CAI-AUTH

CAI-AUTH is the official authenticator app for CAI Hub infrastructure,
developed by CAI Technology.

KEY FEATURES
• TOTP (RFC 6238) one-time codes for 2FA
• Ed25519 device-bound signatures
• ML-DSA post-quantum signatures (NIST FIPS 204)
• AES-256-GCM local key storage
• QR code enrollment — no passwords
• Offline code generation
• Biometric unlock (fingerprint / face)
• Zero telemetry, zero tracking, zero ads

SECURITY
All cryptographic keys are generated and stored exclusively on your device.
Private keys never leave the device. No cloud sync. No backup to third
parties. Enrollment uses ephemeral QR codes with short TTL.

WHO IS THIS FOR
CAI-AUTH is restricted to authorized CAI Hub operators and CAI Technology
clients. The app requires enrollment via an authorized CAI Hub instance
and will not function standalone.

PRIVACY
• No analytics SDKs
• No advertising SDKs
• No personal data collection
• No location access
• No contacts access
• Network access only for enrollment and signature verification

COMPLIANCE
• NIST-approved algorithms (FIPS 186-5, FIPS 204, FIPS 197)
• GDPR compliant — no PII stored on servers
• Export-compliant cryptography (standard NIST primitives)

SUPPORT
Email: support@caitech.ro
Website: https://auth.caitech.ro
Privacy: https://auth.caitech.ro/privacy
Terms: https://auth.caitech.ro/terms

© CAI Technology. All Rights Reserved.
Proprietary software — authorized use only