Ring-Fenced Vaults
Your money isn't just categorised — it's cryptographically isolated in separate sub-ledgers.
Segregation, not categorisation
Budgeting apps tag your money with labels. You still see one balance, and you still have to exercise willpower not to dip into rent money for a weekend away. The labels are cosmetic — the money is fungible.
tPay365 vaults are different. Each vault is a distinct sub-ledger entry in a safeguarded account. The money is genuinely separated — not just tagged. Your Rent Vault holds exactly £850 in its own reconciled position. It cannot be accidentally spent. It cannot be overdrafted against. It exists independently.
Every vault reconciles against the partner bank position every 60 seconds. The invariant is absolute: the sum of all vault balances must equal the total held at the partner bank. If it doesn't, an alert fires immediately.
Your vault dashboard
Rent Vault
100% funded
Bills Vault
86% funded
Loan Vault
100% funded
Savings Vault
Technical Architecture
Technical Specification
Architecture: 1 user → N vaults → N sub-ledger entries Isolation: Per-vault balance, independent reconciliation Safeguarding: 100% in Tier-1 regulated accounts Invariant: sum(all_vaults) == partner_bank_total Reconciliation: Every 60 seconds Encryption: AES-256-CBC per vault entry
Reconciliation
Every 60s
Continuous balance verification
Encryption
AES-256-CBC
Per-entry encryption at rest
Safeguarding
100%
Tier-1 regulated accounts