Institutional capital is moving on-chain. Compliance judgment has not moved with it.
Matching engines, custody, and settlement rails for tokenized assets already work. What does not scale is the apparatus around them: proving, continuously and to several supervisors at once, that every trade obeyed the rules that applied to it. That burden grows with headcount, not with code. It is the binding constraint on institutional adoption.
Four surfaces. Two planes.
One binding chain.
Off-chain, the proprietary judgment core: the PCE compiles regulation and mandate into typed, counsel-attested policy, and the AIA wraps every decision in a co-signed receipt. On-chain, the open substrate: OMA enforces the policy before settlement, and STN matches and settles confidentially. A single policy-commit hash threads all four, so the rule that was authored is provably the rule that executed.
Compiles regulatory corpora and private mandates into typed, versioned, source-pinned policy bundles. AI extracts under glass-box constraints; counsel reviews every uncertain clause; each compile emits a policyCommit hash, the first link of the binding chain.
- //Regulation + mandate → signed policy bundle
- //Counsel-in-the-loop attestation, clause by clause
- //Versioned, source-pinned, deterministic
Renders every trade decision as a human-readable, co-signed receipt: what was approved, under which policy commit, by whom. Built on open clear-signing standards and verifiable by any supervisor, without trusting OnTrade.
- //Plain-language receipt per trade intent
- //Multi-signer quorum: NAV · custody · risk
- //ERC-7730 / ERC-8176 clear-signing standards
The institution's on-chain control plane. An ERC-7579 modular smart account that checks every leg against the pinned policy before settlement (Validator, Executor, Hook) and emits evidence by construction.
- //Pre-trade policy gate: admit · reject · escalate
- //Atomic multi-leg execution, all-or-nothing
- //EvidenceEmitted receipts on every settlement
The confidential matching and settlement spine. Encrypted intents are matched by computing directly on ciphertexts and settled atomically. Positions never leak, and compliance travels with the trade.
- //Three execution modes on one control plane
- //FHE matching: the engine never sees plaintext
- //Atomic settlement via confidential transfers
Verified decisions, with evidence attached.
OnTrade is not a venue, an exchange, a custodian, or an asset manager. It is the compliance-and-evidence layer beneath them, and what it sells has four properties legacy stacks cannot deliver.
Built for the people who
answer to the regulator.
The buyer is compliance, operations, and depositary oversight: the budgets that are non-discretionary and growing. The front office wins too: mandate-to-market in days, not weeks.
Open rails. Owned
judgment.
The execution substrate is built on open standards and published deliberately; necessary is not defensible. What compounds is the judgment layer above it: compiled policy, attested decisions, and the record of every verdict. Specific counterparties are disclosed under NDA.
Onboard a mandate.
Access is rolling out to a scoped cohort of regulated institutions through structured, milestone-gated pilots, from mandate intake to a replayable audit pack on your own book. Join the waitlist and we’ll coordinate briefings as your category opens.