TRISA Envoy: Travel Rule Messaging
Open-source, encrypted Travel Rule messaging software for VASPs. Self-hosted or managed.
Overview
Travel Rule messaging you control
Envoy is open-source, encrypted Travel Rule messaging software for VASPs, designed strictly for secure peer-to-peer messaging. It is open and protocol-agnostic: TRISA is its native protocol, and Envoy is designed to interoperate with any protocol willing to connect. Exchange data through TRISA and TRP, with Sunrise email-assisted exchange for counterparties outside those networks. Run it yourself or choose managed hosting from Rotational Labs.
Key facts
Product walkthrough: sending and reviewing transfers, managing counterparties and customer accounts, and Sunrise email messages.
Built for Compliance Teams and Engineers
Compliance
Travel Rule ready
Exchange required originator and beneficiary data using open standards aligned with FATF guidance.
Compliance
Customer data stays protected
End-to-end encrypted, peer-to-peer messaging minimizes data exposure and breach risk.
Compliance
Reach any counterparty
Send via TRISA or TRP. If a counterparty supports neither, fall back to Sunrise email.
Compliance
Audit-friendly
Native IVMS101 support simplifies audits and regulatory change management.
Engineering
Open source, no lock-in
MIT licensed and protocol-agnostic. Deploy with Docker and Helm and integrate with your systems.
Engineering
Future-proof
Community-governed protocols evolve with global regulation, so you avoid costly rework.
Direct, encrypted exchange between VASPs
Envoy runs as your own dedicated node. It confirms the counterparty’s identity through TRISA’s directory, then sends Travel Rule data over TRISA, TRP or Sunrise email.
Daybreak, a directory of contacts at 1,500+ VASPs for Sunrise messages, is included in the managed service and available as a paid dataset add-on for self-hosted users.
Questions compliance teams ask
The regulations Envoy is built for, where your data lives, and how it is protected in transit.
Which regulations does Envoy support?
Envoy is designed to support Travel Rule requirements at any threshold, including:
- FATF Recommendation 16
- EU Transfer of Funds Regulation (TFR) and MiCA
- United States (FinCEN Travel Rule)
- United Kingdom
- Singapore
- Switzerland
Where is our data hosted?
Managed service: Rotational Labs hosts your encrypted messages in a dedicated, customer-specific environment in the region you specify, for example the US, EU, Singapore, South Africa or South America.
Self-hosted: wherever you deploy Envoy, on your own infrastructure.
TRISA has no central network repository of customer Travel Rule data. Customer-specific managed hosting is separate from the network directory and certificate services.
How is customer data protected?
- Mutually authenticated TLS (mTLS) between VASPs, each verifying the other’s GDS-issued x.509 identity certificate
- Payloads sealed in TRISA Secure Envelopes and encrypted with AES-256-GCM, using a new key for every transfer
- HMAC-SHA256 integrity check to detect tampering
- Keys sealed with the recipient’s public key, so only the intended recipient can decrypt
- Digitally signed timestamps for non-repudiation and audit
Applies to transfers over the TRISA protocol. Technical details on trisa.dev →
Which option is right for you?
Both options run the same Envoy software and require free registration with TRISA’s Global Directory Service (GDS). The difference is who runs it.
Self-hosted (open source)
Choose this if:
- You have Kubernetes/Docker experience in-house
- You need full control over hosting and data location
- You want to customize or extend Envoy
- You can maintain and upgrade it with each release
Managed service
Choose this if:
- You need to be compliant within days, not weeks
- You don’t have dedicated DevOps capacity
- You want expert support, backups and upgrades handled
- You want the Daybreak directory of 1,500+ VASPs included
| Compare | Self-hostedRun by your team | Managed serviceRun by Rotational |
|---|---|---|
| Time to go live | 4–6 weeks | 1–2 days |
| Cost | Free (MIT license) + your compute, storage and staff time |
$375/month per node 1 node = 1 entity · 6-month minimum |
| Install, hosting & upgrades | Your team | ✓ Included |
| Identity certificates | You request via GDS (free) | ✓ Included |
| Encrypted, redundant backups | Your team | ✓ Included |
| Message storage | Your infrastructure | 500k+ messages |
| Data hosting region | Wherever you deploy | ✓ Any region you specify |
| Daybreak directory (1,500+ VASPs) | Available as a paid dataset add-on | ✓ Included |
| TRISA, TRP & Sunrise email | ✓ Supported | ✓ Supported |
| User seats | Unlimited | Unlimited |
| Support | Documentation (limited support) | Expert support from Rotational |
| Agreements | None | Managed services agreement + data protection agreement |
| GDS registration | Required, free | Required, free. We provide your endpoints. |
Your path to go-live
Both timelines include GDS identity verification, which takes about 1 business day. Start on Testnet at no cost and move to Mainnet when you’re ready.
Self-hosted · 4–6 weeks
- Register with TRISA GDSRequest Testnet certificates, about 1 business day
- Deploy EnvoyPull the Docker image and install with Helm
- Integrate with your systemsFollow the documentation and API reference
- Test with CharlieVASPUse our sandbox instructions
- Go live on MainnetApply for Mainnet certificates (free), then plan for ongoing upgrades
Managed service · 1–2 days
- Book a demo or email usSchedule a call or write to envoy@rotational.io
- Sign the agreementsManaged services agreement and data protection agreement
- Register with TRISA GDSComplete the form. We provide your endpoints.
- We deploy your nodeInstalled, configured and certificates issued
- Test, then go liveSend test transfers to CharlieVASP, then switch to Mainnet
Everything you need to decide
Compare Travel Rule Software — review openness, pricing, deployment and published network size.
Compliance
Product presentation
A PDF overview to share with your team and leadership.
Compliance
FAQ for compliance teams
Answers on data protection, coverage and regulation.
Engineering
CharlieVASP sandbox
Send test transfers to our demo node before going live.
Ready to see Envoy in action?
A 20-minute demo covers both options and answers your team’s questions.