Module · Wallet

One wallet. Every AI cost in your organisation.

The TokenOne® Wallet is the central place to manage every AI cost · every team, every tool, every project, every brand. One balance, one ledger, one bill. Tokenised consumption, BYOK provider keys, transparent settlement and a chain-verified audit trail across every provider and TokenOne AI itself. You keep the agreements you already negotiated with OpenAI, Anthropic, AWS, Google and Azure. We run the rails on top of them.

BYOK · Bring Your Own Key

Keep your provider contracts. We don’t middleman.

Most AI platforms wrap your model spend, marking it up and obscuring what you’re really paying. TokenOne® is different. Your provider keys stay yours. Your model bills go to you direct. We charge for the governance layer · not the inference.

Procurement-friendly

You already have agreements with OpenAI, Anthropic, AWS, Google. Keep them. We govern; we don’t middleman.

No model markup

You see exactly what your provider charges. We charge a routing-and-governance fee, not a hidden spread on inference.

Compliance stays put

Your data stays under your provider DPA, your residency, your audit trail. TokenOne® governs without taking ownership.

Encrypted at rest

BYOK keys are encrypted at rest with rotation support. Never persisted in plaintext, never logged.

Per-project scoping

Assign keys to projects, teams, or workloads. Routing rules inherit the provider availability automatically.

Rotate without downtime

24-hour rotation overlap window. Old key keeps working while the new key takes traffic.

The wallet itself

Tokens to track it. Settlement to record it. Ledger to prove it.

Token balance

One balance per organisation. Allocate to projects, teams, or workloads. Hard limits and soft alerts.

Transparent settlement

Every call settled in real time. Routing-and-governance fee on TokenOne®; provider charges go to you direct via BYOK.

Signed ledger

Chain-verified entries with full attribution back to the calling project. SOC2-ready audit export.

Without BYOK vs with TokenOne®

The difference shows up on procurement’s desk.

Without BYOK

  • · Vendor middlemans every call
  • · Markup baked into every token
  • · Vendor sees your raw prompts and responses
  • · Lock-in to vendor’s billing relationships
  • · Compliance teams chase a third party for audit data

With TokenOne® BYOK

  • + TokenOne® governs; you contract direct
  • + Provider charges you direct, no markup
  • + Encrypted at rest, signed in transit
  • + Switch routing layer without touching providers
  • + Audit data lives with you, on your timeline
What’s included

Wallet capabilities.

  • Per-tenant token balance with hard limits and soft alerts.
  • BYOK for OpenAI, Anthropic, AWS Bedrock, Azure OpenAI, Google Vertex, OpenRouter, Cohere and more.
  • Sovereign endpoints supported · Bedrock, Azure Gov, on-prem.
  • Per-project key scoping with routing inheritance.
  • Rotation with 24-hour overlap window.
  • Audit-ready ledger with SOC2 mapping and PDF export.
  • Real-time settlement, signed entries, full attribution.
  • LLM-judge guardrail calls metered transparently · you see what each check costs.

Bring your provider keys. We bring the governance layer.

Talk to us about how BYOK works in practice with your providers, your residency, your procurement.