Perpetual guard.Your rules, enforced.
A policy engine operating inside a Trusted Execution Environment — developed with Scytalex, the world leader in TEE policy engine development. Your governance rules, sealed in silicon and enforced every time.
A policy engine. Sealed in silicon.
SENTINEL is a policy engine operating inside a Trusted Execution Environment (TEE) — a hardware-isolated enclave where code and data are protected even from the operating system that hosts them. Developed with Scytalex, the world leader in TEE policy engine development, the Vaulnox SENTINEL is a set of governance rules that resides in a fully encrypted environment.
SENTINEL is the second layer of Vaulnox security. Asset Protection MPC protects the cryptography of your keys. SENTINEL protects the behaviorof your wallet — what transactions are allowed, by whom, under what conditions, and at what time. If a request or transaction would violate one of your governance rules, SENTINEL blocks the event before any signature is ever computed.
MPC protects the key. SENTINEL protects the rules. Together they form a complete asset protection framework.
Configured in private. Enforced in force.
When you first set up a vault with Vaulnox, your rules travel a dedicated encrypted path from your device into SENTINEL — and stay there.
Configure in the App
Your settings encrypted locally
You configure SENTINEL in the Vaulnox app. Every value is encrypted on your device before it leaves.
Encrypted Tunnel
Straight into the TEE
Your settings travel a direct cryptographic channel into the Trusted Execution Environment. Vaulnox operators are not on the path.
SENTINEL on Guard
Every request, every event
SENTINEL compiles your rules inside the TEE and remains on perpetual guard — evaluating transactions, verifying permissions, validating life events.
What we operate on your behalf.
SENTINEL is the engine. These are the named services we run on it, each governed by its own published service schedule.
Inheritance Protocol
You name who succeeds to your Vault, in the order you choose. On a verified Medical Event, SENTINEL hands them control — without exposing a private key.
EliteGuardian™
You and one guardian Approver approve every matching transfer together. Nothing clears on a single signature.
EliteFailsafe™
You and either of two Approvers. The same dual consent as Guardian, without a single point of unavailability.
EliteVADR™
Your AI agent gets its own limited key and trades inside an envelope you set. Narrowing and freezing are instant, and always free.
EliteVirtual Asset Protection Trust™
Asset-protection governance applied to your own wallet — approval thresholds, duress lockdown and court-ready attestations, without a foreign trustee.
A few of the levers SENTINEL can pull.
SENTINEL evaluates every transaction and life event against the rules you configured in the app. A handful of the most common:
Transaction Limits
Caps on single transaction size, daily totals, weekly or monthly spend — per wallet, per asset, or across the vault. Larger amounts escalate to additional approvers.
Time-of-Day & Velocity
Business-hours windows, weekend holds, cooling-off periods between transactions, and velocity controls that slow rapid outflows to a deliberate pace.
Address Whitelists
Pre-approved counterparties, exchange deposit addresses, and known wallets. Unknown destinations require explicit review, co-signer approval, or a mandatory delay.
Multi-Party Approval
Co-signer requirements and threshold approvals — for example, any transaction over a set amount requires an additional Approver, a Trusted Contact, or both to co-sign.
Geofencing & Jurisdiction
Permitted countries or regions for transaction initiation. Attempts from anywhere else are blocked or escalated for human verification.
Asset Restrictions
Rules that differ by asset class — stricter thresholds for Bitcoin or Ethereum, different approvers for stablecoins, blocked categories entirely if you choose.
Inheritance & Dormancy
Triggers for verified death or disability, and dormancy timers that initiate heir transition if the account has not been accessed for a period you define.
Key Share Restoration
Conditions under which SENTINEL may validate a lost device event, confirm identity, and restore a key share — controlled entirely by policy, not by Vaulnox staff.
Wallet inheritance. Built into the cryptography.
Vaulnox is the first wallet service provider to offer a wallet inheritance feature built directly on a 2-of-3 Asset Protection MPC architecture. Under circumstances you define — death, disability, or simply failing to log in for a sustained period — SENTINEL initiates a verification process and transitions wallet ownership to the heir you designated.
No probate court. No seed phrase hidden in a safe deposit box whose existence dies with you. No exchange account that gets frozen when the platform receives a death certificate. The entire transition is carried out by SENTINEL inside the TEE, on rules you set years in advance, with heirs you named and never disclosed to Vaulnox.
Your wishes, compiled into cryptography, waiting patiently to execute.
Roles, limits, and approvals. Exactly as your business runs.
SENTINEL can be configured to require permissions from different parties depending on the amount and the asset involved. A business holding digital assets rarely needs one person with total access — and SENTINEL lets you model your real internal controls.
Initiator
Initiates and submits transaction requests on behalf of the account.
Approver
Approves or rejects transactions under your thresholds. Quorums and tiered approvers can be stacked for larger amounts.
Viewer
Read-only access to shared vaults and wallets — visibility without authority.
Auditor
Time-bounded audit access with evidence export for independent verification of transactions.
Every role is cryptographically enforced. An Initiator cannot sign alone. A single Approver cannot bypass a quorum. A Viewer cannot move funds. SENTINEL doesn’t rely on an honor system — the rules are the system.
Protectors and lockdowns. No court can compel the key.
Vaulnox is the first service provider to offer the Vaulnox Virtual Asset Protection Trust™. Built on SENTINEL’s highly configurable permissions system, a wallet holder can designate one or more protectors to review transactions submitted by the client, and approve or deny those transactions.
Where a VAPT is configured, and you sense a creditor threat or civil court action, the arrangement can place the wallet in a lockdown that prevents all transactions for a designated period. With SENTINEL guarding wallet assets, no creditor or civil court process can compel the transaction. Asset Protection MPC key shares remain fully encrypted, and Vaulnox has no ability to decrypt them.
A subpoena can demand a signature. It cannot produce one.
Business decisions. Algorithmically effected.
SENTINEL even provides governance for business entities. Clients who want to protect real-world assets — such as real estate — can order a Wyoming DAO LLC through Vaulnox. Membership remains confidential and out of the public eye. Management decisions are effected algorithmically, with members or designated parties approving or declining requests through SENTINEL.
When a contract or other business action is approved, SENTINEL produces an attestation report that third parties can verify on the Vaulnox website — proof the decision was properly authorized, without revealing who authorized it. The identities of members and decision makers remain fully encrypted on Vaulnox servers using advanced quantum-proof encryption.
No person — a creditor, civil court, divorcing spouse, or hacker — can access the SENTINEL.
Lose your phone. Keep your assets.
If you lose your phone or other device, SENTINEL can validate the event, confirm your identity, and restore a lost key share under the policy conditions you configured. The full MPC scheme continues without interruption — no seed phrase to dig out of a safe, no chain-of-custody nightmare, no frantic call to a support line.
Most other wallet service providers — including most of the major crypto exchanges — do not offer this capability. And cold wallets cannot compare: a lost cold wallet is a lost wallet. With SENTINEL, recovery is a policy outcome, not a miracle.
Included at every level. Expanded at Elite.
Vaulnox operates a number of SENTINEL protections for clients at the Core and Premium service levels. We do more at the Elite level — administering advanced multi-party permissions, protector-based Virtual Asset Protection Trusts™, and DAO LLC governance.
See the Pricing page for what we do at each level.