> For the complete documentation index, see [llms.txt](https://docs.ospree.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ospree.io/developers/travel-rule/interoperability/trisa.md).

# TRISA

#### Integration type

Travel Rule Protocol

#### Description

The Travel Rule Information Sharing Architecture (TRISA) is an open-source, peer-to-peer framework designed to help Virtual Asset Service Providers (VASPs) comply with the Financial Action Task Force (FATF) Travel Rule. Unlike point-to-point protocols, TRISA utilizes a robust Public Key Infrastructure (PKI) model. It relies on a trusted Global Directory to issue digital certificates, authenticating VASP identities prior to any data exchange. This ensures that sensitive originator and beneficiary information is securely encrypted and shared exclusively with verified, compliant counterparties. By leveraging established cryptographic standards, TRISA provides a highly secure, scalable, and interoperable solution that protects user privacy while meeting global regulatory mandates.

#### **Technical Overview (High Level)**

* Mutual TLS (mTLS) for secure communications
* Certificate-based identity verification
* Defined trust framework and governance model
* Structured message exchange for Travel Rule data

#### Prerequisites and limitations

TRISA requires hosting a dedicated node that communicates via the gRPC protocol and mandates formal registration with the TRISA Global Directory Service (GDS). You must obtain specific X.509 digital certificates issued by the TRISA Certificate Authority to establish mutual TLS (mTLS) and encrypt data. Configuration involves setting up the node daemon and integrating automated GDS lookups to verify counterparties.

#### Important terminology

* Public Key Infrastructure (PKI) Model: The robust cryptographic framework that forms the core security layer of TRISA.
* Global Directory: A trusted directory used within the TRISA architecture to look up counterparties and manage identity verification.
* Digital Certificates: Cryptographic credentials issued by the Global Directory to authenticate VASP identities prior to any data exchange.

#### Technical owner

<https://trisa.dev/>&#x20;