_CUSTODY & WALLETS/

Run omnibus custody with per-user truth

Virtualize omnibus wallets, attribute every satoshi and cent to its owner, and reconcile hot and cold storage in real time.

Book a demo Start building

deposit

omnibus wallet

sub-ledger

withdrawal

_TRUSTED BY TEAMS MOVING MONEY/

_THE PROBLEM/

Omnibus accounts are black boxes

Pooling funds saves gas. It also destroys attribution.

Pooled wallets hold millions across chains and storage tiers with no clear record of whose funds are whose. Attribution lives in application code, sweeps go unrecorded, and regulators want proof you cannot produce.

Pooled wallets hold customer funds with no auditable per-user attribution.

Hot/cold sweeps and internal transfers happen outside any system of record.

Balances are tracked per chain and per provider, never as one position.

Proof-of-funds and travel-rule requests take days of manual reconstruction.

_PROOF/ Custodians virtualize omnibus accounts on Formance, tracking ownership off-chain while funds stay pooled.

_FLOW OF FUNDS/

Pooled on-chain, attributed off-chain

Deposits pool for efficiency; ownership stays exact in the ledger.

Deposits land in omnibus wallets, the sub-ledger attributes every unit to its owner, and internal transfers move off-chain at zero gas. Withdrawals debit the exact owner: attribution is never approximate.

fund attribution

deposituser funds in

omnibus walletpooled on-chain

sub-ledgerper-user attribution

withdrawalsweep + payout

_CAPABILITIES/

The primitives custodians need

Built on the open-source Formance ledger.

Omnibus sub-ledgering, multi-chain aggregation, and continuous reconciliation, composed for custody at scale.

_OMNIBUS SUB-LEDGERING/

Per-user balances inside pooled wallets and bank accounts, derived from an immutable log and queryable at any timestamp.

per-user attribution

_MULTI-CHAIN TRACKING/

One position per user across chains, wallets, and storage tiers, aggregated in a single query.

one position, every chain

_INTERNAL TRANSFERS/

Move funds between users off-chain as ledger transactions: instant, atomic, and gas-free.

zero-gas transfers

Read the Numscript docs

_STORAGE RECONCILIATION/

Reconcile ledger state against hot wallets, cold storage, and custodial providers continuously, with drift alerts.

drift alerts

_BY THE NUMBERS/

Custody-grade, by design

fund attribution100%omnibus · per-user

chain or provideranymulti-chain · multi-custodian

internal transfers0 gasoff-chain · atomic

storage reconciliationreal-timehot · cold · custodial

_NUMSCRIPT/

Attribution is a transaction, not a lookup table

Pool the deposit and attribute the owner in one atomic operation.

A single Numscript transaction records the on-chain deposit into the omnibus wallet and attributes the exact amount to its owner in the sub-ledger.

deposit.num

// Attribute an omnibus deposit to its owner
vars {
  account $owner
  monetary $amount
}

// 1. Deposit lands in the pooled wallet
send $amount (
  source = @world
  destination = @omnibus:hot
)

// 2. Attribute ownership in the sub-ledger
send $amount (
  source = @users:pending
  destination = $owner
)

_VOICES/

Trusted by builders

“Formance enabled us to ship new lending products faster by providing a customizable foundation that let us reliably express the complexities of our flow of funds.”

Embedded finance · reconciliation across 14 countries

See customer story

“Formance is the foundation of our Financial OS, the open-source approach lets us retain control over this key component.”

Healthcare · Financial OS

“Formance helped us kick off our move into fintech, with robust infrastructure and intuitive developer tooling.”

Benefits · fintech infrastructure

_TRUST/

Built for regulated money.

Enterprise controls, the certifications auditors ask for, and an immutable record, out of the box.

See our trust center

THE COMPLIANCE STACK

IAM, RBAC & SSO

Non-repudiation

Audit logs

Observability & monitoring

Real-time events

Admin console

_AUDIT-LOG/ NON-REPUDIATION

09:41:07Z AUDIT gateway POST /api/ledger/v2/main/transactions 200 sub:ops@acme.io

09:41:09Z LOG id:4093 NEW_TRANSACTION ledger:main

09:41:12Z LOG id:4094 SET_METADATA ledger:main

09:41:15Z LOG id:4095 REVERTED_TRANSACTION ledger:main

09:41:18Z AUDIT gateway GET /api/ledger/v2/main/logs 200 sub:audit@acme.io

CERTIFICATIONS

AICPA SOC IICERTIFIED

ISO 27001CERTIFIED

DORACOMPLIANT

REGULATORY FRAMEWORKS

EMIFCAMTLNYDFS Trust CharterOCC CharterMiCAGENIUS

_ATTESTED/

_RESOURCES/

Keep going

Everything you need to evaluate and build on Formance.

_DOCS/

Read the documentation

Architecture guides, the Ledger and Connectivity references, and step-by-step quickstarts to ship in days.

_NUMSCRIPT/

Try Numscript

Model any flow of funds as deterministic, auditable transactions. Experiment live in the playground.

_STORIES/

Customer stories

See how fintechs, marketplaces and platforms run money movement on Formance in production.

FAQ

Custody, answered

01 / HOW DO YOU TRACK OWNERSHIP IN POOLED WALLETS?

Every pooled wallet is sub-ledgered: each user's share is a derived balance in an immutable double-entry log, exact at any timestamp, not a row in application state.

02 / DO INTERNAL TRANSFERS TOUCH THE CHAIN?

No. User-to-user moves are ledger transactions against the same pooled wallet: instant, atomic, and free of gas, while the on-chain position stays unchanged.

03 / CAN I PROVE FUNDS FOR A REGULATOR?

Yes. Point-in-time reports reconstruct per-user holdings and total positions across chains and storage tiers, reproducibly, straight from the log.

04 / WHAT ABOUT HOT/COLD SWEEPS?

Sweeps are recorded as transfers between storage accounts and reconciled against on-chain state continuously, so custody operations never escape the record.

_GET STARTED/

Custody with proof built in

See how Formance fits your custody architecture: book a demo or start building.

Book a demo Start building