DCENT Enterprise
KO|EN

Institutional Self-Custody
Built on Hardware Wallets

Air-gapped custody, policy controls, and a complete audit trail in one solution

0 Hardware compromises since 2017
220 Countries served
1.1M+ Cumulative users
100+ Blockchains supported
Online Console
DCENT Enterprise online console portfolio dashboard
Cold Room · Air-gapped
Cold Room software transaction review
Online Console
DCENT Enterprise online console portfolio dashboard
Online Console
DCENT Enterprise online console portfolio dashboard
Cold Room · Air-gapped
Cold Room software transaction review
DCENT hardware wallet
Chip
CC EAL6+ Secure Element
Integrity
WYSIWYS hardware verification
What is DCENT Enterprise

From cold storage to daily operations,
built to institutional standards

On top of hardware wallet security, DCENT Enterprise adds the internal controls and operating protocols institutions require.
Ideal for virtual asset service providers (VASPs) and other businesses subject to cold storage mandates.

Cold Wallet
A Secure Element hardware wallet that keeps assets physically off the network
Air-Gapped Workflow
Online and offline software covering the full asset lifecycle, from balance monitoring to air-gapped signing
Multi-Signature and Policy Engine
Withdrawal policies enforced twice, in software and in hardware, so no single actor can move assets
Tailored SOPs
Proven controls for access, operations, and facilities, written into runbooks that fit your business
Why DCENT Enterprise

Three layers,
one moat

An EAL6+ certified cold wallet protects your assets,
the double-check policy engine verifies every withdrawal,
and full-stack support keeps your operations running

01

Hardware Cold Wallet Security

Keys never leave the CC EAL6+ Secure Element at any point in their lifecycle. There is no extraction path.
Final confirmation happens on the wallet’s own screen, so assets stay safe even if the front end is compromised.

CC EAL6+ Certified Secure Element A bank-grade Secure Element handles all key generation and signing
WYSIWYS Hardware guarantees that what you see is what you sign
Fingerprint Authentication Access is limited to enrolled operators, verified by fingerprint and PIN
Backup Without Exposure The R3covery Card keeps the mnemonic from ever appearing in plaintext
DCENT hardware wallet, back DCENT hardware wallet
CC EAL6+ Certified Secure Element A bank-grade Secure Element handles all key generation and signing
WYSIWYS Hardware guarantees that what you see is what you sign
Fingerprint Authentication Access is limited to enrolled operators, verified by fingerprint and PIN
Backup Without Exposure The R3covery Card keeps the mnemonic from ever appearing in plaintext
DCENT hardware wallet, back DCENT hardware wallet
CC EAL6+ Secure Element
All key generation and signing happen inside a bank-grade Secure Element
WYSIWYS
Hardware guarantees that what you see is what you sign
Fingerprint Authentication
Access is limited to enrolled operators, verified by fingerprint and PIN
Mnemonic Backup Without Plaintext Exposure
The R3covery Card keeps the mnemonic from ever appearing in plaintext
DCENT hardware wallet, back DCENT hardware wallet

Once keys are secured, the next priority is the rules governing how assets move

02

Double-Check Policy Engine

Every withdrawal is verified first by software, then again by the Secure Element.
Even if one side is breached, assets do not move.

Withdrawal request
1st check Online SW
Checks policy, signer eligibility,
and transaction integrity
Air gap
One-way QR
2nd check HW cold wallet
The Secure Element signs only after
verifying against the original policy
Signed
Segregated Roles

Requesting, approving, signing, and witnessing are separate jobs; no one can complete a withdrawal alone

Hash-Chained Audit Log

Every action, online or offline, lands in a hash-chained log where tampering is immediately evident

1-Byte Tamper Rejection

Change a single byte in transit and the wallet refuses to sign

This entire structure runs on the full-stack capability we build in-house

03

Full-Stack Support

We build everything from hardware to software and support the full lifecycle,
from operations to regulatory response.

HW · FW · SW Built and supported entirely in-house

We own every layer with no outside vendors, so root-cause analysis and patches are handled under one roof

Built and supported entirely in-house

We own every layer with no outside vendors, so root-cause analysis and patches are handled under one roof

Software Console · Cold Room SW
Firmware Secure Element OS
Hardware Cold wallet · PSD
Built and supported entirely in-house HW → FW → SW
Hardware
Firmware
Software
A single point of support

We own every layer with no outside vendors, so root-cause analysis and patches are handled under one roof.

Tailored SOPs

Operating runbooks matched to your control framework, from key ceremonies to emergency recovery

Professional Services

Consulting, production rehearsals, and operator training through every step of onboarding

Audit and Certification Readiness

A ready-made package of control mappings and technical documentation for certifications such as ISO 27001 and Korea’s ISMS-P

Managed Services

Maintenance, security patches, and incident response handled directly by the engineers who built the product

Together, these strengths form robust digital asset infrastructure for institutions

Regulatory Readiness

Compliance requirements,
met on day one

Deploying DCENT Enterprise covers the infrastructure side of your compliance obligations out of the box

Cold Storage Mandates Korea VAUPA and similar regimes
Regimes such as Korea’s Virtual Asset User Protection Act require most user assets to be kept offline.
The air-gapped EAL6+ cold wallet meets this by design.
Private Key Custody ISO 27001, ISMS-P controls
Keys are generated, used, and backed up under strict controls.
The entire lifecycle stays inside the Secure Element, and mnemonics are never exposed in plaintext.
Segregation of Duties Internal control standards
No one can move assets alone.
Segregated roles and M-of-N approval are the default, not an add-on.
Audit Trail Audit evidence requirements
Every action is recorded in tamper-evident, hash-chained logs.
Reports are exportable for auditors.
Certification Support ISO 27001, ISMS-P
Control mappings, technical documentation, and SOPs shorten the path to certification.
Your team stays focused on the business.

DCENT Enterprise by IOTRUST

A decade of protecting 1.5 million users across 220 countries, rebuilt for institutions.

1st Hardware wallet
market share in Korea
2017 Focused on wallets
ever since
1.5M+ Users protected
to date
220+ Countries where our
wallets are used
0 Hardware breaches
since founding

Digital Asset Product Ecosystem

Hardware
Biometric Hardware Wallet Card Wallet Recovery Card
Where Secure Element custody begins
Services / Solutions
User DCENT, Wepin (Embedded Wallet)
Enterprise DCENT Enterprise
Agent WAIaaS
From individuals to institutions to AI agents
Digital Asset Platforms
Stablecoin and NFT Issuance Web3 Investment Intelligence Hub Single Operations Fabric (SOF)
Extending into issuance and asset operations

From hardware wallets to services, solutions, and digital asset platforms,
IOTRUST is the end-to-end digital asset company for institutions