{"templateId":"markdown","versions":[{"version":"v1.40","label":"v1.40 STS","link":"/products/custody/v1.40/concepts/governance/domains","default":true,"active":false,"folderId":"c15a2701"},{"version":"v1.39","label":"v1.39 STS","link":"/products/custody/v1.39/concepts/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.38","label":"v1.38 STS","link":"/products/custody/v1.38/concepts/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.34","label":"v1.34 LTS","link":"/products/custody/v1.34/concepts/governance/domains","default":false,"active":true,"folderId":"c15a2701"},{"version":"v1.26","label":"v1.26 LTS","link":"/products/custody/v1.26/concepts/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.19","label":"v1.19 LTS","link":"/products/custody/v1.19/concepts/governance/domains","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.15","label":"v1.15 LTS","link":"/products/custody/v1.15/concepts/governance/domains","default":false,"active":false,"folderId":"c15a2701"}],"sharedDataIds":{"sidebar":"sidebar-products/custody/@v1.15/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Domains","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"domains","__idx":0},"children":["Domains"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Executive summary"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["A domain is an organizational boundary that groups accounts, users, and policies under a single governance structure."]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Domains form a hierarchy (parent → child) mirroring your business structure."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Data is isolated. Users can only access their assigned domain and its subdomains."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Policies can cascade down the hierarchy or be enforced at specific levels."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Governing strategies control whether child domains can override parent policies."]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"success","name":"Why this matters"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domains are your primary tool for segregating assets, users, and governance rules. Proper domain design directly impacts your ability to meet regulatory requirements (client asset segregation), enforce operational controls (regional policies), and scale your custody operations (adding new business units or clients). Misconfigured domain hierarchies can lead to unintended policy bypasses or access violations."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["For architects and operators"]},": Your domain structure is defined in the genesis block and is foundational — plan carefully before deployment. Consider how governing strategies (",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["ConsiderDescendants"]}," vs. ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["CoerceDescendants"]},") will affect policy inheritance as you add subdomains."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"what-are-domains","__idx":1},"children":["What are domains?"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A domain is a logical container that:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Segregates data"]},": Users, accounts, vaults, and other entities belong to specific domains"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Defines governance boundaries"]},": Policies are defined at the domain level and control actions within that domain"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Establishes user access"]},": Users can only operate within their assigned domain (and potentially its subdomains)"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Think of domains as organizational units that mirror your business structure — headquarters, regional offices, business units, or client segregation."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-hierarchy","__idx":2},"children":["Domain hierarchy"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domains form a tree structure with a single ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["root domain"]}," at the top and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["subdomains"]}," beneath it."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n Root[\"Root Domain (Company HQ)\"]\n A[\"Subdomain A (APAC Region)\"]\n A1[\"Subdomain A1 (Japan Office)\"]\n A2[\"Subdomain A2 (Singapore Office)\"]\n B[\"Subdomain B (EMEA Region)\"]\n B1[\"Subdomain B1 (London Office)\"]\n C[\"Subdomain C (Americas Region)\"]\n\n Root --> A\n Root --> B\n Root --> C\n A --> A1\n A --> A2\n B --> B1\n","diagramHtml":"","diagramHtmlDark":""},"children":["flowchart TB\n Root[\"Root Domain (Company HQ)\"]\n A[\"Subdomain A (APAC Region)\"]\n A1[\"Subdomain A1 (Japan Office)\"]\n A2[\"Subdomain A2 (Singapore Office)\"]\n B[\"Subdomain B (EMEA Region)\"]\n B1[\"Subdomain B1 (London Office)\"]\n C[\"Subdomain C (Americas Region)\"]\n\n Root --> A\n Root --> B\n Root --> C\n A --> A1\n A --> A2\n B --> B1\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"key-hierarchy-rules","__idx":3},"children":["Key hierarchy rules"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Rule"},"children":["Rule"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Single root"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Every environment has exactly one root domain"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Parent-child relationships"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Each subdomain has exactly one parent domain"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["No upward access"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Users cannot submit intents to parent domains, only to their own domain or its subdomains"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Inheritance"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Subdomains can inherit policies from parent domains (depending on configuration)"]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"compliance-domains","__idx":4},"children":["Compliance domains"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["compliance domain"]}," is a specialized domain that manages transaction screening and Travel Rule compliance. When you enable compliance features, you create a compliance domain as a child of the root domain. Transaction screening then applies to all accounts in the compliance domain's child domains."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This pattern uses the domain hierarchy to scope compliance:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The compliance domain contains compliance-specific users (compliance managers, supervisor agents)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Child domains inherit the compliance policies from the compliance domain"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You can use ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"#domain-injection"},"children":["domain injection"]}," to insert a compliance domain between the root and existing child domains"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For setup instructions, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/ui/transaction-screening-and-risk-management#create-a-compliance-domain"},"children":["Create a compliance domain"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"multi-tenancy","__idx":5},"children":["Multi-tenancy"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The domain hierarchy enables multi-tenancy patterns:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Business unit segregation"]},": Separate domains for different parts of your organization"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Client segregation"]},": Each client in its own subdomain with isolated data"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Regulatory boundaries"]},": Domains aligned with jurisdictional requirements"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Environment separation"]},": Development, staging, and production as separate domain trees"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Data entities (accounts, vaults, users) belong to exactly one domain and cannot be directly accessed from other domains."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"governing-strategies","__idx":6},"children":["Governing strategies"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["A domain's ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["governing strategy"]}," determines how its policies interact with subdomain policies."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"considerdescendants","__idx":7},"children":["ConsiderDescendants"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The parent domain's policies are ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["considered alongside"]}," subdomain policies. Both the parent and child policies may apply to intents in the subdomain."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n subgraph Parent[\"Parent Domain\"]\n PP[\"Parent policy: All transfers need 1 approval\"]\n end\n subgraph Child[\"Child Domain\"]\n CP[\"Child policy: High-value transfers need CFO approval\"]\n end\n Parent --> Child\n Result[\"Result: Both policies apply to high-value transfers\"]\n Child --> Result\n","diagramHtml":"","diagramHtmlDark":""},"children":["flowchart TB\n subgraph Parent[\"Parent Domain\"]\n PP[\"Parent policy: All transfers need 1 approval\"]\n end\n subgraph Child[\"Child Domain\"]\n CP[\"Child policy: High-value transfers need CFO approval\"]\n end\n Parent --> Child\n Result[\"Result: Both policies apply to high-value transfers\"]\n Child --> Result\n"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Use case"]},": Establishing baseline rules while allowing subdomains to add their own requirements."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"coercedescendants","__idx":8},"children":["CoerceDescendants"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The parent domain's policies ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["override"]}," subdomain policies for matching intents. The subdomain's own policies are ignored when the parent has a matching policy."]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"flowchart TB\n subgraph Parent[\"Parent Domain\"]\n PP[\"Parent policy: All transfers need 3 approvals\"]\n end\n subgraph Child[\"Child Domain\"]\n CP[\"Child policy: Transfers need 1 approval (IGNORED)\"]\n end\n Parent --> Child\n Result[\"Result: Only parent policy applies 3 approvals required\"]\n Child --> Result\n","diagramHtml":"","diagramHtmlDark":""},"children":["flowchart TB\n subgraph Parent[\"Parent Domain\"]\n PP[\"Parent policy: All transfers need 3 approvals\"]\n end\n subgraph Child[\"Child Domain\"]\n CP[\"Child policy: Transfers need 1 approval (IGNORED)\"]\n end\n Parent --> Child\n Result[\"Result: Only parent policy applies 3 approvals required\"]\n Child --> Result\n"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Use case"]},": Enforcing organization-wide rules that cannot be weakened by subdomains. Essential for ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/governance/policies#breakglass-policies"},"children":["breakglass policies"]},"—emergency override mechanisms that allow senior management to bypass normal approval workflows in exceptional circumstances (e.g., court orders, lost keys, misconfigured policies)."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"policy-scope","__idx":9},"children":["Policy scope"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Policies use ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["scope"]}," settings to define where they apply:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Scope"},"children":["Scope"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Self"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Policy applies only to intents targeting this domain"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["Descendants"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Policy applies only to intents targeting subdomains"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["SelfAndDescendants"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Policy applies to both this domain and all subdomains"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The combination of governing strategy (on domains) and scope (on policies) determines the complete policy application behavior."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For detailed examples, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/governance/policies#policy-scope"},"children":["Policy scope"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-lifecycle","__idx":10},"children":["Domain lifecycle"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Domains progress through several states:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"State"},"children":["State"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Description"},"children":["Description"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Created"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain exists and is operational"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Locked"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain is disabled; no intents can be executed within it"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unlocked"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Domain is re-enabled after being locked"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Locking a domain is useful for:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Suspending a business unit"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Freezing operations during an investigation"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Decommissioning an organizational unit"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"domain-injection","__idx":11},"children":["Domain injection"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ripple Custody"," supports ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["domain injection"]}," — inserting a new domain between an existing parent and its children. This allows you to:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add a new governance layer without restructuring"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Apply new policies to a subset of existing subdomains"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Reorganize hierarchy as your business evolves"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For implementation details, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/api/environment/domain"},"children":["Domain injection"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"next-steps","__idx":12},"children":["Next steps"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/overview/governance"},"children":["Governance framework"]},": Return to the governance overview"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/governance/intents"},"children":["Intents"]},": Learn about the intent lifecycle"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/governance/policies"},"children":["Policies"]},": Understand how policies control actions"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/api/environment/domain"},"children":["Domain management"]},": Learn how to manage domains"]}]}]},"headings":[{"value":"Domains","id":"domains","depth":1},{"value":"What are domains?","id":"what-are-domains","depth":2},{"value":"Domain hierarchy","id":"domain-hierarchy","depth":2},{"value":"Key hierarchy rules","id":"key-hierarchy-rules","depth":3},{"value":"Compliance domains","id":"compliance-domains","depth":3},{"value":"Multi-tenancy","id":"multi-tenancy","depth":2},{"value":"Governing strategies","id":"governing-strategies","depth":2},{"value":"ConsiderDescendants","id":"considerdescendants","depth":3},{"value":"CoerceDescendants","id":"coercedescendants","depth":3},{"value":"Policy scope","id":"policy-scope","depth":2},{"value":"Domain lifecycle","id":"domain-lifecycle","depth":2},{"value":"Domain injection","id":"domain-injection","depth":2},{"value":"Next steps","id":"next-steps","depth":2}],"frontmatter":{"seo":{"title":"Domains"}},"lastModified":"2026-04-07T19:14:09.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/custody/v1.34/concepts/governance/domains","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}