Archer is non-custodial by design. Your wallet is provisioned by Privy and your private key is never held by Archer. Signing happens either in your browser or inside an AWS Nitro Enclave, where keys are reassembled from Shamir-shared fragments only at the moment of a single signature - and never accessible to Privy or to the host operating system.
Learn more →Every transaction shows a clear preview - source token, destination token, expected amount, fees - and requires your explicit approval before signing. Slippage caps, gas estimation with buffer, balance checks, and chain compatibility are validated deterministically. When the chain supports it, the transaction is simulated against live state before you confirm.
Learn more →The LLM is the interpreter, not the executor. Prompts are grounded in a curated intent library and resolved with retrieval-augmented context from past successful executions. Ambiguous prompts route to clarification, never to execution. The model proposes; deterministic code and explicit user confirmation dispose.
Learn more →Tokens live in memory only - never in localStorage. Sessions are persisted by Privy's HttpOnly cookies. SMS authentication is disabled (SIM-swap risk); passkeys and MFA are enabled. A full Content-Security-Policy, restricted CORS, and strict referrer rules are shipped. Infrastructure inherits from Privy (SOC 2 Type II), as well as database and hosted infrastructure solutions that maintain robust predictability, reliability, and security policies.
Learn more →Archer is built so that no actor - including Archer itself - can move your funds without your explicit approval.
Our Wallet Solution is Backed by
Want the technical detail? Read our security documentation →
Sign up early to qualify for founding user perks and priority access.
Launch App