Where the phone is, as a factor in sign-ins, payment approvals, agent actions and access to sensitive data.
Rules that apply in one place and not the next: sanctions, national bans, state licenses, tribal lands and model access.
A signed location as an input to fraud and risk decisions: card payments, new accounts, device farms and invoices.
The catalog, the price, the payment methods and the features that match where the user is.
A password, a one-time code and a session token work the same wherever they are used, so whoever holds them can use them from anywhere. Octet adds where the phone is as a factor in sign-ins, approvals and other actions that matter, with no extra step for the user. Octet returns a signed answer, and your system decides what to allow.
Octet runs on the customer’s enrolled phone alongside your existing login. When the phone is at the login, your app skips the push, the SMS code and the “was this you?” prompt. When stolen credentials are used from another country, the phone is still with its owner, the proof fails, and the real customer never sees a challenge.
A large wire moves on a few sign-offs, and a sign-off is often an email. Octet binds each approval to a signed proof that it came from an enrolled device of an authorized signer, standing in one of your offices.
Agents now act on real systems with real keys. In June 2026 an OpenAI agent running an internal evaluation got around the access blocks on an old Services Australia website and reached non-public Medicare statistics. OpenAI said its models took actions it did not intend.
Octet puts a person at the point of decision. Before an agent deletes, pays, deploys or opens something sensitive, it asks for approval, and the approval counts only with a signed proof from a real phone, held by a human, inside an authorized place. A token copied by an agent cannot produce that proof.
You hire a remote engineer. They pass the interviews, say they’re in Austin, and you grant repository and wallet access. From that moment on, “Austin” is a claim nobody ever checks again.
Octet makes it a measurement: taken on the device, signed in hardware the user can’t reach, at onboarding and on every sensitive action. An engineer who is actually in Moscow, Tehran or Pyongyang cannot produce one.
A determined adversary can still ship a laptop to a US address and pay someone to host it. That is the part the FBI prosecutes, and it is a considerably harder business than a VPN subscription.
Some data should only be read from one place: model weights, evaluation sets, health records, export-controlled files. The rule is usually enforced with credentials and an office IP range, and both work from anywhere once they are stolen.
The US Data Security Program restricts access to bulk sensitive data from countries of concern, not only transfers.
With Octet, the data store releases a key only with a fresh signed proof that the requesting device is inside the approved site. Credentials used from a server somewhere else cannot produce one.
Labs already ship models that do more for the right people in the right setting. Anthropic’s Claude Gov models refuse less when handling classified material, and access is limited to people who work in classified environments. OpenAI’s reasoning models run on Los Alamos’ Venado supercomputer on a classified network. In April 2026 OpenAI released GPT-5.4-Cyber, which lowers the refusal boundary for verified defenders.
Today the gate is the account, or the network the model runs on. With Octet, a model unlocks a capability, such as binary reverse engineering or work on controlled defense material, only with a signed proof that the device belongs to cleared staff and is inside an accredited facility. Anywhere else, it behaves like the public model.
Major IP geolocation databases disagree on the same address by an average of 620 kilometers. The largest sanctions fine in banking history was $8.9 billion (BNP Paribas, 2014). A recent one was $4.3 billion (Binance, 2023), and the CEO did prison time. Octet replaces the IP lookup with a yes or no about the device’s location, signed in its hardware, even when the VPN is on.
71M people in sanctioned jurisdictions live within 100 km of a non-sanctioned border, and IP lookups miss by several times that distance. Instead of looking the location up, the phone builds it up from its own sensors, checks it against the sanctioned regions in your policy, and signs the answer in its hardware.
SEC Regulation S requires a reasonable belief that the buyer is outside the US. IP geolocation does not meet that standard. Self-attestation does not either. KYC proves identity at signup, at real conversion cost, never that the buyer was outside the US at the moment of the trade.
Octet issues a hardware-signed proof before the session opens, covering Puerto Rico, Guam, American Samoa, the US Virgin Islands, and the Northern Mariana Islands.
A single platform can serve only the jurisdictions where it holds authorization, or where federal preemption has been judicially confirmed. The geofence updates without a client release as state injunctions issue or lift. The same primitive supports county-level and municipal carve-outs, and tribal land where gaming compacts apply.
Gaming on Native American land runs under tribal compacts, and those compacts end at the reservation boundary. A wager placed on tribal land falls under the compact. One placed a mile outside falls under the state, which may not allow it at all. IP geolocation cannot tell the two apart.
Octet supports polygons at any scale, from a single casino floor to a reservation’s full boundary, with the same cryptographic guarantee as a national geofence. Each wager carries a signed answer for which side of the line the phone was on.
Labs decide where their models can be used. Anthropic does not serve China, and since September 2025 it also refuses companies controlled from there, wherever they operate. The check is still mostly an IP address.
In February 2026 Anthropic reported that DeepSeek, Moonshot and MiniMax ran more than 16 million exchanges with Claude through about 24,000 fraudulent accounts, reaching it from China through commercial proxy services.
Octet ties each account, and each API key it issues, to a signed proof from a real device outside the restricted regions, at sign-up and again at intervals. A proxy changes the IP address but not where the phone is.
Fraud and risk systems already weigh location, mostly from an IP address that a VPN or a proxy changes in seconds. Octet gives them a signed answer about where the phone is. Your rules decide what a NO means: a review, a step-up check or a hold on the payment.
A card issued in France is used for an online purchase. The IP address says the Netherlands, because the buyer runs a VPN. Your risk engine has to tell a real customer from a stolen card.
Octet adds a signed answer about whether the buyer’s phone is in France. Your rules decide what follows: a YES can let the payment through without a challenge, and a NO can send it to review.
An application says the applicant lives in Germany. The documents pass, and the IP address says Germany as well, through a proxy.
Octet adds a signed answer about whether the applicant’s phone is in Germany when the account opens, and again at the first withdrawal.
Sign-up bonuses, referral rewards and airdrops are paid per account, so one operator runs hundreds of accounts from racks of phones in one room. Each phone is a real device and passes a device check.
With Octet, your rules can check whether a new account’s phone is inside a small area where other accounts were opened, and send the third, the tenth or the hundredth to review. Real users see no CAPTCHA.
Invoices that carry a signed proof the sender’s device is at the supplier’s registered address get fast-tracked. An attacker in Vietnam compromises your supplier’s email and sends a fake invoice. Their device cannot produce a proof for the supplier’s address. Flagged before payment.
Products change by place: the catalog, the price, the payment methods at checkout, a feature that opens only at one venue. Most of these choices run on an IP lookup, which puts a user on a VPN in the wrong country. Octet gives the product a signed answer about where the phone is, and the user can keep the VPN on.
Streaming catalogs, app prices and subscription tiers are set country by country. A VPN moves a user into another country’s catalog or a cheaper price, and an IP lookup can move a traveller into the wrong one.
Octet gives the app a signed answer about the country the phone is in, so the catalog and the price follow the phone.
Buyers in Brazil pay with Pix, in India with UPI and in the Netherlands with iDEAL. The checkout chooses which methods to show from the buyer’s country, usually from the IP address, so a buyer on a VPN or a corporate network sees another country’s options.
With Octet, the checkout shows the payment methods for the country the phone is in.
A ticketed event unlocks content only for people inside the stadium. A reward applies only in one store. An IP address resolves to a city at best, and anyone can claim to be at the venue.
Octet gives the app a signed answer that the phone is inside the venue or the store when the feature is used.
If you have a use case you don’t see here, tell us where location determines an action in your product. We’ll tell you if Octet can be valuable.