AML
Anti-Money Laundering (AML) encompasses the legal frameworks, operational policies, surveillance controls, and automated transaction monitoring systems designed to prevent the conversion of illicitly obtained funds.
INSTITUTIONAL VOCABULARY
A rigorously defined vocabulary mapping the mechanical, cryptographic, and operational concepts that govern modern digital banking architectures, settlement rails, and core ledger systems.
Anti-Money Laundering (AML) encompasses the legal frameworks, operational policies, surveillance controls, and automated transaction monitoring systems designed to prevent the conversion of illicitly obtained funds.
An API gateway is a specialized server management layer that acts as the single reverse-proxy entry point for all client applications accessing back-end banking microservices.
An audit trail is a chronological, immutable, tamper-evident record of all system events, user actions, data modifications, and security decisions occurring across an infrastructure.
Clearing is the operational process of transmitting, reconciling, and in some cases confirming transfer instructions prior to settlement, potentially including the netting of instructions.
Core banking refers to the centralized back-end software suite and authoritative database systems that manage an institution critical banking operations, customer accounts, interest, and ledgers.
Correspondent banking is an arrangement where one banking institution (the correspondent) provides deposit, payment, currency clearing, and fiduciary services to another institution (the respondent).
A cut-off time is the latest clock time—relative to a named settlement calendar—after which new payment instructions roll to a later value date or are rejected for that cycle.
A double-entry ledger is an accounting system where every financial transaction requires at least two balanced entries: a debit to one or more accounts and an equal credit to one or more accounts.
Encryption at rest is the cryptographic protection of stored, inactive digital data across databases, file systems, disk arrays, and backup media against physical theft or unauthorized access.
An end-to-end identification is a business reference assigned to identify a payment end-to-end across parties, distinct from clearing system references generated per hop.
Event sourcing is an architectural design pattern where all state changes in an application are stored as an immutable, sequential sequence of append-only events.
A Hardware Security Module (HSM) is a dedicated, tamper-resistant physical computing appliance designed to securely manage cryptographic keys, perform digital signing, and accelerate encryption operations.
Idempotency is an API and system design property where executing an operation multiple identical times produces the exact same state and result as executing it once.
An idempotency key is a client-generated unique token that identifies a specific business operation attempt so receivers can detect retries and return the original result.
ISO 20022 is an international, open financial messaging standard based on an extensible XML and JSON data dictionary, unifying cross-border, securities, and high-value payments globally.
Key rotation is the disciplined cryptographic practice of systematically retiring existing encryption keys and generating new keys according to established operational schedules or security thresholds.
Know Your Customer (KYC) refers to the mandatory institutional due diligence process of verifying the legal identity, corporate structure, beneficial ownership, and risk profile of clients before providing financial access.
Ledger messaging is the formal exchange of event notifications, posting commands, and audit state transitions between accounting engines, ledger databases, and external business systems.
An LEI (Legal Entity Identifier) is a 20-character ISO 17442 identifier that uniquely references a legal entity participating in financial transactions.
Liquidity management encompasses the strategies, models, and real-time operational monitoring mechanisms an institution uses to ensure it can fulfill all payment and settlement obligations without delay.
MT 103 (MT103) is a legacy Swift message format historically utilized for single customer credit transfers. It constitutes a structured messaging specification rather than an account ledger balance or proof of finalized settlement.
Mutual Transport Layer Security (mTLS) is a cryptographic protocol where both client and server authenticate each other using digital X.509 certificates before establishing an encrypted tunnel.
A nostro account is a bank account held by a domestic financial institution at a foreign correspondent bank in the currency of that foreign country.
pacs.002 is the ISO 20022 Payment Status Report message used by agents to communicate acceptance, rejection, or other processing statuses for a payment instruction.
Payment finality is the legally defined, irrevocable point in time at which a funds transfer is completed and cannot be rescinded, reversed, or clawed back under statutory law.
A payment gateway is an ingress integration component that securely receives, validates, inspects, and routes financial payment instructions between client channels and processing processors.
Payment-versus-Payment (PvP) is a settlement mechanism in foreign exchange transactions where the final transfer of one currency occurs if and only if the final transfer of the other currency takes place.
Protocol 101.1 is the Global Server Banking messaging rail for authenticated IP-to-IP / server-to-server (S2S) financial instructions between registered institutional nodes—covering identity, acceptance, and status exchange rather than ledger posting or legal settlement finality.
Protocol 201.3 is the Global Server Banking ledger-execution rail for balance reservation, atomic double-entry posting, and synchronization across banking nodes—recording internal accounting state without by itself constituting legal payment finality.
Reconciliation is the automated or manual verification process of comparing two independent sets of financial records to verify accuracy, consistency, and completeness across institutional accounts.
Replay protection is the set of controls that prevent a previously valid message from being accepted again as a new business effect after interception, retry, or reconnect.
Recovery Point Objective (RPO) is the maximum acceptable age of data that can be permanently lost when a catastrophic system outage or hardware disaster occurs, measured in units of time.
Real-Time Gross Settlement (RTGS) is a funds transfer mechanism where both processing and final settlement of payment obligations take place individually on an order-by-order basis in real time.
Recovery Time Objective (RTO) is the maximum acceptable duration of time following a disaster, outage, or component failure within which a banking service or ledger must be fully restored.
Server-to-Server (S2S) protocol—also described as IP-to-IP institutional messaging—refers to direct machine-to-machine integration architectures exchanging authenticated financial instructions, status inquiries, or ledger events without manual browser intervention.
Sanctions screening is the real-time operational check of payment parties, beneficiaries, institutions, and geographic jurisdictions against designated government and international watchlists.
Settlement rails are the foundational institutional networks, central bank channels, and rulebooks through which legal monetary transfer and final obligations are discharged between entities.
A SwiftNet gateway is the hardware, software, and network interface connecting an institution internal processing infrastructure to the secure Swift international messaging IP network.
Tokenized deposits are digital representations of traditional commercial bank deposits recorded on a distributed ledger, representing a direct, legally enforceable claim against the issuing commercial bank.
UETR (Unique End-to-end Transaction Reference) is a UUID-based tracking reference that identifies a payment instruction across agents for investigation and status correlation.
Value date is the calendar date on which a payment is intended to affect interest, availability, or nostro books for settlement purposes.
A vostro account is an account that a servicing financial institution maintains on behalf of a foreign correspondent bank in the domestic currency.
AN INFORMED NEXT STEP
Start with your architecture, integration boundaries and operational requirements.