Every message your AI sends, provable.

Attestation infrastructure for agent-originated messaging

Why now

The obligation is already live1,2,3The primitives got standardised8,9,10,11The agents are already sending27,65Every application is growing an agent of its own27,66

Why Kanvo

Already on both sides of the wire28The unglamorous integration work is finishedStandards rather than a private scheme8,10,43,53

What Kanvo does

Signs every outbound message with actor, mandate, policy and content hash.Enforces AI disclosure per channel and records the result.3Exports tamper-evident evidence a regulator accepts.17

Already running

Attested send, disclosure, mandates and the approval lane.160 MCP tools, 10 channels out, 11 webhooks in.Evidence packs that verify offline, roots anchored publicly.

The agentic messenger — a chat client for the people you work with, and for the agents inside the software you work in

A chat client is the correct place for this, because the interaction is already a conversation. Kanvo treats an agent the way it treats a person: it holds a seat in a thread, it has a name in the roster, it reads what was said before it answered, and what it said is in the same history as everything else. Nothing has…

The assistant

Catch me upA draft already in the boxThree replies as chipsTranslation in both directionsAsk about any messageSearch by meaningTriage that can only flagWhat the call decidedThe digest at your eight o'clockThe same tools, for somebody else's agent

Your voice reads your words, and nobody else's

A person records a consent sentence, and their messages can then be listened to in their own voice — on a walk, driving, or by somebody who would rather hear a thread than read it. Voice notes travel the other way, arriving as text you can skim. Both are on every client.

31 of 31 capabilities are live today

Nothing planned is described in the present tense anywhere on this site.

Priced per proof

FreeDeveloperUsageProof of SendSeatComplianceContractEnterprise & embedded

Four phases, one metric each

Phase 1 — Prove the envelope: First 10,000 attested messagesPhase 2 — Make it public: Verifications by non-customersPhase 3 — Sell the evidence: First compliance seat soldPhase 4 — Harden for the long run: Independent verification without trusting Kanvo

Organisations that already deployed an agent

Their deals stall in security review over exactly this question. They need an artefact to hand procurement showing what their agent is permitted to say and what it actually said.25,27

AI-agent companies selling into enterprises

Their deals stall in security review over exactly this question. They need an artefact to hand procurement showing what their agent is permitted to say and what it actually said.25,27

Regulated communications teams

Wealth management, insurance, mortgage and healthcare outreach already pay for archiving that cannot distinguish a human from an agent — while enforcement has shifted to naming individuals.16,17,18

EU-exposed deployers

Anyone running an outbound AI agent into the EU acquired a disclosure obligation on 2 August 2026 and has no tooling for it.1,2,3

Take it with you

The one pager, the full business plan and the deck are all available as PDFs.