Programmable fund control
MVESCROW
Money moves only when the conditions are proven.
MVESCROW turns every escrow agreement into rules your bank can run, prove and audit. It sits beside your existing core banking system, works natively with MVCORE, and keeps every dirham, rupee and dollar inside your bank — with AI agents that verify evidence and stop fraud before a single release is approved.
- Runs beside your core
- Funds never leave your bank
- Fiat and tokenised rails
Figures are MVESCROW design targets for pilot deployments, not historical performance.
Why bank CEOs are acting now
Escrow just moved from the back office to the boardroom
Regulators have written escrow into the structure of bank accounts, fraudsters target every high-value release, and fintechs are building escrow franchises on top of partner banks. The bank that runs escrow digitally keeps the balances, the fees and the regulator's trust.
Paper, email and callbacks don't scale
Programmable money is here
How it works
From legal agreement to proven release in five steps
Every escrow in MVESCROW follows the same controlled path. A deterministic rules engine decides how much can be released. Named officers decide whether it is.
The agreement becomes machine-readable rules
The Agreement Intake Agent reads the signed escrow agreement and drafts a versioned rule set: parties, accounts, conditions, release waterfall, retentions, fees and expiry. Every rule is linked to the clause it implements.
- Your legal or escrow team verifies the draft; a checker approves it
- Templates for RERA, Dubai off-plan, marketplace, M&A, trade and purpose-bound escrow
- Amendments create a new version — nothing is overwritten
# rule set v3 — clause links shown arrangement: "Marina Crest Tower" accounts: collection: core:AE07-…-0412 # no debits project: core:AE07-…-0413 # protected release_rule: # clause 7.2 type: proportional_completion base: approved_cost evidence: [consultant_certificate] retention: per_template # clause 9.1 approvals: maker_checker
Collections land in the right place, automatically
Every payer, unit or order gets its own virtual account number, so incoming money is identified the moment it arrives. MVESCROW keeps a sub-ledger per arrangement, per party and per unit, reconciled to your core account every 15 minutes.
- Same-day percentage sweeps (for example 70% protected / 30% operating)
- Rounding always favours the protected account
- Holds and restrictions placed through your core — no cheque books, no liens, no set-off
# receipt of INR 25,00,000 via virtual account amount_minor: 250000000 # paise → rera_account: 175000000 # 70% → txn_account: 75000000 # 30% collection_after: 0 sweep: same_day status: settled
Conditions are proven, not asserted
Certificates, invoices, bills of lading and system events arrive by portal, API or controlled mailbox. Each is hashed, time-stamped and verified. AI agents check signatures, professional registrations, arithmetic and document tampering before an officer ever opens the file.
- Digital signature and registry checks (for example CA UDIN verification in India)
- Consistency with prior certificates, budget and the construction curve
- Evidence is never edited — only superseded
evidence: consultant_certificate #CC-0419 sha256: 9f2c…e71a signature: valid registration: verified completion: 35% # claimed agent_E2: "13-pt jump in one month vs expected curve; 2 photos reused" status: under_review
The engine calculates exactly what can move
Entitlement is computed by a deterministic, versioned rules engine — never by an AI model. It shows the arithmetic, the rules applied and the evidence used, so officers, auditors and regulators see the same answer.
- Proportional-completion, milestone, time and event-based rules
- Retentions and caps applied automatically
- Requests above entitlement are capped or rejected by design
entitlement = certified_pct × approved_cost − released = 28% × AED 300,000,000.00 − 72,000,000.00 = AED 12,000,000.00 # 1,200,000,000 fils requested: AED 60,000,000.00 decision: capped_to_entitlement
Releases pass fraud checks and four eyes
Every release is scored by the Release Fraud Shield, sent only to a pre-verified beneficiary, and approved under your maker-checker matrix. The instruction goes to your core or MVPAY as a standard payment; signing for tokenised rails happens outside any database transaction.
- Beneficiary changes need independent confirmation and a cooling-off period
- Idempotent instructions — no duplicate payments
- Every step lands in MVGRC as control evidence
release R-2291 AED 12,000,000.00 fraud_score: low beneficiary: pre-verified (name match ✓) maker: ops.officer.14 ✓ checker: ops.checker.03 ✓ dispatch: core.payment → executed grc_evidence: recorded
Legacy coexistence
Beside your core. Not instead of it.
MVESCROW never asks you to move money out of your core banking system or change a line of its code. Your core keeps the accounts and the balances. MVESCROW adds the rules, the evidence, the sub-ledger and the release controls — and talks to your core through the interfaces it already has.
Swipe sideways to see the full diagram →
Your system of record doesn't change
- Every escrow and project account, and every balance
- Your payments engine, limits and existing controls
- Your general ledger and regulatory books
- Your legal role as escrow agent — and the client relationship
The control layer your core was never built for
- Agreements as versioned, executable rules
- Evidence verification and entitlement calculation
- Per-party, per-unit sub-ledgers reconciled to the core
- Fraud-scored, four-eyes releases and regulator-ready reports
Integration options
Use the account features your core already has
See every credit and debit as it happens
Speak the language of modern payments
Escrow-as-a-Service for your clients and partners
POST /v1/arrangements
POST /v1/arrangements/{id}/evidence
GET /v1/arrangements/{id}/entitlement
POST /v1/arrangements/{id}/release-requests
POST /v1/release-requests/{id}/decision # maker-checker
webhook: escrow.release.executed # no personal dataMainframe and older cores are welcome
- Temenos Transact
- Infosys Finacle
- Oracle FLEXCUBE
- TCS BaNCS
- Mainframe & in-house
- MVCORE — native
Better together
MVESCROW + MVCORE: escrow as a native banking product
MVESCROW works with any core. With MVCORE, escrow stops being an overlay and becomes a first-class product — configured in smart contracts, backed by native virtual accounts and holds, and ready for tokenised money on the same infrastructure.
MVCORE beside your legacy core
- Escrow accounts on MVCORE, customer relationship on your core
- Settlement back to the legacy core through standard payments
- A low-risk first step towards core modernisation
MVCORE as your core
- Configuration only — no integration project
- Real-time events end to end
- Fiat and tokenised escrow on one platform
Escrow as a smart-contract product
Native virtual accounts & holds
Tokenised escrow on Sui
Composable with the whole Moneyverse suite
Land with one module. Expand to all. Never rip and replace.
Governed AI
Ten AI agents that make every release safer
MVESCROW's agents read, verify, detect and explain at machine speed. They never approve or execute a release. That line is enforced by the platform, not by policy.
Agreement Intake
Evidence Verification
Diversion Sentinel
Release Fraud Shield
Collections Matching
Certifier Integrity
Dispute Copilot
Regulatory Reports
Progress Verification
Client Concierge
Built for your model-risk and audit teams
Every agent finding carries its evidence, model version and confidence. Agents run in your environment or an approved no-retention endpoint, are registered in your model inventory, and send every finding to MVGRC.
Built for the boardroom
What your CEO sees on day one
Escrow stops being an operational risk you hope is under control and becomes a franchise you can measure, show your regulator and grow.
Prove, project by project, that protected money was never diverted
Illustrative projects.
Trust you can show every payer
No release reaches an unverified account
- Beneficiary pre-registeredPass
- Account name matchPass
- Bank details changed 2 days agoHold · confirm
- Request from look-alike domainBlocked
Win mandates on speed
Ready for tokenised money
Grow a sticky, purpose-locked franchise
What MVESCROW powers
One engine. Every kind of conditional money.
Start with the escrow your regulator already demands, then extend the same engine across your franchise.
RERA and off-plan project escrow
Why it wins
- Regulator-ready reports generated from the sub-ledger
- Developers get paid faster once evidence is complete
- Homebuyers see their protected balance
Platform, marketplace and payment-aggregator escrow
Why it wins
- Banker certificates produced from system data
- No commingling — enforced by rules
- Platform balances stay with your bank
Holdbacks, indemnity escrows and earn-outs
Why it wins
- Multi-signatory approvals without email chains
- Dispute freezes applied instantly
- Neutral case files for tribunals
Trade escrow — release on documents
Why it wins
- A simpler alternative to documentary collections for SMEs
- Exporters see protected funds before they ship
- Settlement on fiat or regulated stablecoin via MVPAY
Grants, subsidies and loan drawdowns
Why it wins
- Leakage controlled at the point of payment
- Lenders see exactly what each drawdown funded
- Programme owners get real-time reporting
Tokenised escrow on Sui
Why it wins
- 24/7 settlement for cross-border deals
- Same rules as fiat — one agreement model
- A credible tokenisation answer for your board
Try the engine
See the rules engine think
Two of MVESCROW's everyday calculations, running in your browser. Money is handled in integer minor units — paise, fils, cents — exactly as the platform does it. No floating-point money, ever.
How much can the developer draw?
Where does each receipt go?
Illustrative scenario
A Dubai tower, a bold certificate and AED 48 million kept safe
A fictional developer asks its escrow bank for a large release against an optimistic progress certificate. Here is what happens when the bank runs MVESCROW.
The developer submits a consultant's certificate showing 35% completion and asks for AED 60 million. Approved cost is AED 300 million; AED 72 million has already been released.
→ Rules engine caps the request at AED 33 million (35% × 300m − 72m) and shows its working.
The Evidence Verification Agent notices last month's certificate said 22% — a 13-point jump far outside the expected build curve — and two site photos reused from another project.
→ The Certifier Integrity Agent adds that the consultant signed 14 certificates this month against an average of 3.
The escrow officer orders the independent inspection the agreement allows. It certifies 28%.
→ Entitlement recalculated to AED 12 million, approved by maker and checker, executed through the core.
An email asks to change the main contractor's bank account.
→ Release Fraud Shield holds it for out-of-band confirmation. The request came from a look-alike domain and is rejected.
Buyers' money that would have left under the original request stays in escrow — with a complete, regulator-ready record of every check and decision.
Fictional entities and figures, for illustration only.
Compliance-first
Designed around the rules you are measured on
Jurisdiction templates are configuration, not code — so new regulatory requirements become new rules, not new projects.
India · RERA Act 2016
Tamil Nadu RERA · 2026
Uttar Pradesh RERA · 2026
RBI Payment Aggregator Directions · 2025
Dubai · Law No. 8 of 2007
Singapore · MAS Project Orchid
Banking-grade by design
Engineered the way your regulator would want it
An append-only ledger
Keys never meet the database
No personal data in events
Four eyes, always
Your cloud, your region
A clean exit, by contract
Deployment velocity
Live in 90 days — not 18 months
A controlled pilot that starts read-only, proves itself against your core to the paise, and goes live on real projects inside one quarter.
Discover & connect
Collect
Control
Go live
Questions bank leaders ask
Frequently asked questions
Does any money leave our bank?
No. Every fiat balance stays in accounts in your core. MVESCROW holds the rules, evidence and a sub-ledger that reconciles to your core. Tokenised escrow runs in wallets controlled by your bank or its approved custodian.
Is Moneyverse the escrow agent?
No. Your bank, or the licensed entity named in the agreement, is the escrow agent and keeps the legal duties and the client relationship. Moneyverse provides the software.
Do we need MVCORE to use MVESCROW?
No. MVESCROW runs beside Temenos, Finacle, FLEXCUBE, BaNCS, mainframe and in-house cores. MVCORE makes escrow a native product with built-in virtual accounts, holds and tokenised rails — either as an augmentation layer beside your core or as your core.
Can the AI release money on its own?
Never. The deterministic rules engine calculates the entitlement, and named officers approve releases under maker-checker. Agents are capped at "prepare" — they verify, detect and explain, and the platform blocks them from approving or executing.
What if the rule set and the legal agreement disagree?
The agreement always prevails. Every rule links to its clause, every rule set is verified by your legal or escrow team before activation, and changes create a new approved version.
Where does the pilot start?
Usually with real-estate project escrow, where regulation already requires the controls. Marketplace and payment-aggregator escrow can run in the same pilot; M&A, trade, purpose-bound and tokenised escrow follow on the same engine.
Pilot programme
Make every release provable.
We're selecting a small group of pilot banks for MVESCROW. Avoid the long forms and endless fields — book a 30-minute call with our architects and see the engine run on your use case.
MVESCROW capabilities marked as roadmap are under development; pilot availability is subject to agreement. All financial services, payments, escrow and custody services depicted are performed by our licensed partners or the regulated entities utilizing our software.