The control layer for covered money instructionsEscrow first

Show what your office relied on before it released funds.

Veto requires a current Review Record — sources, limitations, and a recorded exception path — before consequential settlement-funds actions happen.

Review Record · current Source limitations · visible Exception · recorded
REVIEW RECORDSettlement Funds Instruction
Current
Prepared byM. Okafor · Escrow Officer
Recorded inVeto · File 24‑10882
Covered instruction
Release seller proceeds
Sources reviewed 3
  • Written instruction Signed · current
  • Settlement statement Matched
  • Account / payee check Matched — not live bank confirmation
This record shows what the office reviewed before acting. It does not authorize, guarantee, or release funds.
RELEASESeller proceeds
Ready
Supported by Review Record
24-10882 · current
Sebastian Heyneman
Founder

Sebastian Heyneman

Founder, Veto · Secretary, Orange County Escrow Association

The first escrow officer Sebastian met told him, “One bad wire, and it feels existential.” He started Veto to give escrow teams a clear, file-ready record of what the office reviewed before funds move — built from months inside escrow offices learning how callbacks break and where wire-fraud risk actually shows up.

Before Veto, Sebastian built data infrastructure for a bond-trading team at Millennium and joined early data teams at Notion, Asana, and 11x.

The problem

The old internet made it easy to send money. The AI internet makes it easy to impersonate the person asking for it.

The next generation of fraud will not mainly exploit missing data. It will exploit credible impersonation at the moment of action — believable emails, voice calls, documents, IDs, and signatures.

Permission to act is an office state — created by policy, evidence, source limitations, role, timing, and record. That is Veto.

Why not the tools you already have

Veto controls the moment of action. The rest don't.

Verification vendors, systems of record, and reconciliation tools each do real work. None of them stop a release on a stale or unsupported record.

Before a covered money instruction
Veto
Verification
System of record
Reconciliation
Records what the office relied on before it acted
Partial
Blocks a release on a stale or unsupported record
Makes each source's limitation visible on the file
Partial
Requires a named approver for every exception
Stales the record automatically when the file changes
Produces a reconstructable audit packet
Partial
Partial

Veto sits on top of these tools — it doesn't replace them. It turns what they output into a controlled, recorded decision to act.

The category

Existing software answers a different question.

Offices already store, verify, route, reconcile, and pay. None of those tools create a clean answer to the one question that matters after a loss.

Verification vendors ask
Does this data point look valid?
Payment systems ask
Can this money move?
Systems of record ask
What does the file say?
Reconciliation systems ask
What happened after money moved?
Veto asks
What did the office rely on before acting on this covered money instruction?
How Veto works

Model the state transition that matters.

Veto controls the moment an office converts mutable evidence into an accepted state — and then acts on it.

Input
Mutable evidence
Emails, PDFs, payoff demands, wire instructions, callbacks.
State
Accepted office state
Normalized into source rows, each with visible limitations.
Action
Covered instruction
The action policy says cannot proceed without review.
Control
Review Record, exception, or hold
A green path under 60 seconds, or an exception that cannot hide.
Outcome
Defensible by default
The file shows what the office relied on before it acted.
The artifact

A file-native record of what the office relied on.

Every covered instruction produces a Review Record: the instruction, the accepted state, the sources reviewed, the limitations that remain, what changed since the prior state, and who signed off.

It is written to read like part of the closing file — not a vendor receipt. When a material value changes after sign-off, the record goes stale, the instruction is blocked, and a v2 record or owner-approved exception is required.

See a full Review Record
REVIEW RECORD Pay payoff demand
Exception
Prepared byD. Reyes · Processor
Approved byS. Lin · Escrow Manager
Accepted state
Updated payoff — $418,200.00
Sources reviewed 4
  • Payoff demand Lender portal · current
  • Good-through date Valid · per diem noted
  • Destination account Changed since prior demand
  • Callback confirmation Recorded
Exception reason
Destination changed after prior review. Manager accepted the limitation; callback to a published lender number recorded before acceptance.
The office decides and acts under its escrow instructions and policies. Veto records the review.
Sources & limitations

A check is not permission — so Veto records the limit, not just the result.

Every piece of evidence becomes a source row that states what it supports and, in plain language, what it does not prove. The limitation is visible on the record — never buried in a provider response.

An account match supports account existence and a payee-name match. It does not prove live bank confirmation, account control, or permission to release funds. Veto makes that distinction part of the file.

Account / payee check
SOURCE ROW · 24-10882
Result Matched with limitation
Supports: account existence and payee-name match, per the provider response.
Does not prove: live bank confirmation, authority to receive funds, account control, or permission to release.
Freshness Current
Checked today. Re-checks required if the destination account changes.
Restricted detail In Vault
Account ending 1234 · raw value retained in Vault with access log.
The rule

Covered instructions require a Review Record or owner-approved exception.

You choose the instructions that cannot proceed without review. The Review Register shows the owner whether the rule was followed — current, stale, exceptioned, or missing.

Review Register // 11 files closing today
CoverageMissingStaleExceptions
Covered instructionFileReviewerStatus
Release seller proceeds24-10882M. OkaforCurrent
Accept updated payoff demand24-10774D. ReyesException
Accept changed seller destination24-10913Blocked
Treat buyer funds as usable24-10905J. PrattCurrent
Pay institutional payoff24-10861M. OkaforCurrent
Prior Review Record is stale. Seller proceeds destination changed after review. Create a v2 record or request an owner-approved exception.
REVIEW RECORDRelease seller proceeds
Stale
Material change detected
  • Seller destination Changed 11:42 AM
  • Prior record Superseded
  • Covered instruction Blocked pending v2
A release supported by a stale record cannot proceed. The block is automatic.
Material change

When the file changes after sign-off, the record goes stale — automatically.

A payoff amount, a destination account, a settlement statement, a signer: when a material value changes after a Review Record is signed, the prior record is superseded and the covered instruction is blocked.

No one has to remember to re-check. The block holds until a v2 record is signed or an owner approves an exception with the limitation named.

Exceptions

An exception is a named acceptance — never a silent bypass.

When policy requires it, an officer requests an exception. The approver sees the sources, the limitation, the action, and the reason before deciding. The exception, the approver, and the reason all land on the record.

The green path compresses to under sixty seconds. The exception path is impossible to hide.

EXCEPTIONProceed despite source limitation
Approved
Requested byD. Reyes · Processor
Approved byS. Lin · Escrow Manager
Reason
Account / payee check returned a name match but not live bank confirmation. Callback to a published lender number recorded before acceptance.
Limitation accepted
No live bank confirmation available
This exception permits the office to act despite the limitation described. Veto records the exception. The office decides.
Veto Core

One control layer, built from durable primitives.

The same kernel runs escrow today and other fiduciary money releases next. Escrow is the first domain pack.

GUARD

Policy controls

Define covered instructions, required sources, freshness windows, and exception paths.

SOURCES

Source rows & limitations

Every claim a source supports — and, in plain language, what it does not prove.

QUEUE

Policy-generated work

Not a generic todo list. Each item is an obligation to resolve a file-state gap.

REVIEW RECORDS

Retained artifacts

File-native records of what was reviewed before a covered instruction was acted on.

RELEASES

Pre-action gate

Release support that expires and invalidates the moment a material value changes.

MATCHES

Post-action comparison

When activity data exists, compare what actually moved against the Review Record.

VAULT

Restricted evidence

Account numbers, IDs, and raw provider responses with field-level access and logs.

SIGNALS

Events & blockers

Material changes, alerts, holds, and incidents across every open file.

STANDARD

Control framework

Coverage reporting that says control configured — never “certified safe.”

Product principles

The beliefs the product is built on.

01

Source is not truth

A source supports a claim. It does not become true by existing.

02

Check is not permission

An account match, identity result, callback, or extraction does not authorize action.

03

Action is the atomic object

Model covered instructions and controlled actions — not just files, documents, or tasks.

04

Every claim has a limitation

Limitations belong on the Review Record, not hidden inside provider responses.

05

Material changes stale records

If a file state changes after reliance, prior records become stale, superseded, or void.

06

The busy-Friday test

If the office would bypass the control on a busy Friday, it has not yet become required.

Veto Standard

A practical control framework. Not a certification.

Veto Standard maps covered-instruction controls to ALTA Best Practices, office policy, underwriter expectations, and E&O questions.

It never claims a file is safe, fraud-cleared, or legally approved. It reports what is actually true: control configured, Review Record present, limitations visible, exception recorded.

Explore Veto Standard
Control catalog // VS-1 … VS-10
VS-1Covered instructions require a current Review Record.
VS-2Material changes stale prior Review Records.
VS-4Every source row has visible limitations.
VS-5Exceptions require a named approver and reason.
VS-6Release support expires and invalidates on material change.
VS-8Restricted evidence access is logged.
The long arc

Controls make risk observable. Observable risk becomes underwritable.

Veto does not start as a broker, MGA, or guarantee. It starts as the system that produces underwriting-grade Review Records — turning fuzzy social-engineering risk into structured, observable control data.

01

Controls create Review Records.

02

Records create structured telemetry.

03

Telemetry makes risk observable.

04

Observable risk becomes underwritable.

% covered instructions with current records  ·  % releases from stale records  ·  % material changes after reliance  ·  % exceptions per 100 releases
Boundary

Veto records the review. It does not act.

What Veto does
  • Defines covered instructions that cannot proceed without review
  • Normalizes evidence into source rows with visible limitations
  • Produces Review Records, exceptions, holds, and audit packets
  • Stales records when a material value changes after sign-off
  • Records who reviewed, who approved, and what was relied on
What Veto does not do
  • Move money, or replace the bank portal or system of record
  • Approve a release, or turn a check into permission
  • Authenticate payees beyond a source’s actual claim
  • Provide legal, title, or tax advice; interpret trust powers
  • Guarantee safety, clear fraud, or make funds safe to send

The office decides and acts under its escrow instructions and policies.

Who it's for

Built for the accountable people in the file.

Fiduciaries don't buy infrastructure because it's elegant. They adopt controls because the absence of controls creates blame, loss, and exposure.

EO
Escrow officer

Can I act?

A fast green path to a defensible record — and an exception path when the file isn't clean.

MO
Manager / owner

Will my office hold?

The Review Register shows whether covered instructions had current records or approved exceptions.

PR
Processor

What's still missing?

A queue of policy-generated obligations to resolve — not a generic todo list.

WT
Wire / trust accounting

Is this release supported?

Release support that expires and invalidates the moment a material value changes.

RR
Restricted reviewer

Who saw what?

Field-level access to sensitive evidence, with every view logged in the Vault.

AU
Auditor / underwriter

Can this be reconstructed?

An audit packet with policy version, source manifest, event log, exceptions, and record status.

Every fiduciary organization now needs a control layer between communication and action.

Veto Company Thesis
We already build for this industry

Free, public-interest tools for escrow.

Before Veto sold anything, we built tools the escrow and title community uses for free — from public data, with no regulator affiliation.

Pricing

Priced for controls and records — not raw checks.

Adoption is owner-led and policy-led. Start with one covered instruction; expand control by control.

Veto Release
For an office adopting its first covered instruction.
  • Settlement Funds Review Records
  • Covered-instruction rules & source rows
  • Owner-approved exceptions
  • Review Register
Request access
Enterprise
For multi-branch operators and underwriters.
  • Integrations, API & webhooks
  • Multi-branch controls
  • Insurer / underwriter reports
  • Custom policy mapping
Talk to the team
Questions

What Veto is — and isn't.

Does Veto move money?+
No. Veto does not move money, initiate wires, or touch your bank portal. It records the evidence state and the office's review before a covered instruction is acted on. The office decides and acts under its own escrow instructions and policies.
Does it replace Qualia, SoftPro, or ResWare?+
No. Veto is a control layer that sits on top of the system of record you already run. It integrates with it and writes back Review Records — it does not replace your production system, your email, or your verification vendors.
Isn't this just a checklist?+
No. A checklist can be completed and ignored. Veto models the covered instruction itself: it blocks the action when a record is missing or stale, requires a named approver for exceptions, and produces a reconstructable artifact. No Review Record, no covered instruction.
What is a “covered instruction”?+
It's an action your office policy says cannot proceed without review — for example, releasing seller proceeds, paying a payoff demand, accepting a changed destination account, or treating buyer funds as usable. You choose which instructions are covered.
Is Veto a certification that a file is safe?+
No. Veto never says “certified safe,” “fraud cleared,” or “legally approved.” It reports only what is true: control configured, Review Record present, limitations visible, exception recorded. It does not guarantee safety or clear fraud.
How does the green path stay fast?+
When sources are present and nothing has materially changed, an officer confirms the extracted values, reviews the limitations, and signs — a target of under sixty seconds. AI may prefill source rows, but officers confirm. Low-confidence inputs never silently prefill a record as current.
What happens when something changes after review?+
The prior Review Record is staled or superseded, the affected covered instruction is blocked, and a queue item is generated. A new v2 record or an owner-approved exception is required before the action can proceed.
Who's the buyer — is this developer-first?+
No. Adoption is owner- and policy-led, with product-led daily usage. An owner mandates the first covered instruction; officers use it on real files; the rule expands control by control. The API and developer motion come later.
Request access

Make the next covered instruction defensible.

Veto is rolling out with a small group of escrow and title offices. Tell us the first instruction you want under control.
Prefer to look first? See a sample Review Record.