Privy’s policy engine allows your application to restrict the actions that can be taken with wallets. Policies enable you to configure:
  • Transfer limits
  • Time-bound signers
  • Allowlists and denylists of transfer recipients
  • Allowlists and denylists of smart contracts and programs
  • Allowlists and denylists of networks
  • Allowed time window for key export
  • Granular constraints around calldata and parameters that can be passed to smart contracts
  • Restrictions around signatures needed for transactions, such as EVM typed data (EIP712)
This ensures that wallets can only ever be used to take actions your application intends to take. Managing policies in the Privy Dashboard Learn more about policies and how to configure them for your wallets.