Keys & security model

Your key is protected at rest

ParmTech stores a SHA-256 lookup hash and an application-encrypted customer copy. The plain key is never stored in readable form. Database access alone does not reveal usable licence keys without the application encryption key.

Signed responses

Every validation response is signed with Ed25519. Products verify signatures locally with our public key, which means:

• A man-in-the-middle cannot forge an "active" response.
• Products work offline through the snapshot TTL and grace window.
• Revocation is immediate: we simply stop signing.

Seats

A seat is one activated installation, identified by domain + install id. Activation is idempotent and concurrency-safe — parallel activations from a load-balanced fleet cannot exceed your seat limit. Free seats any time from your dashboard.