Trust & compliance
Licensed partners today.Our own licenses next.
Trust in payments is earned in a specific order: controls first, partners of record second, licenses third. This page states exactly where Splash is on that path — nothing more, nothing less.
Splash is not yet a licensed money-services business. Today, licensed partners are the system of record for regulated activities; Splash operates the software and settlement layer between them.
Rent the license, then own it
The honest sequence for a new corridor: run on partners who already hold the licenses, prove volume and controls, then bring the licenses in-house. The roles that needs, and where each stands today. A counterparty is named once its agreement is signed:
| Role | What it means | Status |
|---|---|---|
| Payout of record | A locally licensed disbursement partner holds the licence and the client relationship in the destination market. Splash instructs; the partner pays out. | Not yet signed |
| Collection of record | A licensed provider holds incoming USD. This is the one role with a named provider anywhere on this page, because it is the one that is live. | Airwallex · live on the testnet corridor |
| FX and liquidity | A regulated venue prices and fills the USD leg, sourced per corridor as volume justifies a dedicated agreement. | Not yet signed |
| Client-asset custody | Client funds sit with a licensed custodian, never with Splash. splash_core structurally cannot hold a value-bearing field, and CI enforces that on every push. | Not yet signed |
The licensing path
- In process
Labuan FSA — money-broking application under preparation with counsel.
- Planned
BNM Money Services Business (Malaysia) and BSP registration (Philippines), sequenced by corridor demand.
Audit trail by construction
Every settlement produces a tamper-proof, Seal-encrypted audit record stored on Walrus and anchored on Sui, retained for seven years. Records are private by default; regulators and auditors can be granted visibility on authorization — decryption is a permissioned act, not a data request. This aligns with Sui's regulator-visible confidential-transfer direction: confidential to the public, verifiable to the people who are supposed to verify.
Controls that gate every payment
- Human approval
Every payment is prepared by 0xWal and released only by a human on the Action Queue — maker-checker, with dual approval above your threshold.
- Corridor gating
Corridors arm and pause under explicit controls; settlement halts on a peg deviation or compliance flag before any value moves.
- Partner custody
Licensed partners are the system of record for client funds. Splash-side control is maker-checker — 0xWal prepares, a named human releases — and splash_core holds no client value, which is a property CI enforces rather than a key policy asserted in prose.