Trusted location data

Overview · Trusted location data

Trusted location data.

Trusted location data is a location result that a third party can check for themselves: produced on the device from its own sensors, signed in hardware, and verifiable without trusting the vendor or the user.

Most location data is reported by software on the device or inferred from the network, and whoever receives it has no way to tell whether it is true.

Octet takes the signals a phone already receives, interprets and checks them on the device, and turns them into a signed answer, built on a statistical proof, to one question: is this device inside this region now? It needs no new hardware, and the raw sensor data and coordinates stay on the phone.

What makes location data trustworthy

It is measured, not inferred. It comes from the device’s own sensors, not from the network path a request took. See IP vs device geolocation.
It is signed where it is measured. A key in secure hardware signs the result, and the platform certifies the app. See device-attested location.
It is a verdict, not a coordinate. YES, NO or INDETERMINATE against a named region. It discloses less, and it is what most rules ask for.
Anyone can check it. Proofs verify offline with the open-source octet-verify. No call to Octet is needed.

Where it is used

Compliance. Gaming, sanctions, securities and age verification, where the law turns on where someone is. See geolocation compliance.
Insurance. Evidence that a device was, or was not, at the site of a claim.
Gig and field work. Confirming a worker is at the job, without tracking them between jobs.
Autonomy and robotics. A checkable statement of where a machine was when it acted.
AI agents. Requiring a location proof from a person’s phone before an AI agent acts on their behalf. See Frontier AI access is a location problem.
Payments. Approving a wire or a card-not-present payment only when the approver’s device is where it should be. See location factor authentication.

What “trusted” means

Trusted location data claims that the result can be verified: that it came from a genuine device running genuine code, that nobody altered it, and that it answers the question that was asked. It makes no claim to be more accurate than other methods.

Octet builds on technology that the U.S. Army, U.S. Air Force and NATO forces tested across the U.S. and Europe during classified demonstrations in 2023, 2024 and 2025.

What this does not establish

A proof shows that a genuine device produced the result and that nobody changed it. It does not show that the sensors and signals were not manipulated. And a verdict answers for a device, not a person: it belongs alongside identity verification, not in place of it.

Three ways to use it

Mobile SDK for iOS and Android, self-serve at sdk.octetproof.com. Docs.
LFA, an authenticator app and OpenID Connect provider that adds location to sign-in. Docs.
Octet Browser, a country verdict for web sessions with no install. It uses browser and network signals rather than hardware attestation, and it is not proof of a person’s presence. Docs.

All three are priced per active user per month, and verification is free. See pricing.