01 Architecture
Category and architecture
Confirm AffixIO is verification infrastructure, not IAM, not a CRM, not a data lake. Review stack placement, control plane separation, and the request lifecycle.
Technical buyer path · 15 minutes
Evaluate AffixIO
AffixIO is verification infrastructure: a stateless API layer that returns signed allow or deny for payments, AI agents, QR gates, and eligibility workflows. This path routes engineering leaders, security reviewers, and procurement through architecture, trust review, live sandbox, OpenAPI 1.7, sector use cases, and pilot materials. Updated 2 August 2026.
VERIFICATION INFRASTRUCTURE
ZERO-KNOWLEDGE AUDIT
POST-QUANTUM ATTESTATION
STATELESS BOUNDARY
OPENAPI REST API
Evaluation steps
02 Trust
Security and procurement
Review encryption, access control, data minimisation at the verifier boundary, incident response, and responsible disclosure before you share integration plans.
03 Sectors
Sector relevance
Match your boundary: payments, government programmes, access control, or AI agent gates. Each sector links to a field report you can reproduce.
04 Hands-on
Hands-on validation
Prove a yes/no Noir circuit, verify or consume at a gate, inspect spent digests, and check Merkle inclusion. No mock data in the public sandbox. OpenAPI contract is 1.7.0.
05 Build
Integration planning
Copy hub templates into your stack, map your first doorway gate, and keep systems of record where they are. AffixIO only receives the decision outcome you choose to prove.
06 Pilot
Pilot or procurement
Request a security questionnaire, DPA, or partnership track. We respond to genuine technical enquiries within two business days.
Sector evaluation paths
Pick the boundary closest to your stack. Each path includes a use case page, a reproducible field report, and a sandbox flow.
AI agents and agentic payments
Gate autonomous actions, tool calls, and delegated spend with signed allow or deny before execution. Hub: sector guide, field notes, and comparison with IAM.
Ticketing and venue accessOffline QR verification, spent-proof logic, and post-quantum attestation for gates. Field report: live ticket verification sandbox walkthrough.
Government and public sectorProgramme eligibility with replayable audit evidence and minimal verifier retention. Field report: UK government sandbox walkthrough.
Payments and bankingTransaction eligibility, merchant gates, and AML/KYC augmentation without a standing profile cache. Field report: agentic payments AML/KYC.
Age verification and regulated retailEligibility checks with zero-knowledge paths and no PII hoarding at the verifier. Field report: privacy-preserving age verification.
Post-quantum and long-lived proofsML-DSA attestation, harvest-now-decrypt-later risk, and latency on live endpoints. Field note: PQC attestation guide.
Recommended reading (start here)
Three papers cover architecture, live reproduction, and partnership integration. The full library has 39 technical papers.
WP: Merkle tree audit architecture
Reference design for append-only audit trees, inclusion proofs, and verifier-independent replay.
WP-036: Live PQC API sandboxReproducible walkthrough of ML-DSA paths, ZK circuits, latency tables, and press-ready checklist.
WP-039: Scan-to-prove partnershipsPartnership eligibility verification without exporting source records. Integration checklist included.
Evaluation FAQ
How is AffixIO different from an identity provider?
Identity providers establish who someone is and often maintain sessions. AffixIO evaluates a policy question per request and returns allow or deny with signed proof. It sits beneath IAM as verification infrastructure.
What should our security team review first?
Start with the Trust Center, then the full Security documentation. Request the procurement pack for DPA terms and sub-processor transparency.
Can we test without a sales call?
Yes. Use the live sandbox, copy hub templates into your app, read the SDK docs, and download the self-hosted demo. API keys for extended testing are available via the customer hub or Contact.
Where is the OpenAPI specification?
Published at /openapi.json (contract 1.7.0). Production base URL is https://api.affix-io.com. Release notes live with the SDK docs and OpenAPI contract.
What is the operational status of the API?
See the status page for current health, or call GET /api/health on the production API.
Discovery
Continue your review
Compliance and deadlines
Integrations and portals
SDKs and tooling · Verify widgets · Issuer portal · Verifier portal