> ## Documentation Index
> Fetch the complete documentation index at: https://apidocs.finrock.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Key Features

## Wallet Security Models (Hot, Warm, Cold)

Finrock supports three wallet configurations distinguished by where the third MPC key share resides and how approvals happen:

> [card] Hot Wallet
>
> Key shares are hosted on the cloud using Finrock-KMS (aka Cloud Signer); approvals can be fully automated for high-throughput workflows.

> [card] Warm Wallet
>
> Key shares are hosted on internet-connected mobile devices; approvals are done via the Finrock mobile app.

> [card] Cold Wallet
>
> Key shares are hosted on an air-gapped (offline) mobile device; approvals require bi-directional QR scanning for maximum isolation.

## Role-Based Access Control (RBAC)

Finrock enforces granular permissions by role, controlling:

* Which parts of the console/API a user can access
* Which actions they can perform (e.g., initiate transfers, change policies)
* Which MPC key shares they can use to sign

Roles range from **Owner** (full admin) down to **Viewer** (read-only). API users can be assigned any role except Owner.

## Admin Quorum

Sensitive workspace changes (adding/removing users, whitelisting addresses, new network connections, policy edits) require multiple admin approvals defined by an Admin Quorum threshold.

This multi-party approval mitigates insider risk and limits damage if an admin account is compromised.

## Policies (Transaction Authorization)

Policies define rules and limits for transactions in your workspace, including:

* Who can move funds
* How much can be sent per transaction or time window
* Required approvals and authorization flows
* Smart-contract-specific controls (deploy, upgrade, pause, etc.)

Additionally, the rules engine includes multi-asset rules, simplified configuration, and direct AML/KYT integration.

## Compliance: AML/KYT Screening

Built-in transaction screening enables real-time AML/CFT monitoring, sanctions checks, and behavior analysis via integrations such as Chainalysis, CipherTrace, and AMLBot.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.