Skip to main content
Flomisma

For Compliance-first AI agent platforms

Ship verifiable agent
workflows in 14 days —
without storing sessions
or holding funds.

Ship zero-persistence agent relay + public verification in under 14 days — no session storage, no fund custody.

Example: relay agents → submit proof → share /verifier with auditors. Payments stay on your licensed processor.

14 days

typical time to verify

< 1ms

relay latency

0 bytes

session storage

What Flomisma provides

Flomisma is infrastructure software for real-time apps. Connect through a WebSocket relay that never writes messages to disk. Verify results on a public page anyone can check. Optional obligation-ledger APIs record workflow state — they do not move money.

Start free on the relay tier, clone MIT and BSL packages on GitHub, or buy a template when you want a full Next.js app with database models and admin UI already wired.

We are a technology provider — not a bank, custodian, or money transmitter. Payments run on Stripe (for our software) or on the licensee's own licensed processor. Flomisma stores configuration, audit hashes, and obligation metadata — never customer cash balances.

Flomisma is infrastructure software — a technology provider, not a money transmitter, custodian, or reserve operator. We do not hold, mint, or transmit client funds. Money movement occurs only on the licensee’s licensed processor or bank rails.

Products

Three pillars. One funnel.

Start on Relay, add Trust Stack when you need verifiable integrity, or buy templates for code you own. Flomisma is infrastructure — licensees move money on their own rails.

Relay

Zero-persistence WebSocket

HMAC-authenticated pub/sub with no disk and no database in the relay path. Free Developer tier — 1,000 sessions/month.

  • Usage-metered tiers, no overage penalties
  • Agent-to-agent channels on every tier
  • Sub-ms regional latency

Trust Stack

Verify without custody

Pipeline verifier, Built-with badges, and attestation APIs — prove integrity. Flomisma never holds or transmits funds.

  • Public /verifier — no API key
  • Trust Stack hub for compliance buyers
  • Credential vault is secrets, not money

Templates

Buy once, own the code

Production Next.js starters for relay, multi-tenant SaaS, and obligation ledgers — Stripe checkout on flomisma.com.

  • Settlement & Ledger Starter — $299
  • Relay starter — $199
  • Buy → license → auto-provision

17 additional SKUs — credentials API, compliance, marketplace-in-a-box, hosting, Trust Stack, and more.

Open source

Primitives on GitHub — templates when you need the full stack.

Three MIT modules and three BSL packages are public on GitHub: relay transport, ledger core, HITL queue, reconciliation, agent risk scoring, and escrow state machine. Inspect, fork, and integrate without a sales call.

GitHub packages ship bare algorithm primitives (no database or UI); paid templates wire the same concepts into production-ready Next.js + Prisma applications.

Relay

Deep dive

The relay only forwards frames. Quotas live in memory for the billing window, then roll up to the portal ledger — never the message body.

  • ✓ ESLint rule bans fs, Prisma, Redis imports in relay binary
  • ✓ GitHub Actions strace CI — fails if write syscalls detected
  • ✓ readonlyRootFilesystem on ECS Fargate container
  • ✓ Separate deployable — relay has no database connection
Read relay architecture →

Relay tiers

TierPriceSessions/moConcurrent
DeveloperFree1,000100Start free →
Startup$49/mo25,000500Get started →
Growth$199/mo150,0002,500Choose Growth →
Scale$499/moUnlimited10,000Choose Scale →
EnterpriseCustomDedicatedSLATalk to us →

Agent commerce

Payment layer for agent-to-agent work

Parent agents create tasks. Workers submit proof. Rules decide auto-release or human review. Payments stay on your processor — Flomisma records the ledger entry. Prove outcomes at /verifier.

Reference deployments

Integration shapes — not implementation detail.

Flomisma ships the Trust Stack and protocol SDKs. Field-of-use licensees deploy sovereign integrations — these are the deployment shapes enterprise buyers ask about in diligence. Entity names and integration specifics available under NDA.

Financial systems operator

Field-of-use licensee

Settlement ledger anchor + sovereign data custody

A licensed financial systems operator anchors settlement obligations on their own sovereign ledger. Credentials and position data stay inside their controlled perimeter — no custody on flomisma.com.

  • Sovereign ledger: operator-controlled, not Flomisma-hosted
  • Settlement state recorded and verified via Flomisma protocol
  • Custody boundary enforced at the operator perimeter
Licensee SDK →

Infrastructure holdco

Portfolio infrastructure

Continuous security verification + deploy integrity

A portfolio infrastructure entity runs ongoing security and availability verification across portfolio properties. No external customers — pure infrastructure with no Flomisma protocol license.

  • Continuous security and availability verification
  • Deploy integrity checks with no persistent tenant data
  • Operates at infrastructure layer only — no settlement access
Trust stack →

Evaluator memo and SOC2 control index: /memo · /trust

Enterprise · Protocol Integrity

Tamper-evident dispute lifecycle proof.

Flomisma provides zero-persistence cryptographic infrastructure. The Pipeline Integrity Protocol links evidence submission, encrypted storage, AI consumption, and dispute resolution into a single verifiable lifecycle record — available on enterprise and licensed deployments.

  • ✓ Four-stage hash-linked pipeline across heterogeneous trust boundaries
  • ✓ Compact lifecycle proof output for audit and downstream attestation
  • ✓ Streaming dispute paths with rolling validation (enterprise licensees)
  • ✓ Daily attestation reports for compliance consumers

Enterprise vault operations deploy inside isolated client runtimes or licensed financial operators — not as a public hosted custody API on flomisma.com.

Protocol Integrity overview →

Stage 1

Evidence submitted

Authenticated dispute evidence enters the pipeline anchor.

Stage 2

Vault stored

Encrypted storage link verified before persistence.

Stage 3

AI consumed

PII-redacted context with auditable redaction manifest.

Stage 4

Resolution confirmed

Output cryptographically coupled to evidence chain.

Templates

Templates that save 4–6 weeks.

Each template is documentation-complete. No support obligation. Buy once, own forever. Six popular starters below — the full catalog has more.

financeTier 2 · BSL 1.1

Settlement & Ledger Starter

Double-entry ledger, escrow, and audit trail. Production-ready.

Immutable double-entry ledger with escrow workflows, batch settlement, audit trail, and reconciliation. Prisma + Postgres. Drop into any Next.js app. Includes SOC2-adjacent compliance helpers, USD fiat settlement workflows, and integrity snapshots for audit evidence.

relayinfrastructureTier 1 · MIT / Apache 2.0

Zero-Persistence Relay Starter

WebSocket relay that never touches disk. Stateless by design.

The complete relay service from apps/relay/ — standalone, documented, and ready to deploy. Includes quota manager, room manager, API key rotation with zero-downtime grace slots, and metrics server. ESLint rules, strace CI, and readonlyRootFS config enforce zero persistence.

financeaiTier 2 · BSL 1.1

Agent Risk Scoring Engine

7-factor risk scoring. Block HIGH/CRITICAL agents pre-transaction.

Real-time agent risk assessment for AI marketplace governance. Evaluates 7 factors — dispute rate, slash rate, cancel rate, audit failure rate, SLA breach rate, governance alert rate, and arbitration favorability — producing a 0–100 composite score mapped to 5 risk bands (LOW, MODERATE, ELEVATED, HIGH, CRITICAL). Includes immutable evidence log, SOC2-ready risk snapshots, and pre-transaction blocking. Drop into any Next.js + Prisma escrow marketplace.

infrastructureNewTier 1 · MIT / Apache 2.0

AI Agency Directory Starter

Launch a Clutch-style B2B directory in a weekend.

Full Next.js 15 directory SaaS with Stripe tiered submissions, Resend transactional emails, statically generated SEO pages with Schema.org markup, category-filtered browse UI, featured listing tier, and pre-seeded data. TypeScript + Tailwind.

infrastructuremonitoringTier 2 · BSL 1.1

Protocol Integrity Integration Kit

Wire attestation, verifier SDK, and pipeline hash hooks.

Drop-in integration kit for Flomisma protocol integrity: verifier SDK wiring, attestation consumer, pipeline root hash hooks, and public verify page patterns. Pairs with Settlement Ledger and Relay.

infrastructureTier 2 · BSL 1.1

Multi-Tenant SaaS Launchpad

Same architecture + Stripe billing + one-command deploy.

Everything in the Multi-Tenant SaaS Starter, plus Stripe checkout and webhooks, subscription management, custom domain setup, and a one-command deployment script. Deploy a production-ready B2B SaaS in 10 minutes — not 6 months.

Settlement Ledger API

Double-entry ledger as a service.

Immutable ledger entries, escrow lock/release, batch settlement, and SOC2-adjacent audit trail — exposed as typed HTTP calls. No templates to install, no servers to manage.

  • ✓ Idempotent writes with integrity hash chain
  • ✓ Escrow lock / release / split with signature verification
  • ✓ USD fiat settlement fee preview and batch settlement
  • ✓ Redacted audit logging with SOC2 evidence collection
View API reference →
ledger-api
1// Record a settlement entry via the ledger API
2const portal = process.env.NEXT_PUBLIC_PORTAL_URL ?? 'https://portal.flomisma.com'
3const entry = await fetch(`${portal}/api/v1/ledger/entries`, {
4 method: 'POST',
5 headers: {
6 'x-ledger-api-key': 'fmr_your_key',
7 'Content-Type': 'application/json',
8 },
9 body: JSON.stringify({
10 tenantId: 'tenant_abc',
11 debit_account: 'platform_receivable',
12 credit_account: 'tenant_balance',
13 transaction_type: 'SETTLEMENT',
14 amount: 5000,
15 reference_id: 'order_abc123',
16 }),
17})
18
19const { success, data } = await entry.json()

Managed Hosting

We run the relay and ledger. You own your data.

Relay + settlement ledger, provisioned and operated. Single-region for solo projects, multi-region for teams, dedicated for enterprises. Your Postgres stays under your control; we operate the application and observability paths you approve.

  • ✓ Relay tier provisioned and scaled automatically
  • ✓ Settlement ledger with SOC2-adjacent audit trail
  • ✓ SLA-backed uptime with incident response
  • ✓ Multi-region and PITR backup options
Compare hosting plans →

Hosting plans

TierPriceRelay tierLedgerRegionsAuditSLASupport
Solo$99/moDeveloper (free)Single99.0%Email
Team$299/moStartupMulti-region99.5%Email + SLA
EnterpriseCustomCustomDedicated99.95%Dedicated

Settlement ledger column — managed portal ledger API (escrow FSM + double-entry). Flomisma does not hold customer funds; ledger records settlement events in your Postgres. Solo includes basic entry quota; Team adds batch settlement and SOC2 export; Enterprise is unlimited with dedicated cluster.

Proof by Flomisma

Attestation-aware infrastructure posture.

Flomisma manages deployment metadata — not compute. Proof scans DNS configuration, SSL health, and HTTP security headers, then anchors the result in a cryptographic attestation. A trust infrastructure company that can attest to settlement integrity but not to underlying DNS is leaving a gap in its own story. Proof closes that gap.

  • DNS postureSPF, DKIM, DMARC, DNSSEC — scored and attested.
  • SSL / TLSCert validity, expiry, HSTS enforcement, TLS version.
  • Security headersCSP, X-Frame-Options, Referrer-Policy, Permissions-Policy.
  • Merkle attestationPosture snapshots anchored into a Merkle root. Proof Growth and above.

Example posture snapshot

DNS90/100

pass

SSL / TLS95/100

pass

Headers85/100

pass

Overall posture

91/100

pass

Merkle root

a3f9…c812

Flomisma — Trust Infrastructure for the Modern Stack