VaultFi

Compliance through transparency.

VaultFi reviews each service according to how that service actually works rather than assuming that one regulatory classification applies to the entire platform.

This page describes VaultFi's compliance-review program. It is not a representation that VaultFi is licensed, registered or approved in every jurisdiction. Products may require additional legal review, registrations, provider agreements, identity checks or geographic restrictions before broader availability.

Product review

Core Wallet

Review focuses on customer authorization, custody/control, money-transmission boundaries, sanctions and consumer disclosures.

EXTERNAL REVIEW
Send & Receive

Reviewed separately for authorization, transaction role, fee sponsorship, sanctions and recordkeeping.

EXTERNAL REVIEW
Convert

THORChain Convert requires review of VaultFi's exchange/intermediation role, money-transmission rules, sanctions and jurisdiction restrictions.

HIGH PRIORITY
Trading Wallet

Reviewed for custody, accounting, settlement, withdrawals and applicable financial regulation.

HIGH PRIORITY
Cashout

Cashout is treated separately from the core wallet and requires detailed review of payout, AML/KYC, sanctions, licensing and provider responsibilities.

VERY HIGH PRIORITY
Premium & Rewards

Reviewed for subscription, fee representations, reward rules, taxes, promotions and consumer disclosures.

EXTERNAL REVIEW
Crypto Switch

Automated Convert activity is reviewed for consent, transaction authority, automation and financial regulatory considerations.

HIGH PRIORITY
Future Cards / Lifestyle

Future card and lifestyle programs will require provider agreements and product-specific legal approval before launch.

PRE-LAUNCH REVIEW

Our review principles

Current program status

VaultFi has completed its internal product inventory and regulatory issue mapping. Independent legal and regulatory review remains required before VaultFi treats a product as externally approved from a legal perspective.

VaultFi is also building dedicated sanctions/risk controls and a formal information-security control program.