Travel Rule Compliance evaluated across documented protocol reach and routing, failure, decline and timeout paths, unhosted-wallet control, as documented, and PII custody and testable go-live.
CodeVASP (CODE)
#1 of 9 · published ranking
CodeVASP (CODE)
81ChainChoice Score
4199
Cost
Not priced· No comparable price is published
Joint #1 · ordered by unrounded weighted total (47.37 against 47.32)
9travel rule compliance · sorted by chainchoice score
ranked before any payout data is seen
#1 overall·computed before any payout data is seenOverall
CodeVASP (CODE)
CodeVASP (CODE)
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks.
Wins the weighted total without leading any single criterion · level with 21 Analytics — 21 Travel Rule
81ChainChoice Score · first of 9
4199
Catalog strengths
Protocol reachFailure pathsUnhosted wallet control
Why it leads
Tied with 21 Analytics — 21 Travel Rule on the published total; the tie-break orders them
Provider states broad availability
Protocol reach 8/10 (weight 30%)
Evidence
4/4
criteria scored · 4 receipts quoted
Margin
level
over 21 Analytics — 21 Travel Rule, ranked #02
Rank stability
Level
Level with 21 Analytics — 21 Travel Rule on the weighted total from different criterion scores; the criteria alone put CodeVASP (CODE) first (8 against 7.98)
Tradeoff
−2
PII custody and testable go-live — behind this pool's best
Jurisdiction
Global
no restricted market on record
Score breakdowntick = pool best
Protocol reach8/10
Failure paths8/10
Unhosted wallet control8/10
Custody and go live8/10
Ranking-blind · a guided run tailors this to your size, custody & jurisdiction
#ProviderScoreEvidenceKey strengths
Joint #1 · ordered by unrounded weighted total (47.37 against 47.32)
2=
21
21 Analytics — 21 Travel Rule
Protocol reachUnhosted wallet control
Joint #1 · ordered by name, A to Z
3=
NO
Notabene Transact
Failure pathsUnhosted wallet control
4−1
SU
Sumsub Travel Rule
Failure pathsUnhosted wallet control
5−2
OS
Ospree
Protocol reachFailure paths
Same score, not joint · ordered by weighted total (46.40 against 46.10)
6=
GL
Global Travel Rule (GTR)
Failure pathsCustody and go live
7−10
VE
VerifyVASP
Custody and go liveFailure paths
Same score, not joint · ordered by weighted total (42.50 against 42.30)
8=
SY
Sygna Bridge (CoolBitX)
Failure pathsCustody and go live
9−6
SH
Shyft Veriscope
Custody and go liveProtocol reach
Ranking-blind — order computed before any payout data is joined
Below the table
How this ranking works
Everything the table draws on continues here: how firm the #1 is, the per-criterion arithmetic behind each score, who pays ChainChoice, and the full guide to choosing.
Direct answer
What is the best travel rule compliance in 2026?
CodeVASP (CODE) ranks #1 overall for travel rule compliance on ChainChoice. Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. It holds that rank under an affiliate-blind methodology scored across 4 published, weighted criteria — the code that ranks providers physically cannot read affiliate payouts (CI-enforced), so a payout can't move a rank. The verdict re-computes on every fee change, incident, or regulatory action; full reasoning and the audit receipt are below.
Best picks
Best travel rule compliance in 2026
Weighted on documented reach into other networks and the rule that routes a transfer (30), what an integrator receives when an exchange fails (28), what is published about proving a customer controls a self-hosted address (24), and where the personal data rests and how go-live is rehearsed (18).
Best overall
CodeVASP (CODE)
CodeVASP (CODE)
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks.
Data checked Sep 2026
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. Strongest on documented protocol reach and routing (8/10): The vendor's own network is documented end to end, and 12-Interoperability-with-Other-Protocols names three solutions: "Currently, CodeVASP is integrated with solutions such as Verify VASP, GTR, and Sygna, providing a wide-ranging network." The selection rule is published: "However, the required fields may vary… Weakest on pii custody and testable go-live (8/10): Encryption in transit is described - "personal information is additionally encrypted as part of the payload object, so that only the participating VASPs can decrypt it" (02-Encryption-Decryption) - and a sandbox is named, "the sandbox (testing) environment, not the live production environment where real funds move"…
Best for: Protocol reach — 8/10
Why this score4 published criteria
Published criterionWtScore, and the best hereGap/10Pts
Documented protocol reach and routing7.2−187.7
Failure, decline and timeout paths6.7−187.2
Unhosted-wallet control, as documented5.8−186.1
PII custody and testable go-live4.3−284.6
Σ methodology points25.6/32
Each bar is the score on that criterion’s own 0–10 scale, never rescaled to the pool. The dark line is the best any product here reached on that axis. Wt is the most the criterion can add to the 86-point weighted total. Pts is weight × score × 32; the sum is the methodology score, and each weighted point behind the leader costs 2.6 on the displayed score. how these are weighted
Considered and not ranked
11 products we looked at and left out
A shortlist is only honest if it says who it turned away. Each of these was assessed against the same published criteria as the ranked table and excluded for a stated reason — not overlooked.
We assessed 15 products here and rank 4 — 27% of what we looked at. That share is of the products we assessed, not of the category: how many exist is not something we can count, so we do not claim a number for it.
TRM LabsChainalysisMerkle ScienceEllipticFireblocksCipherTrace Traveler (Mastercard)CoinfirmTRISA (Travel Rule Information Sharing Architecture)TRP (Travel Rule Protocol)TRUST (Travel Rule Universal Solution Technology)OpenVASP Association
Why it ranks first
Why CodeVASP (CODE) leads this category right now
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. Strongest on documented protocol reach and routing (8/10): The vendor's own network is documented end to end, and 12-Interoperability-with-Other-Protocols names three solutions: "Currently, CodeVASP is integrated with solutions such as Verify VASP, GTR, and Sygna, providing a wide-ranging network." The selection rule is published: "However, the required fields may vary… Weakest on pii custody and testable go-live (8/10): Encryption in transit is described - "personal information is additionally encrypted as part of the payload object, so that only the participating VASPs can decrypt it" (02-Encryption-Decryption) - and a sandbox is named, "the sandbox (testing) environment, not the live production environment where real funds move"…
Best for
Protocol reach — 8/10
Main tradeoff
Technical integration does not buy reach: "Completing the API integration process with CodeVASP does not automatically enable transactions with all member VASPs.", each then running its own AML/CFT and readiness review (01-Integration-Process). Of the three solutions 12-Interoperability names, a note confines one to Korea: "Exchanges integrated with the VerifyVASP solution support only domestic transactions within South Korea, transactions with exchanges outside Korea are not possible." The counterparty list sits on a dashboard that "can only be joined by an invitation" (01-Dev-Environment-Setup), and the 63 English pages in the /en/docs navigation carry no price (read 2026-09-04).
Verify before signup
Read 2026-09-04. https://docs.codevasp.com/en/docs/unhosted-wallet/api-reference/01-Unhosted-Wallet-Introduction (HTTP 200) publishes "Below is the list of networks available for Unhosted Wallet Verification." plus seven entries, {"network":"ETH","name":"Ethereum"} through {"network":"BSC","name":"BNB Smart Chain"}. That is unhosted-wallet-proof coverage; the Travel Rule side publishes no static chain list — 03-Networks-by-Coin is a live endpoint, "GET /v1/code/connect/coin-network", whose example returns only BTC. Pricing: /en/pricing 404s; /en/contact is a demo form; the 63-page /en/docs nav names no fee.
Recommendation summary
What should decide this category
Which institutions do your customers actually send to and receive from?
When the counterparty never answers, what does your integration receive?
Where does the personal data rest, and who holds the keys to it?
Quick picks
Strong options in this category
Start with the lead choice first, then use the shortlist only if you still need a challenger or stronger fit for a specific setup.
Best overall
CodeVASP (CODE)
CodeVASP (CODE)
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks.
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. Strongest on documented protocol reach and routing (8/10): The vendor's own network is documented end to end, and 12-Interoperability-with-Other-Protocols names three solutions: "Currently, CodeVASP is integrated with solutions such as Verify VASP, GTR, and Sygna, providing a wide-ranging network." The selection rule is published: "However, the required fields may vary… Weakest on pii custody and testable go-live (8/10): Encryption in transit is described - "personal information is additionally encrypted as part of the payload object, so that only the participating VASPs can decrypt it" (02-Encryption-Decryption) - and a sandbox is named, "the sandbox (testing) environment, not the live production environment where real funds move"…
Best for: Protocol reach — 8/10
Documented protocol reach and routing · 30%
8/10
Failure, decline and timeout paths · 28%
8/10
Unhosted-wallet control, as documented · 24%
8/10
PII custody and testable go-live · 18%
8/10
Quick pick
Joint #1 · ordered by unrounded weighted total (47.37 against 47.32)
21
21 Analytics — 21 Travel Rule
On-premises Travel Rule software: TRUST, TRP and email each get a flow page, three self-hosted-wallet proofs over 2,469- and 1,110-line asset lists, and security.html and deployment/deployment.html name no deletion control (2026-09-04).
On-premises Travel Rule software: TRUST, TRP and email each get a flow page, three self-hosted-wallet proofs over 2,469- and 1,110-line asset lists, and security.html and deployment/deployment.html name no deletion control (2026-09-04). Strongest on documented protocol reach and routing (9/10): Each transport has a core-concepts flow page and a counterparty tab; the trusted list is "sorted by the means of communication, which are TRUST, TRP and Email." (gui/counterparty_vasps/index.html). Prerequisites are per transport. Weakest on failure, decline and timeout paths (6/10): Statuses are machine-readable API values, not only GUI labels: the trpdTransactions subscription emits events "whenever a TRP transaction's status changes, returning a complete TrpdTxUnion object" and "You can identify them using the status and type fields on the object returned from the subscription."… Published price: No Onboarding Fees
Best for: Protocol reach — 9/10
Documented protocol reach and routing · 30%
9/10
Failure, decline and timeout paths · 28%
6/10
Unhosted-wallet control, as documented · 24%
9/10
PII custody and testable go-live · 18%
8/10
Quick pick
Joint #1 · ordered by name, A to Z
NO
Notabene Transact
Travel Rule messaging over Notabene's own DIDComm network, with a 19-value rejection enum that names a no-response state, four documented self-hosted wallet proof methods, and end-to-end, hosted or hybrid PII encryption.
Travel Rule messaging over Notabene's own DIDComm network, with a 19-value rejection enum that names a no-response state, four documented self-hosted wallet proof methods, and end-to-end, hosted or hybrid PII encryption. Strongest on failure, decline and timeout paths (9/10): Statuses are machine-readable and cover the happy path plus accept, reject and cancel, and all five failure conditions are separately named. Weakest on documented protocol reach and routing (7/10): Notabene's own transport is documented end to end with a named out-of-network path, and two third-party routes each have their own page plus that route's prerequisites. Published price: Send up to $10k USD in transactions monthly
Best for: Failure paths — 9/10
Documented protocol reach and routing · 30%
7/10
Failure, decline and timeout paths · 28%
9/10
Unhosted-wallet control, as documented · 24%
8/10
PII custody and testable go-live · 18%
8/10
Quick pick
Sumsub Travel Rule
Sumsub Travel Rule
Travel Rule module in Sumsub's Transaction Monitoring suite: six documented transports with a published routing rule and an email fallback, ten named final statuses, signature and Satoshi-test wallet proofs, and a Sandbox test VASP.
Travel Rule module in Sumsub's Transaction Monitoring suite: six documented transports with a published routing rule and an email fallback, ten named final statuses, signature and Satoshi-test wallet proofs, and a Sandbox test VASP. Strongest on failure, decline and timeout paths (9/10): Every exchange carries a machine-readable state (docs.sumsub.com/docs/statuses-lifecycle-and-outcomes, read 2026-09-04): "Every Travel Rule data exchange has a status in travelRuleInfo.status." The 5-6 floor: identifiers cover the happy path plus accept, reject and cancel — awaitingCounterparty, completed, finished… Weakest on pii custody and testable go-live (8/10): The 5-6 floor is met on both halves. Encryption in transit is described per transport: "The data is HTTPS-encrypted, so it is only available to Sumsub and the originator/beneficiary VASP." (docs.sumsub.com/docs/trp-protocol) and "During the procedure, all the data that is shared by VASPs is encoded by the secure… Published price: Basic "$1.35" "per verification" "$149 min. monthly commitment"; Compliance "$1.85" "$299 min. monthly commitment"; Enterprise "Let’s talk!".
Best for: Failure paths — 9/10
Documented protocol reach and routing · 30%
8/10
Failure, decline and timeout paths · 28%
9/10
Unhosted-wallet control, as documented · 24%
9/10
PII custody and testable go-live · 18%
8/10
Frequently asked
Questions people ask before choosing travel rule compliance
What happens to my users' data when the counterparty is on no network we share?
It gets a named state, or it gets a support ticket. The vendors that score here publish a machine-readable outcome for each way an exchange fails — silence past a timeout, a counterparty identified but unreachable, a destination that attributes to no institution — so your integration can act on it. The ones that do not leave you reconciling a stranded transfer by email.
What happens when a transfer cannot reach the counterparty?
Not as a logo wall. Reach is bilateral: a message completes only if the counterparty runs a protocol yours can reach, so what is scored is whether each transport has a page describing how that route works and what prerequisites it demands, plus the documented path for a counterparty outside every supported network.
What matters most when picking a Travel Rule vendor?
Reach and failure states, 58% of the weight between them. Reach decides whether the message completes at all, and the failure vocabulary decides whether your team learns that from an API or from a customer. Wallet control and data residency carry the rest.
Free advisor·No signup needed
Still unsure? Get your best travel rule compliance pick
Answer a few quick questions and get one clear recommendation based on how you actually plan to use crypto — then review the evidence before deciding.
No signup·Free first pass · Private·No spam · No account
Not financial advice · Independent · Always do your own research
Browse this network
How this ranking is built
Reviewed on documented protocol reach and routing, failure, decline and timeout paths, unhosted-wallet control, as documented, and PII custody and testable go-live.
Data checked Sep 2026 · Independent rankings · We show our work
Not financial advice · For informational purposes only · Always do your own research
//Analytics consent·GDPR · ePrivacy · TTDSG
ChainChoice measures page views and conversions with two cookieless, EU-hosted services: Plausible and Cloudflare Web Analytics. Nothing loads until you accept, and rankings are identical either way.ChainChoice measures how the engine is used — page views, conversions, referrer — through two cookieless, EU-hosted services: Plausible and Cloudflare Web Analytics. No advertising cookies, no cross-site profile, no data resale. Neither script loads until you accept, and rankings are identical whether you accept or decline.