[Capitis] Identity graph

Five identifiers. One end‑user. No raw PII.

Email, phone, card token, bank link, wallet — hashed on your side, resolved to a single canonical end‑user, revocable one identifier at a time.

Hashed in transit

HMAC‑SHA256, your salt

Identifiers are hashed before they leave your stack. Capitis stores the digest, never the value.

Cross‑publisher

One call to resolve

Ask whether two identifiers belong to the same person and get a confidence score, not a guess.

Revocation

Per identifier, not per user

Revoke a card token without dropping the email. Deletions propagate through the graph and the audit log records them.