Workflows Run financial operations without manual drag
Turn recurring treasury, payment, and admin workflows into governed processes. Automate what is safe. Escalate what needs review.
Build workflows
from real primitives
Service accounts, webhooks, policies, every primitive is composable. Wire them together to model anything you do today.
Machine identities with scoped permissions. One per workflow, one per environment. Audited like any user.
Every state change emits a signed, idempotent event. Subscribe once, react forever. No polling, no drift.
All endpoints accept external IDs. Retries are safe. Crashes recoverable. Duplicate requests return the initial response.
Events fire,
workflows run.
Inbound deposits. Pending approvals. Confirmed transactions. Policy violations. Wallet creations. Credential rotations. Every onchain or platform event can drive a workflow. The runtime is yours — DFNS delivers the signal.
Deposit detected, transaction confirmed, contract function called, balance crossed a threshold. Real-time across 100+ chains.
Approval requested, wallet created, policy modified, credential rotated. Operational events, not just transactional ones.
Cron the routine. Sweep balances nightly. Rebalance yields monthly. Close books quarterly. Service accounts execute under policy on the schedule you set.
Programmable approvals,
in TypeScript
Service accounts read pending requests, decode the ABI-encoded call data, call any HTTP API or database, and post Approve / Reject / Abstain decisions. Plain TypeScript. No DSL. Your business rules, your code.
Initiators and approvers are distinct identities. The platform enforces separation of duties cryptographically — no self-approval, no shortcuts. The four-eyes principle, encoded.
Decode any smart contract call. Apply per-function rules. Allow mint to whitelisted recipients only. Cap transfer per call. Reject unknown selectors. Sanctions-screen any address.
Service accounts handle the 95% routine. Humans handle the 5% exceptions. Abstain when uncertain — humans in the same approval group take it from there. Auto-escalation, not auto-rejection.
Every step,
signed and logged
Every action — initiated, approved, signed, broadcast — is cryptographically attributed and stored. Non-repudiation by construction. Auditors and regulators read the same logs your ops team does.
Every decision is signed by the identity that made it. Service account or human, the chain of custody is unbroken and verifiable.
Filter by user, wallet, policy, contract, date. Export to CSV. Stream to your SIEM. Query through the API. The audit trail lives where you need it.
SOC2, ISO 27001. The audit trail satisfies internal and external review. No reconstruction, no excuses, no Excel exports.
Discover how Nilos runs operations on DFNS.
As a regulated custodian committed to the highest standards of compliance, our partnership with DFNS has been crucial. Their security best practices, programmatic developer tools, and robust infrastructure help us carry out carefully controlled operations. We also appreciate their team as they provide responsive support and sub-hour troubleshooting.
Service accounts handle the routine. Humans handle the exceptions. DFNS tracks everything that happens in-between.
Every onchain or platform state change fires a signed webhook. Every webhook drives a workflow. No polling, no miss.
No DSL to learn. Decode any ABI, call any HTTP API, query any database, post any decision. The runtime is your stack.
Every action, every approval, every API call, cryptographically signed and logged. Non-repudiation without paperwork.
- 01 · Provision
Create a service account for one job.
A machine identity with the narrowest permission set that gets the job done
- 02 · Subscribe
Wire webhooks to drive the workflow
Subscribe to the events that matter, we deliver them signed. Your handler can be a Lambda, a worker, a cron job, an Express endpoint.
- 03 · Decide
Codify the business rules
Service accounts read the pending approval, decode the call data, run your rules, and post a decision. Approve, reject, or abstain.
- 04 · Audit
Review, export, prove.
Every decision is signed by the identity that made it. Every event is queryable. Stream them into your SIEM.
