{"templateId":"markdown","versions":[{"version":"v1.43","label":"v1.43 LTS","link":"/products/custody/overview/architecture","default":true,"active":false,"folderId":"c15a2701"},{"version":"v1.42","label":"v1.42 STS","link":"/products/custody/v1.42/overview/architecture","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.41","label":"v1.41 STS","link":"/products/custody/v1.41/overview/architecture","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.34","label":"v1.34 LTS","link":"/products/custody/v1.34/overview/architecture","default":false,"active":true,"folderId":"c15a2701"},{"version":"v1.26","label":"v1.26 LTS","link":"/products/custody/v1.26/overview/architecture","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.19","label":"v1.19 LTS","link":"/products/custody/v1.19/overview/architecture","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.15","label":"v1.15 LTS","link":"/products/custody/v1.15/overview/architecture","default":false,"active":false,"folderId":"c15a2701"}],"sharedDataIds":{"sidebar":"sidebar-products/custody/@v1.15/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"System architecture","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US"},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"system-architecture","__idx":0},"children":["System architecture"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The ","Ripple Custody"," platform is built on a layered architecture that separates concerns between user interaction, business logic, blockchain integration, and security. This page provides an overview of the system architecture and all its components."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"architecture-overview","__idx":1},"children":["Architecture overview"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The components of the ","Ripple Custody"," infrastructure are organized into the following layers:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Interaction layer"]},": Customer-facing components (Web UI, mobile/desktop apps, notifications, authentication)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Core and governance layer"]},": Business logic, API gateway, governance engine, and message processing"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Blockchain integration layer"]},": Indexers that monitor and interact with blockchain networks"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Security and key management layer"]},": notary and vault services with KMS backends"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["External infrastructure"]},": Customer-managed databases, blockchain nodes, and deployment infrastructure"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The following diagram shows these layers and how they interact:"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"graph TB\n subgraph ExtUsers[\"External Users & Apps\"]\n USER[End Users]\n MOBILE[Mobile App]\n DESKTOP[Desktop App]\n THIRDPARTY[Third-Party Apps]\n end\n\n subgraph Interaction[\"Interaction Layer\"]\n WEBUI[Web UI]\n NOTIF[Notification Server]\n AUTH[Authentication Server]\n end\n\n subgraph Core[\"Core & Governance Layer\"]\n APIGW[API Gateway]\n LEDGERACCT[Ledger Accounting]\n EVENTPROC[Event Processing]\n GOVENGINE[Governance Engine]\n AMQP[RabbitMQ]\n end\n\n subgraph Blockchain[\"Blockchain Integration Layer\"]\n BTCIDX[NBXplorer]\n ETHIDX[ETH Indexer]\n XRPIDX[XRPL Indexer]\n OTHERIDX[Other Indexers]\n end\n\n subgraph Security[\"Security & Key Management Layer\"]\n NBRIDGE[Notary Bridge]\n NOTARY[Notary]\n VAULTCORE[Vault]\n KMSCONNECT[KMS Connect]\n end\n\n subgraph External[\"External Infrastructure\"]\n HSM[HSM/KMS]\n POSTGRES[(PostgreSQL)]\n NODES[Blockchain Nodes]\n end\n\n USER --> WEBUI\n MOBILE --> AUTH\n DESKTOP --> AUTH\n THIRDPARTY --> APIGW\n WEBUI --> APIGW\n WEBUI --> NOTIF\n APIGW --> AMQP\n AMQP --> GOVENGINE\n AMQP --> EVENTPROC\n AMQP --> LEDGERACCT\n GOVENGINE --> POSTGRES\n GOVENGINE --> NBRIDGE\n NBRIDGE --> NOTARY\n NOTARY --> KMSCONNECT\n GOVENGINE --> VAULTCORE\n VAULTCORE --> KMSCONNECT\n KMSCONNECT --> HSM\n LEDGERACCT --> BTCIDX\n LEDGERACCT --> ETHIDX\n LEDGERACCT --> XRPIDX\n LEDGERACCT --> OTHERIDX\n BTCIDX --> NODES\n ETHIDX --> NODES\n XRPIDX --> NODES\n OTHERIDX --> NODES\n\n classDef trusted fill:#90EE90,stroke:#006400,stroke-width:3px\n classDef untrusted fill:#FFB6C1,stroke:#8B0000,stroke-width:2px\n classDef external fill:#87CEEB,stroke:#00008B,stroke-width:2px\n classDef hsm fill:#FF6347,stroke:#8B0000,stroke-width:3px\n\n class GOVENGINE trusted\n class WEBUI,NOTIF,AUTH,APIGW,LEDGERACCT,EVENTPROC untrusted\n class POSTGRES,NODES external\n class HSM,NOTARY,VAULTCORE hsm\n","diagramHtml":"

External Infrastructure

Security & Key Management Layer

Blockchain Integration Layer

Core & Governance Layer

Interaction Layer

External Users & Apps

End Users

Mobile App

Desktop App

Third-Party Apps

Web UI

Notification Server

Authentication Server

API Gateway

Ledger Accounting

Event Processing

Governance Engine

RabbitMQ

NBXplorer

ETH Indexer

XRPL Indexer

Other Indexers

Notary Bridge

Notary

Vault

KMS Connect

HSM/KMS

PostgreSQL

Blockchain Nodes

","diagramHtmlDark":"

External Infrastructure

Security & Key Management Layer

Blockchain Integration Layer

Core & Governance Layer

Interaction Layer

External Users & Apps

End Users

Mobile App

Desktop App

Third-Party Apps

Web UI

Notification Server

Authentication Server

API Gateway

Ledger Accounting

Event Processing

Governance Engine

RabbitMQ

NBXplorer

ETH Indexer

XRPL Indexer

Other Indexers

Notary Bridge

Notary

Vault

KMS Connect

HSM/KMS

PostgreSQL

Blockchain Nodes

"},"children":["graph TB\n subgraph ExtUsers[\"External Users & Apps\"]\n USER[End Users]\n MOBILE[Mobile App]\n DESKTOP[Desktop App]\n THIRDPARTY[Third-Party Apps]\n end\n\n subgraph Interaction[\"Interaction Layer\"]\n WEBUI[Web UI]\n NOTIF[Notification Server]\n AUTH[Authentication Server]\n end\n\n subgraph Core[\"Core & Governance Layer\"]\n APIGW[API Gateway]\n LEDGERACCT[Ledger Accounting]\n EVENTPROC[Event Processing]\n GOVENGINE[Governance Engine]\n AMQP[RabbitMQ]\n end\n\n subgraph Blockchain[\"Blockchain Integration Layer\"]\n BTCIDX[NBXplorer]\n ETHIDX[ETH Indexer]\n XRPIDX[XRPL Indexer]\n OTHERIDX[Other Indexers]\n end\n\n subgraph Security[\"Security & Key Management Layer\"]\n NBRIDGE[Notary Bridge]\n NOTARY[Notary]\n VAULTCORE[Vault]\n KMSCONNECT[KMS Connect]\n end\n\n subgraph External[\"External Infrastructure\"]\n HSM[HSM/KMS]\n POSTGRES[(PostgreSQL)]\n NODES[Blockchain Nodes]\n end\n\n USER --> WEBUI\n MOBILE --> AUTH\n DESKTOP --> AUTH\n THIRDPARTY --> APIGW\n WEBUI --> APIGW\n WEBUI --> NOTIF\n APIGW --> AMQP\n AMQP --> GOVENGINE\n AMQP --> EVENTPROC\n AMQP --> LEDGERACCT\n GOVENGINE --> POSTGRES\n GOVENGINE --> NBRIDGE\n NBRIDGE --> NOTARY\n NOTARY --> KMSCONNECT\n GOVENGINE --> VAULTCORE\n VAULTCORE --> KMSCONNECT\n KMSCONNECT --> HSM\n LEDGERACCT --> BTCIDX\n LEDGERACCT --> ETHIDX\n LEDGERACCT --> XRPIDX\n LEDGERACCT --> OTHERIDX\n BTCIDX --> NODES\n ETHIDX --> NODES\n XRPIDX --> NODES\n OTHERIDX --> NODES\n\n classDef trusted fill:#90EE90,stroke:#006400,stroke-width:3px\n classDef untrusted fill:#FFB6C1,stroke:#8B0000,stroke-width:2px\n classDef external fill:#87CEEB,stroke:#00008B,stroke-width:2px\n classDef hsm fill:#FF6347,stroke:#8B0000,stroke-width:3px\n\n class GOVENGINE trusted\n class WEBUI,NOTIF,AUTH,APIGW,LEDGERACCT,EVENTPROC untrusted\n class POSTGRES,NODES external\n class HSM,NOTARY,VAULTCORE hsm\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"color-coding","__idx":2},"children":["Color coding"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["🟢 Green (Trusted):"]}," Governance Engine - the only trusted component"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["🔴 Pink (Untrusted):"]}," All other application components (defense in depth)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["🔵 Blue (External):"]}," Customer-managed infrastructure (database, blockchain nodes)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["🔴 Red (Security):"]}," notary, vault, and HSM/KMS backends"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"interaction-layer","__idx":3},"children":["Interaction layer"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The interaction layer enables consumption of the core services for customer-facing applications. All services in the interaction layer are ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["untrusted"]},". For more information, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/security"},"children":["Security"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"web-ui","__idx":4},"children":["Web UI"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Web UI is a back-office user interface for ","Ripple Custody",". It provides administrators and operators with a graphical interface to manage the platform. Available in two versions:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Web UI v1"]},": Connects to the API Gateway via HTTP (REST)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Web UI v2"]},": Uses GraphQL for improved performance"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"desktop-app-and-mobile-app","__idx":5},"children":["Desktop app and mobile app"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["These apps perform authorization and authentication functions for the Web UI. They can be used interchangeably to approve transactions and authenticate users via push notifications."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Platform"},"children":["Platform"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Requirements"},"children":["Requirements"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Desktop"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Windows only"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["iOS"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["v15.1 or later"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Android"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["v7.0 (SDK 24) or later"]}]}]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The mobile app is tested primarily on stock Android OS. While the app may function on custom Android operating systems (such as OxygenOS, GrapheneOS, LineageOS), full compatibility is not guaranteed."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"notification-server","__idx":6},"children":["Notification server"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The notification server manages notifications for the Web UI and mobile/desktop apps. It:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Pushes notifications via WebSocket"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Acts as an intermediary for dynamic message passing (e.g., triggering authorization requests)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Handles SMTP-based email delivery with TLS/SSL support"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"authentication-server","__idx":7},"children":["Authentication server"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The authentication server is an OpenID Connect (OIDC) server used for JSON Web Token (JWT) generation and authentication. ","Ripple Custody"," follows a \"batteries included but replaceable\" model:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Default"]},": Keycloak (appears as \"harmonize\" provider in the GUI/APIs)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Alternative"]},": External OAuth/OIDC provider of your choice"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"core-and-governance-layer","__idx":8},"children":["Core and governance layer"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The core and governance layer contains the main business logic. These components orchestrate all system functions and provide governance, accounting, and transaction execution services."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["only trusted component"]}," in this layer is the governance engine. All others are untrusted. For more information, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/security"},"children":["Security"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"api-gateway","__idx":9},"children":["API gateway"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The API gateway exposes the REST API and performs validation checks when accepting user requests. It:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Validates authentication tokens (JWTs)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Routes traffic to the correct internal service"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Forwards requests to the AMQP message queue for processing"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Supports HTTP (REST) and gRPC protocols"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"governance-engine","__idx":10},"children":["Governance engine"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The governance engine is the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["only trusted component"]}," in the platform. It enforces system governance and updates the system state when all conditions of the governance workflow are fulfilled. It:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Stores a record of the complete state of all trusted entities with revision history"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Validates every proposed change against a tamper-proof Merkle tree"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Executes system updates regulated by the governance framework"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Cryptographically signs all critical data before writing to the database"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The governance engine must run as a singleton because it performs Merkle tree operations that cannot be parallelized."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"ledger-accounting-service","__idx":11},"children":["Ledger accounting service"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The ledger accounting service handles:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["System accounting, balance, and transaction management"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Ledger-specific business logic"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Reading from and writing to the indexers"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Chain update management"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Core compliance processes (e.g., quarantine management for incoming transfers)"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This service runs as a singleton by design."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"event-processing","__idx":12},"children":["Event processing"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The event processing service consumes messages from the AMQP broker. It processes events and executes asynchronous tasks, such as updating a transaction's state after indexing."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"amqp-broker-rabbitmq","__idx":13},"children":["AMQP broker (RabbitMQ)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The AMQP (Advanced Message Queuing Protocol) broker queues requests and distributes events. It:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enables asynchronous processing"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Supports persistent, replicated queues (Quorum Queues)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Can be deployed internally or externally"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/system-management/events"},"children":["Event tracking"]},"."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"blockchain-integration-layer","__idx":14},"children":["Blockchain integration layer"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The blockchain integration layer monitors and indexes supported blockchains."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"indexers","__idx":15},"children":["Indexers"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Indexers act as intermediaries between the ledger accounting service and blockchain nodes. They:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Fetch blocks from blockchain nodes"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Identify transactions related to ","Ripple Custody"," accounts"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Pass transaction data to the ledger accounting service for processing"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ripple Custody"," supports two indexer architectures:"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"legacy-indexers","__idx":16},"children":["Legacy indexers"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Chain-specific services that actively monitor blockchain nodes. Each indexer runs as a single replica per chain, with state stored in PostgreSQL."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":4,"id":"unified-indexer-service-uis","__idx":17},"children":["Unified Indexer Service (UIS)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Available from ","Ripple Custody"," v1.26, the UIS provides a component-based architecture:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Generic indexer"]},": Orchestrates data fetching."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Processor"]},": Handles business logic"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Ledger adapters"]},": Translates blockchain-specific data."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The UIS uses a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["bulkhead pattern"]}," where each ledger runs in an isolated container, preventing failures in one chain from affecting others."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For more information, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/overview/architecture/unified-indexer-service"},"children":["Unified Indexer Service"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"supported-blockchain-indexers","__idx":18},"children":["Supported blockchain indexers"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Indexer"},"children":["Indexer"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Blockchains"},"children":["Blockchains"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["NBXplorer"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Bitcoin, Litecoin, Dogecoin"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["ETH Indexer"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Ethereum, Polygon, Arbitrum"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["XRPL Indexer"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["XRP Ledger"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Solana Indexer"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Solana"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Other Indexers"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Stellar, Tezos, and more"]}]}]}]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"security-and-key-management-layer","__idx":19},"children":["Security and key management layer"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The security and key management layer handles all cryptographic operations. For detailed security architecture, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/security"},"children":["Security"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"notary","__idx":20},"children":["Notary"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The notary service approves transactions and signs them with the master key. It consists of:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["notary bridge"]},": Proxy service between the governance engine and notary (supports HTTP or gRPC)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["notary service"]},": Performs transaction-signing operations"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["KMS Connect Sidecar"]},": Platform-specific KMS connectivity"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The notary must run as a singleton and stores its state in the Anti-Rewind File (ARF)."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"vault","__idx":21},"children":["Vault"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The vault maintains the safety of key material and performs signing operations. It:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Executes transaction orders only after approval from the governance engine"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Derives account keys and signs blockchain transactions"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Verifies notary signatures before performing key operations"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Connects to KMS backends via the KMS Connect sidecar"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The vault consists of:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Vault core"]},": Key derivation and custody operations (port 10054)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Vault bridge"]},": Bridge service for vault operations"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["KMS Connect Sidecar"]},": Platform-specific KMS connectivity (port 10000)"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can use multiple vaults for different purposes:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Key storage with different KMS types"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Key isolation (hot vault for online wallets, cold vault for offline wallets)"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"external-infrastructure","__idx":22},"children":["External infrastructure"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["These components are customer-managed and interact with the core platform."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"key-management-system-kms","__idx":23},"children":["Key management system (KMS)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The KMS protects cryptographic keys and performs signing operations. ","Ripple Custody"," supports:"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Type"},"children":["Type"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Examples"},"children":["Examples"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Hardware HSM"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Thales Luna, Ultimaco BlockSafe, Securosys Primus"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Cloud HSM"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["AWS CloudHSM, IBM HPCS, Google Cloud KMS"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["MPC"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Multi-Party Computation clusters"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For a list of supported KMSs and configuration guides, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/get-started/deployment/deploy-kms"},"children":["Initialize and connect a KMS"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"postgresql-database","__idx":24},"children":["PostgreSQL database"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The PostgreSQL database stores:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["System state and configuration"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Transactions and accounts"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Policies and user data"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Indexer state"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The database requires:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Production-grade HA solution (e.g., 3-node cluster with Patroni, or AWS RDS Multi-AZ)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Synchronous replication (highly recommended)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Regular backups synchronized with ARF backups"]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"blockchain-nodes","__idx":25},"children":["Blockchain nodes"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Blockchain nodes receive transactions from indexers and return blockchain information. Options include:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Self-hosted"]},": Bitcoin, XRPL, Solana nodes with RPC/Basic Auth"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Third-party providers"]},": Infura, Alchemy, QuickNode (API key authentication)"]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use a load balancer to provide a single, highly-available endpoint."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"deployment-infrastructure","__idx":26},"children":["Deployment infrastructure"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Ripple Custody"," is deployed on Kubernetes with:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Namespaces"]},": ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["custody-core"]}," and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["custody-vault"]}," (security isolation)"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Container registry"]},": Private registry with image mirroring and cosign verification."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Secrets manager"]},": HashiCorp Vault, CyberArk Conjur (External Secrets Operator)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Ingress"]},": TLS termination and routing"]}]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"optional-components","__idx":27},"children":["Optional components"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"compliance-adapter","__idx":28},"children":["Compliance adapter"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Optional services that connect to third-party compliance and screening API providers (e.g., Chainalysis, Elliptic) for transaction screening and regulatory compliance."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"coinbase-adapter","__idx":29},"children":["Coinbase adapter"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Optional adapter for Coinbase integration."]},{"$$mdtype":"Tag","name":"hr","attributes":{},"children":[]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"related-topics","__idx":30},"children":["Related topics"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/security"},"children":["Security"]}," - Zero-trust architecture and trust model"]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.34/concepts/key-management"},"children":["Key management"]}," - Cryptographic hierarchy and key operations"]}]}]},"headings":[{"value":"System architecture","id":"system-architecture","depth":1},{"value":"Architecture overview","id":"architecture-overview","depth":2},{"value":"Color coding","id":"color-coding","depth":3},{"value":"Interaction layer","id":"interaction-layer","depth":2},{"value":"Web UI","id":"web-ui","depth":3},{"value":"Desktop app and mobile app","id":"desktop-app-and-mobile-app","depth":3},{"value":"Notification server","id":"notification-server","depth":3},{"value":"Authentication server","id":"authentication-server","depth":3},{"value":"Core and governance layer","id":"core-and-governance-layer","depth":2},{"value":"API gateway","id":"api-gateway","depth":3},{"value":"Governance engine","id":"governance-engine","depth":3},{"value":"Ledger accounting service","id":"ledger-accounting-service","depth":3},{"value":"Event processing","id":"event-processing","depth":3},{"value":"AMQP broker (RabbitMQ)","id":"amqp-broker-rabbitmq","depth":3},{"value":"Blockchain integration layer","id":"blockchain-integration-layer","depth":2},{"value":"Indexers","id":"indexers","depth":3},{"value":"Legacy indexers","id":"legacy-indexers","depth":4},{"value":"Unified Indexer Service (UIS)","id":"unified-indexer-service-uis","depth":4},{"value":"Supported blockchain indexers","id":"supported-blockchain-indexers","depth":3},{"value":"Security and key management layer","id":"security-and-key-management-layer","depth":2},{"value":"Notary","id":"notary","depth":3},{"value":"Vault","id":"vault","depth":3},{"value":"External infrastructure","id":"external-infrastructure","depth":2},{"value":"Key management system (KMS)","id":"key-management-system-kms","depth":3},{"value":"PostgreSQL database","id":"postgresql-database","depth":3},{"value":"Blockchain nodes","id":"blockchain-nodes","depth":3},{"value":"Deployment infrastructure","id":"deployment-infrastructure","depth":3},{"value":"Optional components","id":"optional-components","depth":2},{"value":"Compliance adapter","id":"compliance-adapter","depth":3},{"value":"Coinbase adapter","id":"coinbase-adapter","depth":3},{"value":"Related topics","id":"related-topics","depth":2}],"frontmatter":{"seo":{"title":"System architecture"}},"lastModified":"2026-10-23T14:40:23.828Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/custody/v1.34/overview/architecture","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}