Polivor
Sign in Sign up
Authority for autonomous money

Know who authorised every payment.

Polivor is the European authority layer for agents that pay. Before each payment, the agent asks Polivor for authority. We check the mandate, policy and limits, answer allow, deny or approval needed, and sign a short-lived authorisation bound to that exact action.

Request sandbox access See how it works

Polivor never holds, moves or initiates funds.

Decision log
ACME Holdings Treasury Agent v3.7 €100,000 per transaction · €500,000 per day
Active
  • Treasury Agent v3.7ev_8f2a · mandate v4
    €75,000Allow
  • AP Agent v2.1ev_91c7 · above approval threshold
    €240,000Require approval
  • AP Agent v2.1ev_a3e0 · outside mandate scope
    €18,400Deny

Sample data for illustration.

How it works

One decision per action. Your payment hub or ERP stays in charge of the money.

  1. 01

    Delegate

    A finance owner records a Financial Mandate: accounts, currencies, countries, limits per payment, day and month, an approval threshold and a validity window. It is versioned and revocable.

  2. 02

    Ask

    For each payment the agent calls POST /v1/authorize. Polivor checks the agent version, mandate, policies, beneficiary allowlist and budgets. No AI model decides.

  3. 03

    Enforce and prove

    The payment hub verifies the signed authorisation before releasing funds, then reports what was executed. Every check lands in a signed, hash-chained evidence record that can be verified offline.

Evidence

Evidence by default.

Every decision produces evidence.

Built on a few hard rules

The boundaries that make delegation to an agent safe to reason about.

Never touches funds

Polivor decides, signs and records. Your own systems initiate and execute payments.

Deterministic

The same request under the same mandate and policy versions gives the same answer, every time.

The agent is not trusted

Polivor computes beneficiary matches, budgets and agent versions. Signals from the agent can only tighten a decision.

Evidence you can check

Records are signed, chained and exportable. An auditor can verify them without trusting us.

Short-lived, single action

Each authorisation expires in five minutes and is bound to the exact payment. Change the amount or the IBAN and it no longer verifies.

Hosted in the EU

Runtime, data and signing keys run in Germany.

Early sandbox

We are onboarding design partners onto a sandbox that uses synthetic data only. If you run finance, treasury or payments and are piloting agents, we would like to hear from you.

Request sandbox access