(your) agents do the work. You hold the pen.
Signed lets your AI agents pay inside a mandate you sign, holds everything else for a human signature, and keeps proof of every decision.
Signed never holds or moves your money. Your bank executes every payment.
Every agent payment answers to a signature.
Give each AI agent its own key and a mandate you sign once: which payees, how much, until when. Inside it, the agent works on its own. No shared logins. No borrowed passwords.
Anything outside the mandate waits for the right approvers to sign the exact payee, account and amount on their own phones. Change one detail and every signature resets.
Every mandate, signature and change lands in a tamper-evident record you can hand to an auditor, your bank or your insurer.
Mandates
Mandate · AP agent
- Payees
- Approved vendor list (214)
- Per payment
- Up to $25,000
- Runs
- Tuesdays and Fridays
- Until
- Ended by finance
Signed by Jane Doe, CFO · enrolled phone F02
In the words of the people who move money.
The problem Signed solves, as finance and payments leaders describe it.
“Biggest concern is a convincing fake request slipping through and sending company money to the wrong place.”
CFO of a Fortune 500 company1Certos survey of finance leaders, 2026 “The payment approver should review the actual beneficiary and amount. Changes after approval should require reapproval. No exceptions.”
OnlyCFO2A working CFO’s newsletter, September 2026 “As autonomy increases, trust cannot be implied. It must be proven.”
Pablo Fourez3Chief Digital Officer, Mastercard
Quoted from public sources. The people and companies quoted do not endorse Signed.
Stop lending AI your password. Start giving it a mandate.
Big banks are blocking outside AI agents that sign in with customer passwords,4,5 and JPMorgan’s chief executive has advised customers who authorize outside agents to understand the potential shift in liability.4 Signed gives each agent its own key and a mandate, so it never needs your password.
A key of its own
Each agent’s requests carry its own key. It can prepare a payment. It can never approve one.
Free to work inside the lines
Routine runs to known payees under your limits go through on their own. Your approvers only see what needs them.
Closed by default
Our own data center backs up the cloud, so a cloud outage doesn’t take Signed down. If both are ever down, the gate is designed to stay closed. Downtime doesn’t approve a payment.
Finance writes the rules. Signed enforces them.
Two to release
Payments over your threshold need two signatures. No one person can release a large payment alone.
The real executive, on the real phone
When a request names the CFO, the CFO signs on their own phone. A deepfake can copy a voice. It can’t sign from that phone.
New bank details, extra scrutiny
A new payee or a changed account adds an approver and a waiting period, so someone can verify the change outside email before money moves.
Never stuck on one person
Name a pool, like any two of four, so payments keep moving when an approver is out.
Fraud got an AI upgrade. Most defenses didn’t.
- $3B+
- reported lost to business email compromise in 20256
- 74%
- of organizations surveyed were affected by business email compromise in 20257
- 81%
- of finance leaders surveyed saw a fraud attempt that involved, or appeared to involve, AI in the past year1
- 1 in 2
- finance leaders surveyed feel confident they’d catch an AI-enabled fraud attempt before money leaves1
A password proves who logged in. A signature proves who approved.
Keys that never leave the phone
Every approver’s signing key is bound to one enrolled phone and stays there. It doesn’t sync to a cloud account.
Built never to receive biometrics
The phone checks a face, fingerprint or PIN. Signed is designed to receive the signature, never the biometric.
Know exactly what Signed stops.
A gate is only as useful as your understanding of it. Here is where ours holds and where it doesn’t.
A fake request from “the CFO”
Stopped
When your rules require the CFO to sign.
A stolen approver password
Stopped
The attacker doesn’t have the phone.
A vendor’s bank details changed by email
Slowed
Not stopped. An extra approver and a waiting period apply.
Every required approver is fooled
Not stopped
The record names everyone who signed.
One signature layer. Two ways in.
Signed for Enterprise
For finance teams
Your AI agents prepare payment runs in the accounting system. Signed adds mandates, signatures and proof to every run.
Explore EnterpriseSigned for Consumers
For banks, apps and merchants
Your customers let AI agents shop. Signed lets them sign a mandate once on their phone and decide on anything outside it.
Explore ConsumerUnder both
- A key on every agent and every phone
- Payments go through only with a matching key and every required signature
- Automatic inside the mandate, one tap outside it
- A tamper-evident record of every decision