Trust Vault Security Framework
Trust Vault is Cregis' key-management and authorization infrastructure for institutional custody, payments, pooling, stablecoin/RWA issuance, and on-chain asset governance. It brings key protection, customer governance, independent risk verification, operation authorization, auditability, and on-chain execution into one system.
MPC + TEE
The asset signing key is sharded at creation. ISP and ISV each hold one share in independent TEEs. Signing needs both parties, so no single party can sign alone.
HSM
The signing key sits in a local or cloud HSM. TrustCore verifies authorization and the ISV co-signature, then calls the HSM to sign and protect the key.
Local TEE
The signing key is generated and sealed inside TrustCore, running in Intel SGX or AWS Nitro Enclave. Signing, derivation and backup decryption run inside the TEE.
Asset Key
Asset Key
Partition
Asset Key
Partition
Locally Stored
Controller Key
A Zero-Trust Architecture For Your Business
A distributed authority model that eliminates single points of control and ensures institutional sovereignty
Verification
Verification authority can be delegated to local regulatory bodies or industry associations
Processing
Processing authority can be assigned to professional technical service providers
Operational
Operational Command authority remains with the end client
Rule-makers and transaction executors operate in separate domains with system-enforced boundaries
Rule-makers and transaction executors operate in separate domains with system-enforced boundaries
Asset Isolated for
Distributed Risk
Multi-layered separation design that contains and minimizes cross-contamination risks
Combining protection with agility
Operational Transparency
Full Audit Trail
Sign What You See
Secure Every Transaction
Digital Asset Solutions for Enterprise
Copyright © 2025 Cregis. All rights reserved.
These services are provided by our licensed entity in the Autonomous Island of Anjouan, Union of Comoros ("Anjouan"), and/or together with or in collaboration with third-party service providers or vendors. The provision of these services shall be governed by the laws of Anjouan. When using these services, you confirm and consent that you are also responsible for complying with the applicable laws of your domicile and/or incorporation and where your operations are located, should you proceed to subscribe to these services.
Certifications
Licenses
