What compliance features does the XRP Ledger offer institutions?

The full answer

Which compliance features does the XRP Ledger define?

The features let an account decide who it will trade with or accept deposits from. They are built around credentials and permissioned domains.

A permissioned domain acts as an allow-list. Each permissioned DEX is tied to one domain, and that domain controls who can place and accept offers [1]. A filing on the SEC’s EDGAR system describes Permissioned Domains (XLS-80) as restricted environments where only accounts holding approved credentials can participate [2]. XRPL.org says the definition of each credential, and the requirements for getting it, are set and enforced by the credential issuer [1].

Single Asset Vaults pool one asset from many depositors for protocols such as the Lending Protocol. The asset can be XRP, a trust line token or a Multi-Purpose Token (MPT), and each vault share is itself an MPT [3]. When creating a vault, the owner can make shares non-transferable, so they can only be redeemed [3].

XRPL.org also describes closed-ended vaults, introduced by the LendingProtocolV1_1 amendment. Closed-ended vaults move from one stage to the next automatically, at set dates chosen when the vault is created, and the documentation says LendingProtocolV1_1 restricts all loans to closed-ended vaults [3]. The vault documentation lists a VaultClawback transaction [3]. How freezing and clawback apply to ordinary holders is covered in whether XRP can be frozen or taken back.

Can XRPL vaults be restricted to KYC’d participants?

Yes, by design. XRPL.org says anyone can deposit in a public vault, while a private vault allows only depositors with the necessary Credentials, managed through Permissioned Domains [3]. Its example: where depositor identity verification is required, use a private vault and issue credentials only to verified accounts [3].

The documentation also limits the owner’s control. A depositor whose credentials expire can no longer deposit but can always redeem existing shares, and any shareholder in a private vault can redeem shares for assets [3].

Vaults require the SingleAssetVault amendment [3]. The Crypto Times reported on September 24, 2026 that XLS-65 (vaults) and XLS-66 (lending) were still in validator voting and not active on the XRPL mainnet [5]. The page is native lending live on the XRP Ledger yet tracks that vote, and how the XRP Ledger’s lending protocol works explains what vaults feed.

How do permissioned DEXes on XRPL work?

XRPL.org gives the reason for the feature: the open DEX executes matching offers with no regard for who placed them, there is no certainty who the counterparties are, and regulated financial institutions may not be willing to take the risk of trading there [1].

A trade offer can be open, permissioned or hybrid [1]:

• Open offers work as the DEX always has. A hybrid offer can match offers in both the specified permissioned DEX and the open DEX, and preferentially matches offers from the permissioned DEX [1].
• Permissioned offers name a domain ID. They sit in an order book for that domain, separate from the open DEX’s order book, and match only permissioned offers in the same domain [1].
• Hybrid offers also name a domain but can match offers in both the permissioned DEX and the open DEX, preferring the permissioned side when placed [1].

Trades in a permissioned DEX can still use auto-bridging if all needed orders are in the same permissioned DEX. Permissioned offers and payments cannot be filled by AMMs [1]. If a trader’s credential expires or is deleted, their permissioned offers become invalid and are treated like unfunded offers [1]. The feature relies on the Credentials and Permissioned Domains amendments and cannot be used until all of those are enabled [1].

What is the activation status and date of each feature?

Permission delegation is not a credential feature, but Analytics Insight describes it as an institutional control. It would let an account owner delegate specific actions without granting full control, with up to 10 permissions per delegate that the main account can revoke [8].

Who decides when these features activate?

Validators do. The Crypto Times reported on September 24, 2026 that XRPL amendments generally need more than 80% validator support for two continuous weeks, so the lending upgrades had no confirmed activation dates [5]. Crypto Daily noted on July 23, 2026 that validators might not sustain a supermajority, in which case devnet stays a sandbox and mainnet does not change [7]. The process is explained in how XRP Ledger amendments get approved.

Can institutions keep amounts and counterparties private on a public ledger?

The documented features restrict who can act, not who can see. A permissioned domain controls who can place and accept offers [1]. Ripple, describing its lending protocol on June 29, 2026, calls facility terms “transparent, auditable, and enforced programmatically” [9]. Crypto Daily wrote on July 23, 2026 that if loans and vaults are ledger objects, network explorers and data vendors can standardize dashboards on them [7].

As of September 30, 2026, none of the cited sources describes an XRPL feature that hides transaction amounts or counterparties from ledger readers. An institution using these features gains control over who its counterparties are, not confidentiality about its positions.

Do permissioned venues split XRP liquidity or shut ordinary holders out?

The open DEX stays in place: open offers are unchanged by the permissioned feature [1]. What changes is where some liquidity sits. XRPL.org says each permissioned DEX has its own order books, a single transaction cannot aggregate liquidity from more than one permissioned DEX, and the liquidity and best rate in any DEX may vary with the offers placed there [1]. Access to AMMs cannot be restricted by a domain, and permissioned trades cannot use AMMs [1]. XRPL.org notes that some traders may choose to trade in multiple permissioned DEXes and the open DEX to arbitrage price differences [1].

Ripple argues the opposite risk sits elsewhere. It says private and permissioned systems often meet control requirements by limiting participation to a closed set of counterparties, while XRPL keeps the network public and supports permissioned participation through credentials when required [9]. That is Ripple’s own framing.

Ordinary holders keep the open DEX and public vaults, but liquidity placed only in permissioned books is out of their reach and out of reach of AMMs. No cited source gives a figure for how much liquidity sits in permissioned books. The case that such infrastructure is running ahead of use is set out in whether money is going into XRP infrastructure ahead of real demand.

Which regulated operators have said they will use them?

The evidence here is plans and examples, not live operations. In an illustration on its insights page, Ripple describes a borrower accessing a short-term working capital facility through a licensed pool administrator, where lenders and borrowers complete compliance checks first and verifiable credentials then determine who can participate [9]. That is Ripple’s illustration, not a named customer. Bitcoin.com News reported on September 11, 2026 that Clearpool has been testing its integration on devnet, and that its proposed mainnet system would use XRPL features for participant credentials and permissioned access [10].

The filing on SEC EDGAR states that over the last six months the XRP Ledger has shipped key capabilities, and adds that none of it is individually a major development on its own [2]. For the wider picture of what is running and what is waiting, see which parts of the XRP institutional stack are live.

What are the main criticisms?

XRPL.org’s own security notes set the limit. A permissioned domain does not by itself mean anything about who can use it in practice. A credential issuer can issue or revoke credentials at their discretion, and a domain owner can grant or deny access arbitrarily, so an unreliable or compromised issuer or owner compromises the domain [1]. Activation is a second risk: the vault and lending amendments depend on sustained validator support that may not arrive [7]. A third is the filing’s own caveat that the individual pieces are not major on their own [2].