Local boundary intact

Your account coordinates access. It never holds the key.

Boundveil keeps vault decryption on trusted devices while the control plane handles plans, device relationships, and exact-action approvals.

Vault secrets remain device-bound

Agent authority is explicit and scoped

Sensitive actions leave redacted receipts

Private beta

Build a safer agent boundary.

Create the account that will manage downloads, plans, devices, and approvals—not your vault decryption key.

By continuing, you acknowledge this is a private development beta.

Already have an account? Sign in

Account access manages plans and devices. It never replaces your local vault password.