Mure coordinates transaction rules and execution without taking custody of customer funds, and is not itself authorised for regulated activity. Wallets, custodians, and other providers remain responsible for the services they perform. This page explains our approach to transaction controls, data, and operational security.
Funds start in an account the customer controls, at a bank, a wallet, or a custodian of the customer’s choosing.
Mure does not take custody or ownership of customer funds. Mure applies the rules of the flow (recipients, amounts, conditions, approvals) and coordinates the steps.
When a transaction requires an external provider, Mure coordinates that part of the flow. Regulated services, where required, are carried out by third-party providers authorised for the activity and jurisdiction.
The funds settle to the recipient named in the flow, and the transaction record stays tied to the movement.
Personal data may be processed in Singapore and other countries in which Mure or its service providers operate.
Mure shares personal data with service providers that process it on Mure’s behalf (its sub-processors), including hosting, analytics, security, communications, CRM, and scheduling. Mure also shares personal data with professional advisers and with authorities where the law requires it. The privacy policy lists the categories and the conditions for sharing.
Mure investigates and addresses security incidents, including affected systems and transactions where relevant. Customer notifications follow applicable agreements and legal requirements.
Mure runs on Cloudflare’s network and on managed data services that carry their own continuity commitments. Each transaction keeps its rules, status, and receipts, so a flow can be resumed from its record rather than from memory.
Mure has not completed a SOC 2 Type II audit or obtained ISO/IEC 27001 certification.
Questions about security, compliance, or vendor review? Contact the team.