Skip to main content

Security · Principles

Principles the account enforces

Three conditions every operation must meet before it runs — held on-chain, not by our application.

Read review

Principles

Held by the account, not by us

Scroll each condition into focus. Nothing here depends on our application staying online.

  1. You own the keys

    Particle CS orchestrates operations; it does not custody assets or key material. There is no Particle CS-held key that can move your funds.

    Particle CS never holds your keys.

  2. Nothing is allowed until it is granted

    Roles, functions, and call targets that were not permitted are refused. It is an allowlist the contract enforces, not a rule operators are asked to remember.

    Each role receives only the actions it needs, so one compromised wallet is not unrestricted control.

  3. The rules outlive our software

    Policy is enforced by the contract, not by our application. If our service were compromised or unavailable, the rules protecting your account would still hold.

    The same rules whether the request comes from our workspace, a script, or your own product.

Hold us to the on-chain version

If a principle here is not enforced by a contract you can read, we want to hear about it.

Particle CS never holds your keys.