Authority for autonomous money

Let AI agents act on money, within limits you can prove.

Polivor is the European authority layer for agents that pay. Before every payment, the agent asks Polivor for authority. We check the mandate, policy and limits, answer allow, deny or approval needed, and sign a short-lived authorization bound to that exact action.

Request sandbox access See how it works

Polivor never holds, moves or initiates funds.

Example decision

{
  "outcome": "ALLOW",
  "reasons": [{ "policy_id": "agent.may_pay_invoices" }],
  "checks": [
    { "id": "agent.active", "result": "pass" },
    { "id": "mandate.active", "result": "pass" },
    { "id": "beneficiary.iban_match", "result": "pass" }
  ],
  "authorization": { "jws": "eyJ…", "expires_at": "+5 min" }
}

How it works

One decision per action. Your payment hub or ERP stays in charge of the money.

Delegate

A finance owner records a Financial Mandate: accounts, currencies, countries, limits per payment, day and month, an approval threshold and a validity window. It is versioned and revocable.
Ask

For each payment the agent calls POST /v1/authorize. Polivor checks the agent version, mandate, policies, beneficiary allowlist and budgets. The answer is deterministic: no AI model decides.
Enforce and prove

The payment hub verifies the signed authorization before releasing funds, then reports what was executed. Every check lands in a signed, hash-chained evidence record that can be verified offline.

Built on a few hard rules

The boundaries that make delegation to an agent safe to reason about.

Never touches funds

Polivor decides, signs and records. Payments are initiated and executed by your own systems.

Deterministic

The same request under the same mandate and policy versions gives the same answer, every time.

The agent is not trusted

Beneficiary matches, budgets and agent versions are computed by Polivor. Signals from the agent can only tighten a decision, never loosen it.

Evidence you can check

Records are signed and chained, and exportable, so an auditor can verify them without trusting us.

Short-lived, single action

Each authorization expires in five minutes and is bound to the exact payment it was issued for. Change the amount or the IBAN and it no longer verifies.

Hosted in the EU

Runtime, data and signing keys run in Germany.

Early sandbox

We are onboarding design partners onto a sandbox that uses synthetic data only. If you run finance, treasury or payments and are piloting agents, we would like to hear from you.

Request sandbox access