Business owners want agentic AI for claims, underwriting, clinicals, fraud, customer ops. Security and compliance teams say no until they can trace which agent did what.
OAuth and PKI weren't built for autonomous agents. Logs don't prove "which agent, on whose behalf, with what evidence." Regulators are tightening through 2026.
EU AI Act, India DPDPA, HIPAA, FinCEN AML rules, ISO 42001. All require provable AI provenance. None are satisfied by token-bearer patterns.
Spawn unlimited cryptographic identities: one per agent, one per workflow, one per business unit. The VM runs in your VPC, your cloud account, your control. HexaEight infrastructure never sees your data.
No shared keys. No rotation theatre. No coordination across teams. The identity is bound to the machine it runs on, with the same cryptographic primitive across your entire fleet.
The same HexaEight server code runs on a Marketplace VM inside your own Azure subscription and VPC. For data-residency, sovereignty, or customer-data-center requirements, the identity layer sits inside your compliance boundary — deployable within your own FedRAMP / Azure Gov boundary under your authorization, not a shared multi-tenant service.
SOC 2 Type II, ISO 27001 / 27017 / 27018, HIPAA BAA, FedRAMP (Azure Gov) — inherited from Azure at the infrastructure layer. Our own SOC 2 is on the roadmap, not yet issued. Full enterprise pack available on request.
The HexaEight platform runs on Microsoft Azure. Infrastructure controls inherit directly from Azure's attestation portfolio.
The encryption layer uses only NIST- and IETF-standard building blocks — no home-rolled ciphers in the data path.
For data-residency, sovereignty, or customer-data-center requirements, HexaEight deploys as a dedicated, single-tenant instance inside your own Azure subscription and VPC — the identity layer sits within your compliance boundary rather than a shared multi-tenant service, so it is deployable inside your FedRAMP / Azure Gov boundary under your authorization (the ATO is yours, not ours). Deployment models and scoping are covered in the enterprise pack.
Flat per-core pricing, no per-seat or per-MAU billing. Azure Marketplace VM available today, AWS and GCP coming.
One Marketplace VM, unlimited identities under your own domain. Support & SLA included as a Microsoft ISV partner.
Multi-user authentication by agents on your own machines — any registered user connects, no per-MAU or per-seat billing.
Offline-verifiable signing for regulator- and court-ready audit trails. Self-attestation free; registry attestation in development.
Give each employee a Personal license. Every agent is owner-locked to that employee's own HexaEight email — no one else, not even other staff, can log in, share, or impersonate it. A built-in security control, not just a price tier. Business support covers these personal agents too.