Skip to main content
Request a demo
Solutions

Banks

For a bank the question is rarely whether tokenization is interesting. It is whether the controls are evidenceable to somebody who will ask for the mechanism, not the intention.

One transaction boundaryThree stacked elements — a record, a rule and a ledger posting — enclosed by a single boundary, indicating that all three commit together or not at all.ONE TRANSACTION BOUNDARYRecordwhat is trueRulewhat is permittedPostingwhat it did to the bookscommit together

What it changes

  1. Controls you can demonstrateTenant isolation in three independent layers, append-only ledger and audit enforced by the database, and maker-checker bound to a hash of what was approved.
  2. Segregation of dutiesConflicting roles detected and surfaced rather than discovered during an examination.
  3. An audit trail that fails rather than merely recordsHash-chained so tampering is detectable, and append-only at the database so it is refused.
Ask, agree, then actThree steps. One person requests, a different person approves, and only then does the state change. The approval binds to what was requested, so editing it afterwards invalidates the sign-off.Requestone personApprovea different oneActnow it movesThe approval binds to what was asked.Edit it afterwards and the sign-off is void.
Every irreversible act on this platform takes this shape, whatever the subject of the page: one person asks, a different one agrees, and only then does anything move.

What it includes

RBAC and ABACOne pure authorisation function, failing closed, with tenant boundary checked before permission.
Step-up authenticationRequired within a short window for the actions that move money.
Retention and replayDecisions replayable under the policy version that governed them.

See it against something real.

Bring an instrument you are actually considering. Structuring it is the only way to judge whether the model fits.

Request Enterprise DemoBack to solutions
Your instrument, against this modelAn unspecified asset on the left feeds four stages: structure, compliance policy, the offering book and the register. The asset is drawn as an outline because it is the reader's, not the platform's.Your assetwhatever it isStructurePolicyBookRegister