Security approach

How Evoke protects the structures you oversee.

Written for boards and fiduciaries carrying out due diligence. Each section stands on its own, so it can be forwarded as it is.

Request our security pack

Security approach

How Evoke protects the structures you oversee.

Written for boards and fiduciaries carrying out due diligence. Each section stands on its own, so it can be forwarded as it is.

Request our security pack

On this page

1. Our model

2. Key management

3. If Evoke is unavailable

4. Data and privacy

5. Access controls

6. Security pack

Our model

Lens is read-only oversight. It reads on-chain wallets and multisigs, connects to custodians and exchanges, and links bank accounts read-only. It can view balances only. It cannot move funds. Lens works with the custody a structure already has.

Key management

This section applies only to structures that use our optional co-custody service. Lens on its own holds no keys.

Key

Held by

Used for

Key 1

The fiduciary

Day-to-day signing

Key 2

The client, or their appointed representative

Day-to-day signing

Key 3

Evoke

Recovery only, with one other key holder

2-of-3 multisig

Any two of the three keys are needed to move funds. Evoke holds one, so it can never act alone.

Open standard

A standard Bitcoin multisig that works with any compatible wallet. No proprietary format, and no dependency on Evoke software to spend.

Cannot act alone

Evoke’s key cannot move funds on its own.

If Evoke is unavailable

Funds stay spendable. Lens is read-only, so assets held with your existing providers are never affected. For co-custody structures, if Evoke is temporarily unavailable, or stops operating, the fiduciary and the client still hold two of the three keys. That is enough to move funds.

Step 1

Open the multisig in any compatible wallet

Step 2

Sign with the fiduciary’s and the client’s keys

Step 3

Move or spend funds as normal, without Evoke

Lens is read-only, so an interruption to Lens never affects the assets themselves. Signed schedules can be exported and kept in your own records.

Data and privacy

Read-only connections.

Lens asks for view access only. We never request permission to move funds.

Minimal data.

We collect only what is needed to show holdings and produce schedules.

Access controls

Least-privilege access.

Staff have access only to the systems their role requires.

Multi-factor authentication.

Required for staff and for the people you invite.

Role-based permissions.

Within your organisation, you decide who can view, prepare and sign off schedules.

Logged activity.

Access and sign-off events are recorded in the audit trail.

Request our security pack

Detailed documentation of the controls on this page, prepared for due diligence. We’ll send it to you or to the board.

Request our security pack

Or book a demo →