AffixIO procurement summary
At a glance
- Product
- Stateless verification API with signed allow or deny
- Data role
- Processor on enterprise contracts
- PII at verifier
- None by default
- Signatures
- ML-DSA-65 post-quantum (NIST FIPS 204)
- Audit
- Merkle tree with public inclusion proofs
AffixIO procurement pack is a printable vendor summary for security, legal, and programme teams evaluating verification infrastructure. It covers data role, security controls, and compliance alignment without requiring a sales call.
Vendor summary
Stateless REST API returning signed allow or deny for eligibility, AI agent gates, payments, and offline QR verification. OpenAPI 3.1. Production: api.affix-io.com
Data role
Processor on enterprise contracts. No standing PII at verifier by default. DPA available on request.
Security highlights
- TLS 1.2+, encryption at rest, scoped API keys, MFA on admin
- Noir zero-knowledge circuits (open-source Barretenberg stack)
- Merkle audit tree with inclusion proofs
- ML-DSA-65 post-quantum attestation paths (NIST FIPS 204)
Compliance alignment
GDPR/UK GDPR processor terms; EU AI Act audit evidence; PCI scope reduction (no cardholder data by default). SOC 2 / ISO mappings available under NDA.
Sub-processors
Categories published at affix-io.com/trust/sub-processors. Named list under DPA.
Contact
affix-io.com/contact · Subject: Procurement · Patent pending GB2510622.0