In an interview published August 16, 2026 by Biometric Update, Socure's chief product officer, Chung-Man Tam, describes a four-step chain of trust — the person's identity, delegated authority, the agent's identity and scope, and each action's compliance with that scope — and predicts that "verifying agents will become as routine as verifying humans." Socure measured a rise of more than 8,000% in AI-driven fraud attacks across its network in 2025. What the interview never says is how that "authorization" translates concretely, action by action, at the exact moment it matters.
There's a real temptation, reading this interview, to conclude Socure is building a component every AI agent vendor will soon need — and for part of the market, the multi-tenant platforms that host agents from multiple, unvetted origins, that's probably true: they can't settle for a button, they need to know cryptographically who's acting before even asking who authorizes it. But generalizing that need to any product that touches AI agents would be a category error, and an SMB buying an AppH agent for its bookkeeping doesn't have that problem: it has a single agent, operated by a single vendor, and the real question was never "who is this agent" but "who said yes before it acted." Socure is inventing identity infrastructure for a world where authority is delegated across chains of agents unknown to each other; AppH answers a narrower, more verifiable question: with us, there has never been an agent action without a human click, not because we promised it in a press release, but because that's literally what the product does, every time, with no exception that could be switched off. Agent identity depth is a real subject for the market Socure serves; it's never a substitute for the question of who pressed the button.