ISO/IEC TS 27571:2026 & W3C DID Aligned

No infrastructure can prove who's authorized to touch a person's neural data.

Signet is the identity and policy layer for neurodata: user-controlled encryption keys, purpose-specific consent enforced per request, and cryptographic proof of authorization. Built for every party that might ask for access: a researcher, a biobank, or an autonomous system acting on their behalf.

2026 Regulatory Landscape

Key Statutory Shifts

9+ Neurodata Bills Introduced across state legislatures in the first six months of 2026 alone.
Girardi v. Emotiv First international litigation against a neurotech company for processing neurodata without purpose-specific consent.
Zero Platforms Currently answer, cryptographically, who was authorized to access it. Until now.
The Governance Gap

Neurodata has no infrastructure built for it.

Neural signal patterns can reveal thoughts, emotions, and feelings that no other data category can. No platform combines user-controlled encryption keys, purpose-specific consent enforced per processing event, and neutral third-party access, built specifically for neurodata. What exists instead is a one-time terms-of-service agreement, and custody that defaults to unprotected data centers, as an original file or a backup.

GDPR & CCPA Aligned
CO, CA, CT, MT Neural Statutes
ISO/IEC TS 27571:2026
W3C DID / Verifiable Credentials
Core Architecture

Three primitives. One proof.

Signet governs every request against a person's neurodata the same way, regardless of who or what is asking.

IDENTITY

User-controlled keys

Automated cryptographic keys, portable via W3C Decentralized Identifiers, with recovery built in from day one: proof of who, or what, is requesting access.

POLICY

Per-event consent

Purpose-specific consent enforced per data-processing event, not agreed to once and forgotten. Every grant is scoped, time-bound, and revocable at the infrastructure layer.

PROOF

Auditable compliance

A cryptographically auditable log chain aligned to ISO/IEC TS 27571:2026 and TIPPSS: compliance an enterprise can hand to a regulator or a court.

What's Next

Built for whoever's asking next.

Today, the parties requesting access are human: researchers, scientists, biobanks. Autonomous systems are next, and the architecture doesn't have to change to accommodate them. The same keys. The same per-event policy. The same proof.