genomes, to a targeted depth of 30X using Illumina NovaSeq 6000 instruments

01

Vault deployment.

A dedicated smart contract Family Vault, is deployed on-chain, cryptographically bound to your GIS. The vault’s decryption key never lives in the host wallet’s memory, MPC environment, or HSM. It exists exclusively inside the confidential compute enclave, released only when a valid .VCF Genome Sequence File is presented anchored to your exclusive Family Vault Allocation.

02

Family ecosystem setup.

Nominate up to 10 beneficiaries. Each heir completes GIS verification and receives their own sub-vault within your ecosystem. Inheritance percentages are fixed at nomination, immutable for the contract term. Spouse, trustee, and minor heir safeguards are built into the protocol and all are required to submit a valid .VCF Genome Sequence File for GIS and Sub-vault processing.

03

Generational continuity.

Your vault remains accessible as long as you authenticate within a 12-month window. If the unthinkable happens, a 30-day grace period begins, followed by automatic distribution of all assets to your nominated sub-vaults. Fully automated. No human intervention. An immutable on-chain record of every event.

04
~1 KB
Identity Size
< 2 ms
Latency
2⁶⁰
Collision Space
Composite 2⁻³⁴⁴
Quantum Security

No single party in this architecture can act alone. Aveum provides the Protocol and Architecture and holds no keys and no customer data. The enclave generates the GIS with zero operator access. The vault executes only after all upstream verifications are cryptographically confirmed.

Architecture

Ecosystem Architecture

The chain: Aveum protocol → Fireblocks or any WaaS / Direct embed → Institutional clients → HNW families. IBM Z/LinuxONE primary. Zero AWS. Zero PII. No single party acts alone.

Three-Layer Fortress

IBM Z / LinuxONE, primary compute
  • L1 Kernel (C): ACP → MCP → SHI → GDSH pipeline. Produces 256-bit canonical key K, of which only the 15-char GIS (60 bits) is shown to the user. The K-tail (196 bits) remains in the enclave. Cryptographic core sealed in SEL enclave. Runtime: IBM LinuxONE/Z SEL (CCRT).
  • L2 Engine (Python): VCF ingest, payload normalization, canonicalization, deterministic GIS + K derivation. Stores GIS and safety_hash (K) in registry. Sealed with kernel inside the SEL enclave. No operator access.
  • L3 OPS (Python / Flask): Portal, registry, bridge, split-key verification, security modes. Reconstructs K from user GIS + enclave K-tail. On-chain stores keccak256(K || nonce) only. Runtime: LinuxONE private VPC / OPS API.

OEM Integration Architecture

Ethereum mainnet. Fireblocks OEM or direct institutional integration.
  • Path A, Fireblocks OEM (primary): Protocol embedded as optional module for institutions on the Fireblocks WaaS platform. Aveum supplies smart contracts, GIS kernel, SDK, and reference adapters. All vaults deploy on Ethereum mainnet. The issuing institution is granted protocol access free of charge. All client registrations, GIS derivations, and vault configurations are handled at the institution level for Family Vault adoptions.
  • Path B, Direct Institution (secondary): For institutions not on Fireblocks. Direct integration kit with Ethereum mainnet smart contracts, institutional gateway, and reference adapters. Same institution-level registration model. The institution manages client onboarding, GIS registration, and vault provisioning.
  • Institution types: Family offices, private banks, trust companies, wealth managers, and custody providers operating on Ethereum mainnet with institutional-grade MPC infrastructure.
  • Paywall: Protocol license fees are charged at the client level upon GIS issuance. The issuing institution pays zero platform access fees. Aveum collects the license fee in ETH from the institution's treasury wallet when the client's GIS is activated on Ethereum mainnet.
  • Aveum specifies only, holds no keys, no customer data, no PII. Contracts are source of truth. The institution is the custody layer. Aveum is the protocol layer.

Closed-Transfer Vaults

Family Main + up to 10 heir sub-vaults are built into every Main Vault Owner, Source Wallet
  • Special Note: Source vault bound to GIS identity. Maximum 3 accesses per year, contract-enforced. Internal transfers to any sub-vault within same family ecosystem.
  • Each heir completes GIS verification for their own sub-vault. Inheritance percentages fixed at nomination, immutable. 30-day window from activation to nominate.
  • Inheritance trigger: 365 days inactive + 30-day grace → smart contract auto-distributes all assets by denomination to all active sub-vaults. Fully automated, zero human intervention.

Closed-transfer architecture, defense in depth: No API connections to exterior addresses at any Vault layer except the Main Source Wallet. Every transfer is restricted to the vault’s associated source wallet or internal sub-vault movements. Smart contract enforces at the address-check layer. OPS API /authorize gate enforces at the service layer. For Institutional customers, Fireblocks TAP policy enforces at the MPC layer. No override, no admin bypass, no third-party whitelist. IBM HPCS holds estate keys under Keep Your Own Key sovereignty, no Aveum, IBM, Fireblocks or Institutional operator can extract them.

End-to-End Platform Architecture

AVEUM
Genomic Systems

Built on trust.
Proven by mathematics.

Request Access

Institutional custody infrastructure,
reimagined for the family office.

Not a consumer product. A generational trust. We are accepting a limited number of family office engagements for Q3 2026. Inquire for architecture overview, pricing, and OEM licensing terms. All deployments are on Ethereum mainnet through institutional Fireblocks MPC custody.

Switzerland
Global HQ · Crypto Valley
The Problem We Solve

Built on trust. Proven by mathematics.

Over $400 billion in digital assets are permanently inaccessible. 20% of all Bitcoin is lost forever not because the technology was breached, but because keys were forgotten, hardware failed, and owners passed away without a succession plan. The blockchain has never been hacked. People have.

$400B+
Crypto permanently lost
20%
Bitcoin inaccessible forever
3.7M
BTC lost to forgotten keys
0%
Recovery rate without the key

No PII, ever.

Zero personal data flows through our infrastructure. VANs are opaque identifiers. GIS anchors are cryptographic hashes. The institution manages their own KYC.

Contracts are truth.

Vault hierarchy, GIS binding, inheritance rules, closed-transfer enforcement, all on-chain. SDK and APIs are convenience layers over contract state.

Operator-blind.

No single party can act alone. Aveum provides Ark-512P (protocol, wallet architecture and compute layers) it holds no keys and no customer data. IBM HPCS holds estate keys under KYOK. Fireblocks executes only after upstream verifications confirm.