Skip to content
CapSign

Security and compliance

A register of record has to be trustworthy first

Ownership data is sensitive and legally significant. CapSign is built so that only the right people see it, every change is attributable, and offerings stay inside the rules.

Access

Only the right people, by default

Passkey sign-in
Accounts are protected by passkeys bound to your device, so there are no passwords to phish or reuse.
Verified claims
Only a confirmed officer with a work email on the company's domain can claim a company and its page.
Role-based access
Owners, admins, counsel, and viewers each get the access their role needs, and banking needs an owner's approval. Holders see only their own positions.
Holder names never public
Public pages show capitalization totals only when the company opts in. Individual holders are never listed.
Audit trail
Every change to the register records who made it, when, and which signed approval authorized it.
Completion certificates
Signed documents carry a record of each signer and timestamp, filed against the security they created.

Registers

You choose what's onchain, and who can read it

Every register lives on CapSign. Anchoring onchain is optional, and the confidential mode encrypts ownership so only the company's viewing key can read it.

Keep it on CapSign

Your cap table of record lives in CapSign with a signed hash receipt.

What the public seesNothing
Holder
Private
Shares
Private
Class
Private

Nothing is published onchain. You can move onchain later.

Public onchain

One token per share class. Every holding is a public, verifiable lot.

What the public seesWallets and share counts
Holder
Wallet address
Shares
Visible
Class
Visible

Holder wallets and share counts are visible to anyone.

Confidential onchain

Your own register contract with encrypted holdings only you can read.

What the public seesCommitments only
Holder
Hidden
Shares
Hidden
Class
Hidden

The chain sees commitments and a root, never holders or amounts.

Onchain registers run on Base Sepolia today and move to Base mainnet with our first verified issuers.

Offerings

Regulation D, conducted by the issuer

CapSign gives companies the tools to run their own private placements. The company is the issuer, invites its own investors, and is responsible for its offering.

Rule 506(b)

For investors the company already has a relationship with. No general solicitation, so 506(b) offerings never appear in the public directory or a company's public page.

Rule 506(c)

Open only to accredited investors, and may be shown on the company's page. The company must take reasonable steps to verify each investor's status, so every investor completes accreditation verification before subscribing.

Sanctions screening

Every subscriber is screened against U.S. sanctions lists before the company can accept them, and again at closing. Companies can also require identity verification.

Accreditation

506(c) offerings require verified accreditation, and an expired verification has to be renewed before the next subscription.

No custody

Investors wire directly to the company's own bank account. CapSign never holds, receives, or moves investor money.

Software, not a broker

CapSign doesn't find investors, recommend securities, give investment advice, negotiate terms, hold investor funds, or match buyers and sellers. We don't take a fee on any raise. Every placement surface in the product carries this disclosure.

CapSign provides software that companies use to run their own offerings. CapSign is not a broker-dealer, funding portal, or investment adviser, and is not a FINRA member. It does not recommend or give advice about any security, and it does not hold or transmit investor funds. Each offering is made by the issuing company only through its own offering documents.

Found a security issue? Email security@capsign.io.

Put your cap table on CapSign

Move over from a spreadsheet or your current provider, or start from scratch. It's free.