{"templateId":"markdown","versions":[{"version":"v1.39","label":"v1.39 STS","link":"/products/custody/governance/domains","default":true,"active":true,"folderId":"c15a2701"},{"version":"v1.38","label":"v1.38 STS","link":"/products/custody/v1.38/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.34","label":"v1.34 LTS","link":"/products/custody/v1.34/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.26","label":"v1.26 LTS","link":"/products/custody/v1.26/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.19","label":"v1.19 LTS","link":"/products/custody/v1.19/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.15","label":"v1.15 LTS","link":"/products/custody/v1.15/governance/domains","default":false,"active":false,"folderId":"c15a2701"}],"sharedDataIds":{"sidebar":"sidebar-products/custody/@v1.15/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Domains","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"domains","__idx":0},"children":["Domains"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Executive summary"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["A domain is an organizational boundary that groups accounts, users, policies, and other entities under a single governance structure."]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Domains form a hierarchy that mirrors your business structure."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Data is isolated by domain."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Users operate in their own domain and, where permitted, descendant domains."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Policies can apply to one domain, descendant domains, or both."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Governing strategies control whether parent-domain policies are considered with or override child-domain policies."]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"success","name":"Why this matters"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domains are the main tool for segregating assets, users, and governance rules. Domain design affects client asset segregation, regional controls, treasury operations, compliance review, reporting, and emergency response. Poorly designed hierarchies can cause unintended access paths, duplicated policies, or parent policies applying more broadly than intended."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"what-domains-contain","__idx":1},"children":["What domains contain"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A domain is a logical container for domain-owned records:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Entity"},"children":["Entity"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Why domain ownership matters"},"children":["Why domain ownership matters"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Determines where users can submit and approve intents."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Accounts and vaults"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Keeps assets and signing material aligned to an operational boundary."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Policies"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Defines the approval rules that apply in the domain."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Endpoints"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Scopes trusted addresses and external destinations."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Requests and events"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Provides domain-level audit and operational visibility."]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-hierarchy","__idx":2},"children":["Domain hierarchy"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Every environment has a root domain. Subdomains sit beneath it in a tree."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n Root[\"Root domain\"]\n APAC[\"APAC region\"]\n EMEA[\"EMEA region\"]\n Japan[\"Japan\"]\n Singapore[\"Singapore\"]\n London[\"London\"]\n\n Root --> APAC\n Root --> EMEA\n APAC --> Japan\n APAC --> Singapore\n EMEA --> London\n","diagramHtml":"

Root domain

APAC region

EMEA region

Japan

Singapore

London

","diagramHtmlDark":"

Root domain

APAC region

EMEA region

Japan

Singapore

London

"},"children":["flowchart TB\n Root[\"Root domain\"]\n APAC[\"APAC region\"]\n EMEA[\"EMEA region\"]\n Japan[\"Japan\"]\n Singapore[\"Singapore\"]\n London[\"London\"]\n\n Root --> APAC\n Root --> EMEA\n APAC --> Japan\n APAC --> Singapore\n EMEA --> London\n"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Rule"},"children":["Rule"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Single root"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Every environment has one root domain."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["One parent"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Each subdomain has one parent domain."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No upward access"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users cannot submit intents to parent domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Descendant operation"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users can target their own domain and, where permitted by policy, descendant domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Inheritance"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Parent-domain policies can affect child-domain intents, depending on policy scope and governing strategy."]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"governing-strategies","__idx":3},"children":["Governing strategies"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A domain's governing strategy determines how its policies interact with subdomain policies."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"considerdescendants","__idx":4},"children":["ConsiderDescendants"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Parent-domain policies are considered alongside child-domain policies. This is useful when the parent sets baseline oversight and child domains add local rules."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n Parent[\"Parent policy: all transfers need one approval\"]\n Child[\"Child policy: high-value transfers need CFO approval\"]\n Result[\"Both policies can be considered for child-domain intents\"]\n Parent --> Result\n Child --> Result\n","diagramHtml":"

Parent policy: all transfers need one approval

Child policy: high-value transfers need CFO approval

Both policies can be considered for child-domain intents

","diagramHtmlDark":"

Parent policy: all transfers need one approval

Child policy: high-value transfers need CFO approval

Both policies can be considered for child-domain intents

"},"children":["flowchart TB\n Parent[\"Parent policy: all transfers need one approval\"]\n Child[\"Child policy: high-value transfers need CFO approval\"]\n Result[\"Both policies can be considered for child-domain intents\"]\n Parent --> Result\n Child --> Result\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"coercedescendants","__idx":5},"children":["CoerceDescendants"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Matching parent-domain policies override child-domain policies. This is useful when the parent must enforce controls that child domains cannot weaken, such as emergency, compliance, or group-wide risk controls."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n Parent[\"Parent policy: emergency freeze requires senior approval\"]\n Child[\"Child policy: routine transfer approval\"]\n Result[\"Parent policy overrides matching child policy\"]\n Parent --> Result\n Child -. ignored when coerced .-> Result\n","diagramHtml":"

ignored when coerced

Parent policy: emergency freeze requires senior approval

Child policy: routine transfer approval

Parent policy overrides matching child policy

","diagramHtmlDark":"

ignored when coerced

Parent policy: emergency freeze requires senior approval

Child policy: routine transfer approval

Parent policy overrides matching child policy

"},"children":["flowchart TB\n Parent[\"Parent policy: emergency freeze requires senior approval\"]\n Child[\"Child policy: routine transfer approval\"]\n Result[\"Parent policy overrides matching child policy\"]\n Parent --> Result\n Child -. ignored when coerced .-> Result\n"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["CoerceDescendants"]}," only when the override is intentional and understood by operators."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"policy-scope-and-inheritance","__idx":6},"children":["Policy scope and inheritance"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Policy scope defines where a policy applies relative to the domain where the policy is created."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scope"},"children":["Scope"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Applies to"},"children":["Applies to"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Self"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Intents targeting the policy's own domain."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Descendants"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Intents targeting child domains."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SelfAndDescendants"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Intents targeting the policy's own domain and child domains."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The combination of domain governing strategy and policy scope determines policy inheritance."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"compliance-domains","__idx":7},"children":["Compliance domains"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A compliance domain is a specialized domain used to manage transaction screening, Travel Rule, quarantine release, and exception review. A compliance domain can sit above operational domains so compliance policies and reviewers can apply across those descendants."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Design considerations:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Compliance roles need read access to accounts, transactions, requests, events, and relevant policies."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Quarantine release policies should live where compliance reviewers can approve them."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Domain injection can add a compliance layer after launch if the original hierarchy needs to change."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"multi-tenancy","__idx":8},"children":["Multi-tenancy"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use domains for multi-tenancy when a boundary affects data access, approval policy, reporting, or operational ownership."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Pattern"},"children":["Pattern"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Domain model"},"children":["Domain model"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Client segregation"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["One subdomain per client or client group."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Business unit segregation"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["One subdomain per business unit."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Regional control"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["One subdomain per region or legal entity."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Treasury isolation"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Separate domains for asset classes, desks, or treasury teams."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Compliance oversight"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Compliance domain above operational domains."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Avoid deep hierarchies unless policy inheritance is clear. A flatter hierarchy is often easier to operate and audit."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-lifecycle","__idx":9},"children":["Domain lifecycle"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"State"},"children":["State"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Created"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain exists and can operate when unlocked."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Locked"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain activity is suspended."]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Unlocked"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain activity is enabled."]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Locking a domain is useful for investigations, temporary suspension, incident response, or decommissioning."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-injection","__idx":10},"children":["Domain injection"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domain injection inserts a new domain between an existing parent and its child domains. Use it to add a governance layer without rebuilding the entire hierarchy."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Common uses:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add compliance oversight above existing operational domains."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Group existing domains under a new regional parent."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Apply shared policies to a subset of existing child domains."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Retrofit a governance layer after launch."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For operations, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/governance/domains/manage-domains"},"children":["Manage domains"]}," and ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/governance/domains/inject-a-domain"},"children":["Inject a domain"]},". For fields and valid values, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/governance/domains/reference"},"children":["Domain reference"]},"."]}]},"headings":[{"value":"Domains","id":"domains","depth":1},{"value":"What domains contain","id":"what-domains-contain","depth":2},{"value":"Domain hierarchy","id":"domain-hierarchy","depth":2},{"value":"Governing strategies","id":"governing-strategies","depth":2},{"value":"ConsiderDescendants","id":"considerdescendants","depth":3},{"value":"CoerceDescendants","id":"coercedescendants","depth":3},{"value":"Policy scope and inheritance","id":"policy-scope-and-inheritance","depth":2},{"value":"Compliance domains","id":"compliance-domains","depth":2},{"value":"Multi-tenancy","id":"multi-tenancy","depth":2},{"value":"Domain lifecycle","id":"domain-lifecycle","depth":2},{"value":"Domain injection","id":"domain-injection","depth":2}],"frontmatter":{"seo":{"title":"Domains"}},"lastModified":"2026-08-04T20:25:11.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/custody/governance/domains","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}