> For the complete documentation index, see [llms.txt](https://surf-2.gitbook.io/surfliquid-docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://surf-2.gitbook.io/surfliquid-docs/future-vision/institutional-grade-compliance-layer.md). # Institutional-Grade Compliance Layer ###
### Bringing regulated capital on-chain without breaking self-custody For crypto to become a true global financial substrate, it must serve two very different worlds at the same time: **Retail users who want simplicity, sovereignty, and yield.**\ **Institutions that require compliance, auditability, and enforceable controls.** Surf is designed to bridge this gap at the vault and execution layer, not by weakening decentralisation, but by making compliance programmable. *** ### **Permissioned Vaults for Regulated Entities** Surf enables the creation of permissioned smart vaults that operate under explicit regulatory and operational rules, while remaining non-custodial. These vaults can be configured for: * Whitelisted counterparties and operators * Jurisdiction-specific access controls * Mandated asset and venue allowlists * Pre-approved strategy scopes and risk limits Control is enforced by the Guardian Layer and deterministic rule engine, not by off-chain discretion. *** ### **Compliance at the Vault Layer, Not the Protocol Layer** Instead of embedding KYC and AML logic into the base protocol, Surf isolates compliance at the vault level: * Rule-based identity and access checks * Policy-driven transaction approval and rejection * Jurisdictional constraints on assets, venues, and flows * Automated enforcement without manual intervention This preserves a permissionless core while enabling regulated flows where required. *** ### **Auditability and Transparency by Design** Institutional capital requires continuous, verifiable oversight. Surf provides this natively: * Full on-chain audit trails of all strategy actions * Deterministic execution logs and state transitions * Reporting APIs for portfolio, exposure, and risk metrics * Proof-of-reserves and proof-of-solvency at the vault level * Time-stamped, immutable records suitable for regulatory review *** ### **Segregated Strategy Mandates** Each institutional vault can operate under a clearly defined mandate: * Hard allocation and exposure constraints * Asset class and venue restrictions * Leverage, duration, and liquidity limits * Automated circuit breakers and unwind rules * Independent strategy isolation and accounting Strategies cannot exceed their authorised envelope, even if the AI proposes it. *** ### **The Bridge Between Two Worlds** This architecture allows Surf to connect: Retail UX ↔ Institutional compliance\ DeFi yield markets ↔ TradFi governance standards\ Self-custody ↔ Regulatory control\ AI execution ↔ Deterministic oversight The result is a new class of on-chain infrastructure where: * Capital remains user-owned * Rules remain machine-enforced * Compliance remains programmable * Trust is derived from code, not intermediaries This is the foundation for bringing regulated balance sheets, treasuries, and asset managers into autonomous, non-custodial on-chain yield without compromising on security, transparency, or control.