SolutionsEdit online Treasury policiesConfigure multi-signature approvals, spending limits, and risk controls to protect treasury operations.Wallet managementOrganize wallets with tags, roles, and permissions for operational security.Automated paymentsSet up policy-gated automated transfers using service accounts for payouts and high volume operations.Payment processingDetect user deposits, process transfers, and handle stablecoin payments with compliance.End-user walletsImplement user managed wallets with delegated signing and end user onboarding. Exchange integrationConnect IBM Digital Asset Haven wallets with centralized exchanges for deposits and withdrawals. DeFi tradingExecute token swaps on decentralized exchanges with policy controls. IBM Digital Asset HavenComplianceKYT and AML screening, audit operations, and travel rule compliance for regulated entities.Managing WalletsCreate wallets, add networks, organize with tags, and view details in the dashboard.Approving transactionsReview and approve pending transactions that require policy approval.Interacting with smart contractsRead and write smart contracts using the IBM Digital Asset Haven dashboard or API.Using WalletConnectConnect your IBM Digital Asset Haven wallets to external dApps using WalletConnect in the dashboard. Using multichain walletsUse the same wallet address across multiple EVM networks to simplify asset management and recover tokens sent on the wrong network.Storing WebAuthn Credentials in Password ManagersMany modern devices ship with dedicated hardware chips known as trusted execution environments (TEEs). TEEs generate and sign cryptographic secrets. By default, when available, WebAuthn uses these resources to create passkeys and signatures, providing the most secure method for storing sensitive cryptographic material. Not all consumer devices include this specialized hardware. Moreover, although WebAuthn is projected to reach more than 96 percent coverage across consumer devices, some operating systems—such as certain Linux distributions, including Ubuntu—do not fully support passkey storage. In these cases, password managers such as 1Password, Bitwarden, or Dashlane are recommended. On unsupported devices, instruct users to download and install the official Chrome Web Store extensions. The extensions allow users to securely store and manage passkeys, as shown below.Recovering Your AccountIf you lose access to your device or credentials, you can recover your IBM Digital Asset Haven account using your recovery kit. Permission-based Access ControlInvite new users and configure IBM Digital Asset Haven access management with roles.Creating PoliciesPolicies are a programmable set of safeguards which can be configured to validate actions taken in your organization.Freezing a WalletYou can freeze a wallet—preventing all outgoing transactions—by combining a blocking policy with a wallet tag. This approach allows you to immediately stop transactions in response to a security incident, suspected compromise, or compliance hold, and to restore access once the issue is resolved.Security Best PracticesProtect your organization using roles, policies, the address book, and asset verification. IBM Digital Asset Haven provides multiple layers of security to help safeguard wallets, transactions, and administrative access.Policies for Signing RequestsThis chapter explains how to configure policies when using the Sign & Broadcast or Generate Signature endpoints, and how to resolve blocked by policy errors.Setting up Single Sign-OnSingle Sign-On (SSO) allows your team to log in to IBM Digital Asset Haven using your existing identity provider. This enhances security by centralizing user authentication and management. IBM Digital Asset Haven SSO supports all OpenID Connect (OIDC) providers. You can configure your organization to use SSO and automatically redirect users when they log in to IBM Digital Asset Haven.Locating Your Organization IDThe organization ID (orgId) is the unique identifier IBM Digital Asset Haven uses to segregate your information from other companies. You can find it on the dashboard of your Profile page .