Getting Started With TRISA Envoy
Open-source, peer-to-peer Travel Rule messaging. Self-host it free, or let us run it for you.
Travel Rule messaging you control
Envoy is TRISA's open-source, end-to-end encrypted, peer-to-peer messaging service for Travel Rule compliance. Your compliance team exchanges originator and beneficiary data directly with counterparty VASPs, protecting customer PII and avoiding per-message fees.
Key facts
- What it is
- Open-source, end-to-end encrypted, peer-to-peer messaging service for Travel Rule compliance
- Published by
- Travel Rule Information Sharing Alliance (TRISA)
- License
- MIT (open source)
- Protocols
- TRISA and TRP, with Sunrise email fallback for counterparties on neither
- Data standard
- IVMS101
- Regulations
- Designed to support FATF Recommendation 16, EU TFR and MiCA, US, UK, Singapore and Switzerland rules, at any threshold
- Data residency
- Managed: any region you specify. Self-hosted: wherever you deploy
- Encryption
- mTLS between VASPs; AES-256-GCM payloads with HMAC-SHA256 (TRISA Secure Envelopes)
- Deployment options
- Self-hosted (free) or managed service run by Rotational
- Managed service price
- $375/month per node (1 node = 1 entity), 6-month minimum
- Time to go live
- 1–2 days managed; 4–6 weeks self-hosted (both include GDS verification)
- Requirement
- Free registration with TRISA Global Directory Service (GDS)
- Contact
- envoy@rotational.io
Product walkthrough: sending and reviewing transfers, managing counterparties and customer accounts, and Sunrise email messages.
Built for compliance teams and the engineers who support them
Travel Rule ready
Exchange required originator and beneficiary data using open standards aligned with FATF guidance.
Customer data stays protected
End-to-end encrypted, peer-to-peer messaging minimizes data exposure and breach risk.
Reach any counterparty
Send via TRISA or TRP. If a counterparty supports neither, fall back to Sunrise email.
Audit-friendly
Native IVMS101 support simplifies audits and regulatory change management.
Open source, no lock-in
MIT licensed and protocol-agnostic. Deploy with Docker and Helm and integrate with your systems.
Future-proof
Community-governed protocols evolve with global regulation, so you avoid costly rework.
Direct, encrypted exchange between VASPs
Envoy runs as your own dedicated node. It confirms the counterparty's identity through TRISA's directory, then sends Travel Rule data over TRISA, TRP or Sunrise email.
Managed-service customers also get the Daybreak directory of contacts at 1,500+ VASPs for Sunrise messages.
Questions compliance teams ask
The regulations Envoy is built for, where your data lives, and how it is protected in transit.
Which regulations does Envoy support?
Envoy is designed to support Travel Rule requirements at any threshold, including:
- FATF Recommendation 16
- EU Transfer of Funds Regulation (TFR) and MiCA
- United States (FinCEN Travel Rule)
- United Kingdom
- Singapore
- Switzerland
Where is our data hosted?
Managed service: in the region you specify, for example the US, EU, Singapore, South Africa or South America.
Self-hosted: wherever you deploy Envoy, on your own infrastructure.
How is customer data protected?
- Mutually authenticated TLS (mTLS) between VASPs, each verifying the other's GDS-issued x.509 identity certificate
- Payloads sealed in TRISA Secure Envelopes and encrypted with AES-256-GCM, using a new key for every transfer
- HMAC-SHA256 integrity check to detect tampering
- Keys sealed with the recipient's public key, so only the intended recipient can decrypt
- Digitally signed timestamps for non-repudiation and audit
Applies to transfers over the TRISA protocol. Technical details on trisa.dev →
Which option is right for you?
Both options run the same Envoy software and require free registration with TRISA's Global Directory Service (GDS). The difference is who runs it.
Managed service
Choose this if:
- You need to be compliant within days, not weeks
- You don't have dedicated DevOps capacity
- You want expert support, backups and upgrades handled
- You want the Daybreak directory of 1,500+ VASPs
Self-hosted (open source)
Choose this if:
- You have Kubernetes/Docker experience in-house
- You need full control over hosting and data location
- You want to customize or extend Envoy
- You can maintain and upgrade it with each release
| Compare | Managed serviceRun by Rotational | Self-hostedRun by your team |
|---|---|---|
| Time to go live | 1–2 days | 4–6 weeks |
| Cost | $375/month per node 1 node = 1 entity · 6-month minimum | Free (MIT license) + your compute, storage and staff time |
| Install, hosting & upgrades | ✓ Included | Your team |
| Identity certificates | ✓ Included | You request via GDS (free) |
| Encrypted, redundant backups | ✓ Included | Your team |
| Message storage | 500k+ messages | Your infrastructure |
| Data hosting region | ✓ Any region you specify | Wherever you deploy |
| Daybreak directory (1,500+ VASPs) | ✓ Included | Not included (managed service only) |
| TRISA, TRP & Sunrise email | ✓ Supported | ✓ Supported |
| User seats | Unlimited | Unlimited |
| Support | Expert support from Rotational | Documentation (limited support) |
| Agreements | Managed services agreement + data protection agreement | None |
| GDS registration | Required, free. We provide your endpoints. | Required, free |
Your path to go-live
Both timelines include GDS identity verification, which takes about 1 business day. Start on Testnet at no cost and move to Mainnet when you're ready.
Managed service · 1–2 days
- Book a demo or email usSchedule a call or write to envoy@rotational.io
- Sign the agreementsManaged services agreement and data protection agreement
- Register with TRISA GDSComplete the form. We provide your endpoints.
- We deploy your nodeInstalled, configured and certificates issued
- Test, then go liveSend test transfers to CharlieVASP, then switch to Mainnet
Self-hosted · 4–6 weeks
- Register with TRISA GDSRequest Testnet certificates, about 1 business day
- Deploy EnvoyPull the Docker image and install with Helm
- Integrate with your systemsFollow the documentation and API reference
- Test with CharlieVASPUse our sandbox instructions
- Go live on MainnetApply for Mainnet certificates (free), then plan for ongoing upgrades
Everything you need to decide
Product presentation
A PDF overview to share with your team and leadership.
Download PDF → ComplianceFAQ for compliance teams
Answers on data protection, coverage and regulation.
Read the FAQ → EngineeringDocumentation
Deployment, configuration and API reference.
Open docs → EngineeringCharlieVASP sandbox
Send test transfers to our demo node before going live.
Request access →Ready to see Envoy in action?
A 20-minute demo covers both options and answers your team's questions.