Travel Rule Compliance evaluated across documented protocol reach and routing, failure, decline and timeout paths, unhosted-wallet control, as documented, and PII custody and testable go-live.
CodeVASP (CODE)
#1 of 9 · published ranking
CodeVASP (CODE)
81ChainChoice Score
4199
Cost
Not priced· No comparable price is published
Joint #1 · ordered by unrounded weighted total (47.37 against 47.32)
No provider can pay for a position in this table. The code that computes this order cannot read which links earn us a commission, and every build proves it. Every score below rebuilds from the published criteria.Ranking 2026.08 · 4 criteria · 9 products · same inputs, same order
Personal comparison
Travel Rule Compliance ranked comparison
No comparable price is published; ranking still uses verified product evidence.
Ranked on 4 published criteria weighted 30/28/24/18, which set goal alignment — 30 of the 86 points. The rest: regional access 20, evidence depth 18, ease of use 10, institutional trust 8. Profile match is shown in breakdowns but carries no weight.
Audit
Infrastructure
Methodology
2026.09.15
published 2026-09-16
Providers tracked
980+
across 119 categories
Last verified
2026-09-04
newest dated pricing or sentiment read
Named on the roster
2 people
managing directors · 6 automated processes
Decision guide
What matters most before choosing in this category
Weighted on documented reach into other networks and the rule that routes a transfer (30), what an integrator receives when an exchange fails (28), what is published about proving a customer controls a self-hosted address (24), and where the personal data rests and how go-live is rehearsed (18).
What matters most before choosing in this category
Weighted on documented reach into other networks and the rule that routes a transfer (30), what an integrator receives when an exchange fails (28), what is published about proving a customer controls a self-hosted address (24), and where the personal data rests and how go-live is rehearsed (18).
Which institutions do your customers actually send to and receive from?
When the counterparty never answers, what does your integration receive?
Where does the personal data rest, and who holds the keys to it?
Widest documented reach
Expert review and scoring weights
CodeVASP (CODE)
CodeVASP (CODE)Data checked Sep 2026
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks.
Korean exchange-founded Travel Rule network whose English docs publish an eight-code denial vocabulary, a named beneficiary-timeout error, a self-hosted Docker cipher module and signature-proof unhosted-wallet checks on seven networks. Strongest on documented protocol reach and routing (8/10): The vendor's own network is documented end to end, and 12-Interoperability-with-Other-Protocols names three solutions: "Currently, CodeVASP is integrated with solutions such as Verify VASP, GTR, and Sygna, providing a wide-ranging network." The selection rule is published: "However, the required fields may vary… Weakest on pii custody and testable go-live (8/10): Encryption in transit is described - "personal information is additionally encrypted as part of the payload object, so that only the participating VASPs can decrypt it" (02-Encryption-Decryption) - and a sandbox is named, "the sandbox (testing) environment, not the live production environment where real funds move"…
Best forProtocol reach — 8/10
Main tradeoffTechnical integration does not buy reach: "Completing the API integration process with CodeVASP does not automatically enable transactions with all member VASPs.", each then running its own AML/CFT and readiness review (01-Integration-Process). Of the three solutions 12-Interoperability names, a note confines one to Korea: "Exchanges integrated with the VerifyVASP solution support only domestic transactions within South Korea, transactions with exchanges outside Korea are not possible." The counterparty list sits on a dashboard that "can only be joined by an invitation" (01-Dev-Environment-Setup), and the 63 English pages in the /en/docs navigation carry no price (read 2026-09-04).
Verify before signupRead 2026-09-04. https://docs.codevasp.com/en/docs/unhosted-wallet/api-reference/01-Unhosted-Wallet-Introduction (HTTP 200) publishes "Below is the list of networks available for Unhosted Wallet Verification." plus seven entries, {"network":"ETH","name":"Ethereum"} through {"network":"BSC","name":"BNB Smart Chain"}. That is unhosted-wallet-proof coverage; the Travel Rule side publishes no static chain list — 03-Networks-by-Coin is a live endpoint, "GET /v1/code/connect/coin-network", whose example returns only BTC. Pricing: /en/pricing 404s; /en/contact is a demo form; the 63-page /en/docs nav names no fee.
Methodology
How this category is reviewed
Reviewed on documented protocol reach and routing, failure, decline and timeout paths, unhosted-wallet control, as documented, and PII custody and testable go-live.
The order on this page is the published ranking for this category. Every criterion, weight and source behind it is on the methodology page.
Frequently asked
Questions people ask before choosing travel rule compliance
What happens to my users' data when the counterparty is on no network we share?
It gets a named state, or it gets a support ticket. The vendors that score here publish a machine-readable outcome for each way an exchange fails — silence past a timeout, a counterparty identified but unreachable, a destination that attributes to no institution — so your integration can act on it. The ones that do not leave you reconciling a stranded transfer by email.
What happens when a transfer cannot reach the counterparty?
Not as a logo wall. Reach is bilateral: a message completes only if the counterparty runs a protocol yours can reach, so what is scored is whether each transport has a page describing how that route works and what prerequisites it demands, plus the documented path for a counterparty outside every supported network.
What matters most when picking a Travel Rule vendor?
Reach and failure states, 58% of the weight between them. Reach decides whether the message completes at all, and the failure vocabulary decides whether your team learns that from an API or from a customer. Wallet control and data residency carry the rest.
Not financial advice · For informational purposes only · Always do your own research
//Analytics consent·GDPR · ePrivacy · TTDSG
ChainChoice measures page views and conversions with two cookieless, EU-hosted services: Plausible and Cloudflare Web Analytics. Nothing loads until you accept, and rankings are identical either way.ChainChoice measures how the engine is used — page views, conversions, referrer — through two cookieless, EU-hosted services: Plausible and Cloudflare Web Analytics. No advertising cookies, no cross-site profile, no data resale. Neither script loads until you accept, and rankings are identical whether you accept or decline.
