The ten questions your risk team will ask us

Compass is the API your platform uses to reach onchain markets. We build each transaction, and your customer's wallet or your custodian signs it. We never hold the money. That one design choice settles several of the questions below, and leaves others squarely with you. We have tried to be clear about which is which.

Three of the ten are marked Ask every vendor this. They are the ones where providers differ most, and where the answer is worth seeing demonstrated.

1. Can Compass move our customers' money?

No. Each customer gets an onchain account per product, and their wallet is its only owner. Nothing moves without that wallet's signature. Compass holds no keys, never signs, and has no admin rights over these accounts. Your API key can read data and build transactions, but it cannot sign them.

Party	Role	Can it move funds?
Your backend	Holds your API key and calls Compass	No
Customer's wallet or your custodian	Owns the account and signs every action	Yes, and only this party
Compass	Reads market data and builds each transaction	No
Fee sponsor (optional)	Your own wallet, paying network fees for customers	No. It only relays what the customer has already signed

Ask every vendor this. Then ask them to show you, onchain, who the owner of a customer's account is.

2. If Compass goes down, can our customers still get their money?

Yes. Positions sit in the customer's own account and in the underlying market. An outage would stop new transactions being built through our API. It would not freeze or move anything, and the owner can still withdraw by transacting with the account directly.

Ask every vendor this. The test is whether your customers' access to their money depends on the vendor staying in business.

3. Are our customers' funds pooled with anyone else's?

No. There is no shared Compass vault. Every customer has their own account for each product, so one customer's position cannot be affected by another's. A customer's yield position cannot be liquidated because of their own leveraged position either, because the two sit in separate accounts.

Ask every vendor this. A pooled vault means your customers share contract risk, and sometimes losses, with strangers.

4. What contracts does the money pass through?

Two things: the customer's own account, then the market itself.

5. Can Compass change something after we launch that affects deployed funds?

No. We can update our API and the transactions we propose. We cannot alter a customer's account or an existing position, because we hold no rights over either. Every new action still needs the owner's signature.

6. How do we know a transaction does what we asked?

You can check before anyone signs. Every transaction comes back unsigned, so your systems or your wallet provider can inspect and simulate it first. Multi-step actions, such as a swap followed by a deposit, are bundled into one transaction that either completes fully or does nothing.

7. Who decides where the money goes?

You and your customer. Compass has no investment discretion and allocates nothing on anyone's behalf. You choose which assets and markets your customers see, and the customer signs each action.

8. What security standard do you operate to?

We are ISO 27001 compliant. A leaked API key cannot move funds, because keys cannot sign.

9. Where are fees taken?

In the transaction the customer signs. You set your own fee on deposits, withdrawals, loans and trades, and it is paid straight to your address.

10. Who else runs on this?

As of September 2026, Constellation Network (with its Arca app) and THORWallet are live in production. Compass connects to more than 20,000 lending and trading venues across five networks. Our infrastructure partners include Turnkey, Para (embedded wallets) and Sly, and our issuer and tokenizer partners include WisdomTree, Centrifuge, Ondo, IXS and Etherfuse.

What we can't answer for you

Taking Compass out of the path of the money does not take the risk out of the product. Three things stay with you:

• The markets you choose. Lending and trading markets carry their own contract and market risk. Their audits and track records belong in your review, and returns are never guaranteed.
• Your licences. Compass is software infrastructure. What you may offer, and to whom, depends on the permissions you hold in each market. Involve your lawyers at the start.
• Your customers. Verifying them is your job. For permissioned tokenized assets, the issuer decides who is eligible.

The short version, for your file

Question	Answer
Can the vendor move funds?	No. Only the customer's wallet or your custodian can.
Are funds reachable in an outage?	Yes. They sit in the customer's own account.
Are funds pooled?	No. One account per customer per product.
What contracts are in the path?	The customer's account, then the market.
Can the vendor alter deployed funds?	No.
Can we inspect transactions first?	Yes. They arrive unsigned.
Who has investment discretion?	You and your customer.
Security standard	ISO 27001, 99.99% uptime
Where are fees taken?	In the signed transaction, paid to your address.

Running a vendor review? Send us your questionnaire. We answer it directly with your risk and compliance leads.

Ready to build?

Start at docs.compasslabs.ai, or talk to us at compasslabs.ai.