How it works

A secure transaction process

The Porto transaction flow is designed to prove with certainty that a given transaction reflects an organization’s intent. Once all 3 steps are complete, Porto processes the transaction within minutes.

iOS biometrics
Sensitive operations require the user’s biometric approval using Face ID.
Multi-user approval
Every transaction requires approval from at least two members of the organization, using authentication through authorized devices.
Hardware-enforced logic
HSMs will process the transaction once quorum approval is met.

See the big picture with the web dashboard

Keep eyes on account activity

The Porto web dashboard provides a master view of account activity.

Filter to view what matters

View account activity according to defined parameters.

Export data for bookkeeping and analysis

Export transaction data to track performance.

Easily accessible and secure

Built on the mobile cryptoprocessor

The iPhone is the world’s most secure personal computer, and Porto harnesses its advanced security features.

Always at hand

Submit a transaction for review or endorse a transaction—no shards or key ceremonies required and no risk of losing anything important.

Designed for usability

Review and endorse transactions in under a minute; Porto’s iOS app makes crypto for institutions easy and efficient.

Multi-user approval

Quorums

All sensitive operations, such as withdrawing assets or changing account settings, require approval from multiple members of an organization.

Unique user keys

Each user’s identity is tied to a unique and unforgeable cryptographic key, created and stored in the iOS Secure Enclave so only authorized devices can access the account.

Biometric authentication

Users can only unlock the app using Face ID or fingerprint.

Authentication via hardware security modules

Once a transaction is fully approved by the organization’s team, it will advance to a specialized hardware system to be processed within minutes.

Hardware security modules

Private keys are generated on air-gapped HSMs. The system signs transactions without ever exposing private keys.

Hardware-enforced logic

Custom logic verifies that each operation has a valid quorum of approvals. Transactions can process only if approved.approved.

High-security data centers

Porto HSMs are housed in protected data centers with 24/7 physical security. Visitors must pass through man traps and biometric authentication to enter and exit the facilities. No individual can manually override a given HSM.