The Trust Layer for Secure Apps and Organizations

The backbone and authorization server behind the SDK. Handles device enrollment, key distribution, and enterprise lifecycle management. Built on globally available, internet-scale, edge infrastructure. Serverless architecture ensures seamless scalability and fast response times globally.

Ships as part of the JEM SDK. Uses platform biometrics (Face ID, Touch ID, Android biometrics) and the device secure enclave. No additional hardware required. Provides Level 1 biometric-gated security out of the box.

AirKey is a separate physical device with its own biometric-gated crypto enclave, creating an independent trust boundary from the host device. That reduces host-compromise blast radius, supports policy step-up for high-risk actions through the same SDK API, and gives teams a clearer assurance story for security and compliance reviews. It also adds explicit device lifecycle control: enroll, assign, and revoke keys centrally.