Skip to content

Products

@brivora/crypto

Shipped v0.1.0

Post-quantum cryptographic infrastructure for the next era of security. ML-KEM-768, ML-DSA-65, SLH-DSA, and Ed25519/X25519 hybrid mode — all in a simple TypeScript API. No configuration. No external dependencies for PQC operations. Works in Node.js, Deno, Bun, and browsers.

Capabilities

  • Hybrid encryption (X25519 + ML-KEM-768, FIPS 203)
  • Hybrid signatures (Ed25519 + ML-DSA-65, FIPS 204)
  • Hash-based signatures (SLH-DSA, FIPS 205)
  • Key rotation with signed migration proofs
  • Key derivation (HKDF-SHA256)
  • Ed25519 key upgrade to hybrid PQC
  • PQC-only mode
typescript
import { crypto } from '@brivora/crypto';

// Create a post-quantum identity
const alice = await crypto.createIdentity();
const bob = await crypto.createIdentity();

// Encrypt for Bob
const encrypted = await crypto.encrypt('secret message', bob.publicKey);
const decrypted = await crypto.decrypt(encrypted, bob.privateKey);

// Sign as Alice
const signed = await crypto.sign('important data', alice.privateKey);
const { valid } = await crypto.verify(signed, alice.publicKey);
// valid === true
124 tests | 98.83% coverage | v0.1.0

@brivora/verify

Shipped v0.1.0

Cryptographic governance proofs for AI compliance. Wrap any AI call with regulatory governance rules and get a PQC-signed Merkle root proving compliance. 5-stage governance pipeline: Define, Observe, Execute, Evaluate, Prove. Independent verification — no API, no account, just math.

Capabilities

  • 5-stage governance pipeline wrapping any AI call
  • 24 built-in governance packs across 6+ jurisdictions
  • PQC-signed Merkle tree proofs (ML-DSA-65)
  • Fidelity scoring with dimension-based compliance reports
  • Independent proof verification
  • Proof chaining for tamper-evident audit trails
  • Custom governance pack creation
typescript
import { verify } from '@brivora/verify';

// Wrap any AI call with governance
const result = await verify.govern(
  () => anthropic.messages.create({
    model: 'claude-sonnet-4-6',
    messages: [{ role: 'user', content: 'Analyze this loan application' }]
  }),
  { governance: 'eu-ai-act', audit: true }
);

console.log(result.proof);   // PQC-signed Merkle root
console.log(result.valid);   // true
console.log(result.score);   // Fidelity score 0.0-1.0
console.log(result.report);  // Compliance report
125 tests | 244 assertions | v0.1.0

Governance Packs

Live

EU AI Act

European Union

Full EU AI Act compliance. Articles 9-15, 50, 52, 72-73. Prohibited practices, risk management, data governance, transparency, human oversight, robustness, post-market monitoring.

Enforcement: 2026-08-02

22 rules v2.0.0
Live Cross-industry

SOC 2 Type II (AI Controls)

United States

AICPA Trust Services Criteria applied to AI systems. Access control, processing integrity, data protection, operational monitoring.

12 rules v1.0.0
Live Healthcare

HIPAA (AI/PHI)

United States

HIPAA compliance for AI systems processing Protected Health Information. PHI detection, minimum necessary, BAA verification, encryption, breach detection.

14 rules v1.0.0
Live Cross-industry

NIST AI Risk Management Framework

United States

NIST AI RMF 1.0 implementation. Govern, Map, Measure, Manage functions.

12 rules v1.0.0
Live Cross-industry

CCPA/CPRA (Automated Decision-Making)

California, United States

California Consumer Privacy Act automated decision-making technology rules. Significant decisions, opt-out rights, access requests.

12 rules v1.0.0
Live Cross-industry

Colorado AI Act

Colorado, United States

Colorado SB 24-205. High-risk AI system requirements for consequential decisions in employment, education, finance, healthcare, housing, insurance, legal.

Enforcement: 2026-02-01

12 rules v1.0.0
Live Cross-industry

Texas TRAIGA

Texas, United States

Texas Responsible AI Governance Act. HB 149 requirements for high-risk AI systems.

12 rules v1.0.0
Live Cross-industry

ISO/IEC 42001:2023

International

AI management system standard. Risk-based approach to responsible AI development and deployment.

12 rules v1.0.0
Live Cross-industry

ISO 27001 (AI Extension)

International

Information security management for AI systems. Controls for AI-specific security risks.

12 rules v1.0.0
Live Employment

NYC Local Law 144

New York City, United States

Automated employment decision tools. Bias audit requirements for AI used in hiring and promotion.

Enforcement: 2023-07-05

12 rules v1.0.0
Live Finance/Insurance

NYDFS AI Guidance

New York, United States

New York Department of Financial Services AI guidance for insurance and cybersecurity.

12 rules v1.0.0
Live Finance

SEC AI Frameworks

United States

Securities and Exchange Commission AI-related frameworks and guidance.

12 rules v1.0.0
Live Healthcare

FDA AI/ML Guidance

United States

FDA guidance for AI and machine learning in medical devices.

12 rules v1.0.0
Live Cross-industry

South Korea AI Basic Act

South Korea

South Korea AI Basic Act requirements for high-risk AI systems.

12 rules v1.0.0
Live Cross-industry

Singapore AI Governance Framework

Singapore

Singapore Model AI Governance Framework and AI Verify requirements.

12 rules v1.0.0
Live Cross-industry

China AI Labeling

China

China AI content labeling and watermarking requirements.

12 rules v1.0.0
Live Cross-industry

China Cybersecurity AI

China

China cybersecurity law requirements for AI systems.

12 rules v1.0.0
Live Cross-industry

Japan AI Promotion Act

Japan

Japan AI governance and promotion framework requirements.

12 rules v1.0.0
Live Cross-industry

OECD AI Principles

International (OECD)

OECD Principles on Artificial Intelligence. International governance standards.

12 rules v1.0.0
Live Cross-industry

California AI Transparency Act

California, United States

California AI transparency requirements for automated systems.

12 rules v1.0.0
Live Cross-industry

Canada AIDA

Canada

Artificial Intelligence and Data Act. Canadian federal AI governance requirements.

12 rules v1.0.0

Future Products

@brivora/attest Planned

PQC-signed software attestations. Cross-chain verifiable.

@brivora/audit Planned

Verifiable audit trail system with cryptographic chain of custody.

@brivora/cli Planned

Command-line interface for generating and verifying proofs.

Brivora Sync Planned

PQC-encrypted cross-device sync. Your data, your keys, your devices.

Brivora OS Vision

AI-native operating system. Run anything, trust everything.

Brivora Hardware Vision

Sovereign compute devices. Plug-and-play privacy.

Brivora Mobile Vision

GrapheneOS-based mobile with full Brivora stack.