Vendor diligence
TrustField Vendor Brief
Two-page summary for MLRO and vendor review — not legal advice.
Brief version: v0.1 · hello@trustfield.ca
Contacts
| Commercial | hello@trustfield.ca |
| Security / incidents | security@trustfield.ca |
| MLRO (named) | TBD — assign before MSB outbound |
| RPAA registration ID | TBD — when BoC registration confirmed |
Role in your program
TrustField is program workflow software and APIs. Licensed partners and market venues manage partner-side processes. TrustField records program state, checklist evidence, and partner handoff records — it does not hold customer assets or settle on your behalf.
- Intake, checklist, documents, and a TF program ID for every program
- Operator workflows and REST APIs your team runs day to day
- Your counsel owns regulatory filings, licensing, and RPAA strategy
Safeguarding and movement flow (conceptual)
Program customer
Intake, verify, prepare handoff records
TrustField
State, audit trail, TF program ID — no custody
Licensed partner
Execution and safeguarding per agreement
Settlement boundary
TrustField records workflow state and exports evidence. Settlement, safeguarding accounts, and regulatory reporting for movement remain with your licensed execution partner unless otherwise agreed in a signed SOW.
Program ledger and readiness proof
- Unique TF-###### program ID per program — visible on status and diligence pages
- INS handoff record IDs for individual handoff records in API responses
- Event stream: program.created, portal.verify.completed, handoff.prepared, handoff_record.created, handoff_record.updated
- Readiness gate at /api/readiness and per-program brief at /diligence/{ref}
- HTML and CSV compliance export available under scoped Integration Program (admin token)
Data processing (summary)
- Scope: workflow and API layer for intake, checklist, and evidence export
- Data: entity name, contact email, corridor, checklist responses, uploaded documents, ops notes
- Storage: application database and encrypted document volume at deploy
- Subprocessors: hosting (CA/US per deploy), optional Telegram and email — full list in signed DPA
Full summary: Data processing page
Verify on trustfield.ca
- System readiness: /api/readiness
- Sample intake: /register → print brief at /diligence/{ref}
- Status surface: /status-system