Travel Rule Compliance

Travel Rule Compliance evaluated across documented protocol reach and routing; failure, decline and timeout paths; documented unhosted-wallet control; and PII custody and testable go-live.

20providers tracked

9ranked (methodology v2026.11.1)

12 November 2026Ranking snapshot

30 September 2026oldest read · due 14 Nov

Independent. Evidence-based.We rank with a published method and sourced evidence. No one can pay to rank.How it works

Set your country and amount to see your costs ·

9 providers match your requirements

Out of 9 ranked providers. 0 excluded.

What this ranks

Ranked here: Travel Rule compliance vendors, whose products send the originator data a transfer must carry to an institution you do not control.Not ranked here: blockchain intelligence firms, protocols and open standards, standards bodies, membership networks, resellers of a ranked vendor, and defunct or retired brands.9 of the 20 assessed are ranked; 11 were turned away by name. Who, and whyRequirements narrow the list; they never change a published ChainChoice Score. How the ranking works

CodeVASP (CODE)

How CodeVASP (CODE) was chosen

Wins the weighted total without leading any single criterion

Korean exchange-founded Travel Rule network

81 out of 100published score, #1 of all 9 worldwide

Evidence

High

4/4 criteria scored, with 4 dated sources quoted.

Protocol reachFailure pathsUnhosted wallet control

Why it leads

CodeVASP (CODE) and 21 Analytics — 21 Travel Rule have the same published total; the published tie-break puts CodeVASP (CODE) first.
Tied with 21 Analytics — 21 Travel Rule on the published total; the tie-break orders them
Provider states broad availability

Tradeoff

Custody and go live: 2 points below the best in this ranking

Sort by

#ProviderPriceCompare

Tied for #1 · ordered by unrounded weighted total (47.37 against 47.32)

On-premises Travel Rule software

81 out of 100

Tied for #1 · ordered by name, A to Z

Travel Rule messaging over Notabene's own...

81 out of 100

Travel Rule module in Sumsub's Transaction...

80 out of 100

Compliance platform

78 out of 100

Same score, not joint · ordered by weighted total (46.40 against 46.10)

Singapore-operated VASP Travel Rule network....

78 out of 100

A self-hosted Enclave

68 out of 100

Same score, not joint · ordered by weighted total (42.50 against 42.30)

Sygna Bridge documents one signed IVMS101...

68 out of 100

A self-hosted

62 out of 100

Compare providers (0)

See key differences in features, fees, security and more.

Failure paths

Failure, decline and timeout paths

28% of the published criteria weight. Scored 0–10 from the published evidence; the order below is by this criterion, then the published ranking.

Provider	Failure paths (0–10)	ChainChoice Score
Notabene Transact	9	81
Sumsub Travel Rule	9	80
CodeVASP (CODE)	8	81
Ospree	8	78
Global Travel Rule (GTR)	8	78
VerifyVASP	8	68
Sygna Bridge (CoolBitX)	8	68
21 Analytics — 21 Travel Rule	6	81
Shyft Veriscope	4	62

Unhosted wallet control

Unhosted-wallet control, as documented

24% of the published criteria weight. Scored 0–10 from the published evidence; the order below is by this criterion, then the published ranking.

Provider	Unhosted wallet control (0–10)	ChainChoice Score
21 Analytics — 21 Travel Rule	9	81
Sumsub Travel Rule	9	80
CodeVASP (CODE)	8	81
Notabene Transact	8	81
Ospree	7	78
Global Travel Rule (GTR)	7	78
Shyft Veriscope	5	62
Sygna Bridge (CoolBitX)	4	68
VerifyVASP	3	68

Custody and go live

PII custody and testable go-live

18% of the published criteria weight. Scored 0–10 from the published evidence; the order below is by this criterion, then the published ranking.

Provider	Custody and go live (0–10)	ChainChoice Score
VerifyVASP	10	68
CodeVASP (CODE)	8	81
21 Analytics — 21 Travel Rule	8	81
Notabene Transact	8	81
Sumsub Travel Rule	8	80
Global Travel Rule (GTR)	8	78
Sygna Bridge (CoolBitX)	8	68
Shyft Veriscope	8	62
Ospree	7	78

Protocol reach

Documented protocol reach and routing

30% of the published criteria weight. Scored 0–10 from the published evidence; the order below is by this criterion, then the published ranking.

Provider	Protocol reach (0–10)	ChainChoice Score
21 Analytics — 21 Travel Rule	9	81
CodeVASP (CODE)	8	81
Sumsub Travel Rule	8	80
Ospree	8	78
Notabene Transact	7	81
Global Travel Rule (GTR)	7	78
Sygna Bridge (CoolBitX)	6	68
Shyft Veriscope	6	62
VerifyVASP	4	68

All 4 published criteria

Every ranked row’s score on each criterion, in the published order. Choose a column to order by it.

	Provider					ChainChoice Score
1	CodeVASP (CODE)	8	8	8	8	81
2	21 Analytics — 21 Travel Rule	9	6	9	8	81
3	Notabene Transact	7	9	8	8	81
4	Sumsub Travel Rule	8	9	9	8	80
5	Ospree	8	8	7	7	78
6	Global Travel Rule (GTR)	7	8	7	8	78
7	VerifyVASP	4	8	3	10	68
8	Sygna Bridge (CoolBitX)	6	8	4	8	68
9	Shyft Veriscope	6	4	5	8	62

How this ranking works

How firm the #1 is, the per-criterion arithmetic behind each score, who pays ChainChoice, and which travel rule compliance were assessed and left out.

One point from changingCodeVASP (CODE) and 21 Analytics — 21 Travel Rule are tied on the published score

A one-point change on one criterion puts 21 Analytics — 21 Travel Rule first, so read both.

See the arithmetic

Move documented protocol reach and routing — the heaviest criterion that changes it, weighted 30 — by a single point and 21 Analytics — 21 Travel Rule takes first place. Both are worth reading. The published rankings file

Why this score4 published criteria

Published criterionWtScore, and the best hereGap out of 10Pts

Documented protocol reach and routing7.2−187.7

Failure, decline and timeout paths6.7−187.2

Unhosted-wallet control, as documented5.8−186.1

PII custody and testable go-live4.3−284.6

Σ methodology points25.6/32

Each bar is the score on that criterion’s own 0–10 scale, never rescaled to the pool. The dark line is the best any product here reached on that axis. Wt is the most the criterion can add to the 86-point weighted total. Pts is weight × score × 32; the sum is the methodology score, and each weighted point behind the leader costs 2.6 on the displayed score. how these are weighted

Why it ranks first

Why CodeVASP (CODE) leads this category right now

Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. Strongest on documented protocol reach and routing (8/10): CodeVASP members exchange traffic with VerifyVASP, GTR and Sygna members through the same invocation, with required fields varying by the counterparty's solution; GTR and Sygna get their own field lists. VerifyVASP routes are domestic to South Korea, and no email path for a VASP outside every alliance is published. Published price: No price is published. www.codevasp.com/en/contact is a "Request a Demo" form ("Fill out the form below to learn how CodeVASP can help your business stay compliant."), not a price list; https://www.codevasp.com/en/pricing returns HTTP 404 and the site nav has…

Best for

Protocol reach — 8/10

Main tradeoff

Technical integration does not buy reach: "Completing the API integration process with CodeVASP does not automatically enable transactions with all member VASPs.", each then running its own AML/CFT and readiness review (01-Integration-Process). Of the three solutions 12-Interoperability names, a note confines one to Korea: "Exchanges integrated with the VerifyVASP solution support only domestic transactions within South Korea, transactions with exchanges outside Korea are not possible." The counterparty list sits on a dashboard that "can only be joined by an invitation" (01-Dev-Environment-Setup), and the 63 English pages in the /en/docs navigation carry no price (read 2026-09-04).

Verify before signup

No price is published. www.codevasp.com/en/contact is a "Request a Demo" form ("Fill out the form below to learn how CodeVASP can help your business stay compliant."), not a price list; https://www.codevasp.com/en/pricing returns HTTP 404 and the site nav has no pricing entry; none of the 62 English pages in the docs.codevasp.com/en/docs navigation states a CodeVASP fee — their price and currency fields describe the transfer payload, not a charge (all read 30 September 2026).

Recommendation summary

What should decide this category

Which institutions do your customers actually send to and receive from?

When the counterparty never answers, what does your integration receive?

Where does the personal data rest, and who holds the keys to it?

Quick picks

Strong options in this category

Start with the lead choice first, then use the shortlist only if you still need a challenger or stronger fit for a specific setup.

Best overall

CodeVASP (CODE)

Best for: Protocol reach — 8/10

Documented protocol reach and routing · weight 30%8/10Failure, decline and timeout paths · weight 28%8/10Unhosted-wallet control, as documented · weight 24%8/10PII custody and testable go-live · weight 18%8/10

Quick pick

Tied for #1 · ordered by unrounded weighted total (47.37 against 47.32)

21 Analytics — 21 Travel Rule

On-premises Travel Rule software: TRUST, TRP and email each get a flow page, three self-hosted-wallet proofs over 2,469- and 1,110-line asset lists, and security.html and deployment/deployment.html name no deletion control (2026-09-04). Strongest on documented protocol reach and routing (9/10): 21 Travel Rule documents TRUST, TRP and email as separate flows, picks TRP or email automatically by counterparty, falls back to email when no Travel Address resolves, and publishes each route's prerequisites, from TRUST onboarding to SMTP settings. It names no tie-break for a VASP on both TRUST and TRP. Weakest on failure, decline and timeout paths (6/10): 21 Travel Rule labels transactions Pending, Approved, Executed, Declined, Cancelled or Registered, but a counterparty's reason arrives only as a free-text comment. Its pages name no reason code, no state for a counterparty that never answers, and no timeout or retry policy. Published price: No price is published. 21analytics.co/pricing (read 2026-09-30) lists two tiers with no figure: Essentials ends "No Onboarding Fees" / "Start Now"; Enterprise offers "Custom Commercial Terms" / "Contact Us".

Best for: Protocol reach — 9/10

Documented protocol reach and routing · weight 30%9/10Failure, decline and timeout paths · weight 28%6/10Unhosted-wallet control, as documented · weight 24%9/10PII custody and testable go-live · weight 18%8/10

Quick pick

Tied for #1 · ordered by name, A to Z

Notabene Transact

Travel Rule messaging over Notabene's own DIDComm network, with a 19-value rejection enum that names a no-response state, four documented self-hosted wallet proof methods, and end-to-end, hosted or hybrid PII encryption. Strongest on failure, decline and timeout paths (9/10): Notabene's reject endpoint takes a 19-value reason enum including COUNTERPARTY_NO_RESPONSE, COUNTERPARTY_REJECTED and BENEFICIARY_NOT_FOUND, an agent with an unresolvable DID returns FAILED, and a self-hosted destination is its own NON_CUSTODIAL type. Policies act, but the response clock is the buyer's own rule. Weakest on documented protocol reach and routing (7/10): Notabene documents four counterparty discovery flows with a directory fallback and gives the TRUSThub connector its own page listing the prerequisites to enable it. Other transports appear only as typed values on the transfer schema, with no page of their own and no published rule for choosing among them. Published price: Only a free tier is priced. notabene.id/solutions/sunrise-plan (read 2026-09-30) says "Roll out Travel Rule compliance at your own pace. Start with a free plan.

Best for: Failure paths — 9/10

Documented protocol reach and routing · weight 30%7/10Failure, decline and timeout paths · weight 28%9/10Unhosted-wallet control, as documented · weight 24%8/10PII custody and testable go-live · weight 18%8/10

Quick pick

Sumsub Travel Rule

Travel Rule module in Sumsub's Transaction Monitoring suite: six documented transports with a published routing rule and an email fallback, ten named final statuses, signature and Satoshi-test wallet proofs, and a Sandbox test VASP. Strongest on failure, decline and timeout paths (9/10): Sumsub's statuses page names separate final outcomes for a counterparty silent past the timeout, a VASP identified but unreachable over a shared protocol, an address attributed to no VASP, an explicit decline and data the counterparty cannot reconcile, and sets no platform-wide default for expired exchanges. Weakest on documented protocol reach and routing (8/10): Sumsub picks the protocol by what the counterparty VASP supports, links pages for TRP, CODE, GTR, Sygna Bridge and its own network, and emails a counterparty outside every connected network. The CODE page names a verification prerequisite; the TRP page names none, and no route is marked planned. Published price: No price is published for Travel Rule. sumsub.com/pricing/ (fetched 2026-09-30) now lists "Travel Rule" in the Basic and Compliance feature lists as well, but marked as a paid feature (the page legend separates "included in the plan" from "paid feature") with…

Best for: Failure paths — 9/10

Documented protocol reach and routing · weight 30%8/10Failure, decline and timeout paths · weight 28%9/10Unhosted-wallet control, as documented · weight 24%9/10PII custody and testable go-live · weight 18%8/10

Considered and not ranked

11 products we looked at and left out

A shortlist is only honest if it says who it turned away. Each of these was assessed against the same published criteria as the ranked table and excluded for a stated reason — not overlooked.

We assessed 20 products here and rank 9 — 45% of what we looked at. That share is of the products we assessed, not of the category: how many exist is not something we can count, so we do not claim a number for it.

TRM LabsChainalysisMerkle ScienceEllipticFireblocksCipherTrace Traveler (Mastercard)CoinfirmTRISA (Travel Rule Information Sharing Architecture)TRP (Travel Rule Protocol)TRUST (Travel Rule Universal Solution Technology)OpenVASP Association

What this ranking does not assess

Liveness failure: the operator stops, censors you or loses data.
Exit failure: you cannot get out at par, on time, or with what is yours.

These can still cost you money here; the ranking does not measure them, so a high place says nothing about them. Which criterion scores each family, and why the others do not apply, is in /data/risk-coverage.json.

How this ranking is built

Reviewed on documented protocol reach and routing, failure, decline and timeout paths, unhosted-wallet control, as documented, and PII custody and testable go-live.

Data checked Sep 2026 · Independent rankings · We show our work

Reviewed 30 September 2026Next review by 14 November 2026Published 4 September 2026Methodology v2026.11.1

How this page is reviewed

Reviewed means every product ranked on this page was read against its sources on or after that date; every ranked category is re-read at least every 45 days. Models research, extract and parse. A deterministic engine ranks. Every quote passes an adversarial refute pass.

Accountable for this review: Mathias Siemonsmeier, Founder.

How we review · Review calendar · Corrections log · How we make money

Direct answer

What is the best travel rule tool in 2026?

CodeVASP (CODE) ranks #1 overall for travel rule compliance on ChainChoice. Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. It holds that rank under an affiliate-blind methodology scored across 4 published, weighted criteria — the code that ranks providers physically cannot read affiliate payouts (CI-enforced), so a payout can't move a rank. The verdict re-computes on every fee change, incident, or regulatory action; the full reasoning and the audit receipt are under Methodology.

How you can lose money here, and what the ranking scores

Regulatory failure: no licence where you are, or a forced market exit.
Scored by Unhosted-wallet control, as documented · 24% (CodeVASP (CODE) 8/10, 21 Analytics — 21 Travel Rule 9/10, Notabene Transact 8/10)
Execution failure: you get a worse price, later, or nothing.
Scored by Failure, decline and timeout paths · 28% (CodeVASP (CODE) 8/10, 21 Analytics — 21 Travel Rule 6/10, Notabene Transact 9/10)
Information failure: the number is wrong or bought, or your data leaks.
Scored by PII custody and testable go-live · 18% (CodeVASP (CODE) 8/10, 21 Analytics — 21 Travel Rule 8/10, Notabene Transact 8/10)

Not assessed by this ranking: Liveness failure, Exit failure. A high place says nothing about these; the Methodology tab says what each means.

Also scored, as cost, quality or a summary of several families: Documented protocol reach and routing (30%).

FAQs

3 questions readers ask before choosing travel rule compliance.

Frequently asked

Questions people ask before choosing travel rule compliance

What happens to my users' data when the counterparty is on no network we share?

It gets a named state, or it gets a support ticket. The vendors that score here publish a machine-readable outcome for each way an exchange fails — silence past a timeout, a counterparty identified but unreachable, a destination that attributes to no institution — so your integration can act on it. The ones that do not leave you reconciling a stranded transfer by email.

What happens when a transfer cannot reach the counterparty?

Not as a logo wall. Reach is bilateral: a message completes only if the counterparty runs a protocol yours can reach, so what is scored is whether each transport has a page describing how that route works and what prerequisites it demands, plus the documented path for a counterparty outside every supported network.

What matters most when picking a Travel Rule vendor?

Reach and failure states, 58% of the weight between them. Reach decides whether the message completes at all, and the failure vocabulary decides whether your team learns that from an API or from a customer. Wallet control and data residency carry the rest.

Free advisorNo signup needed

Still unsure? Get your best travel rule compliance pick

Answer a few quick questions and get one clear recommendation based on how you actually plan to use crypto — then review the evidence before deciding.

No signupFree first pass · PrivateNo spam · No account

Not financial advice · Independent · Always do your own research

Best picks

Best travel rule compliance in 2026

Weighted on documented reach into other networks and the rule that routes a transfer (30), what an integrator receives when an exchange fails (28), what is published about proving a customer controls a self-hosted address (24), and where the personal data rests and how go-live is rehearsed (18).

Best overall

CodeVASP (CODE)

Data checked Sep 2026

Best for: Protocol reach — 8/10

Browse this network

Written and reviewed by Mathias Siemonsmeier Founder

Not financial advice · For informational purposes only · Always do your own research

Your setup

9 providers match your requirements

Why it leads

Tradeoff

Compare providers (0)