Third-party managed account solution

What if you could take control over client money without taking on the risk of actually holding it?

Custody is Kord’s third-party managed account (TPMA) solution. Instead of juggling multiple systems for payments, client money, identity verification, and reconciliation, you can bring everything inside one closed loop where money moves on secure rails between ring-fenced, per-matter accounts and e-money wallets bound to verified client identities.

Every account has its own details inherently linked to each matter, so every payment request comes pre-filled, with no gaps for APP fraudsters to exploit. Payments and payouts must be requested and authorised within the system, so no money moves without full visibility, while Faster Payments and High Value Payments ensure they can be made 24/7 with no cutoff point.

The benefits of Kord Custody at a glance

Take client money risk out of your hands

You never have to hold client money again. Kord takes care of transaction flows, while client money is held by ClearBank in accounts under your firm’s name, ring-fenced and segregated from your accounts. Funds are obtained and disbursed with compliance built into every step.

Alleviate reconciliation headaches

With funds inherently linked to each matter, payments arrive automatically reconciled and referenced, with no commingling of funds. This ensures you can meet SRA client money expectations without the compliance extra legwork.

Move money on identity-bound rails

Matters are linked to client identities confirmed and cross-referenced upon onboarding, so funds only move between verified accounts. Payments must be requested and authorised within the closed loop, and no money leaves the client’s wallet without their permission.

Get an SRA-aligned end-to-end audit trail

Every step of the way, Kord generates a real-time, end-to-end audit trail, so identity checks, payments, and client money all form one record ready for inspection. Each payment is properly allocated, reconciled, and referenced, reducing manual record keeping and improving accuracy.

How does Kord Custody work?

Opening and operating a Kord Custody account is simple and straightforward, yet secure by design. Here’s how a payment or payout might operate for a typical matter.

  1. 1. Firm opens a Kord Custody account

    The firm opens a Custody Workspace Account for each workspace, then a segregated Custody Transaction Account or Joint Custody Transaction Account for each matter. Accounts are ring-fenced and safeguarded, with funds held by ClearBank. Firms can address Confirmation of Payee in their name so clients know they’re paying the right account.

  2. 2. Client is verified

    The client opens a Checkboard Wallet on the Checkboard app (part of the Kord network) and completes identity verification and source-of-funds checks. Each Wallet (and therefore each matter) is linked to this verified identity.

    Note: This is an optional step; clients can also pay via bank transfer or by credit and debit card, but they will still have to verify their identity.

  3. 3. Firm makes a payment request

    The firm initiates a payment request linked to the matter, instead of sending client bank details. The client receives a notification in their Checkboard app with the account details pre-filled, so they cannot be spoofed by fraudsters.

  4. 4. Client authorises the payment

    Clients can pre-fund their matter account or do so when the payment request is received. No payment will leave the client’s wallet without their express authority; clients can pause any payment they deem suspicious.

  5. 5. Firm makes a payout

    If a firm needs to make a payment—such as the payout from a claim or a refund of excess funds—it can do so directly to the client’s Checkboard Wallet. Standard payouts are made instantly by Faster Payments, or by High Value Payout 15 minutes after final approval, available 24/7 with no cutoff time. The highest-value payments are made by CHAPS. Payouts require maker-checker approval.

  6. 7. Funds are automatically reconciled and referenced

    Within the overarching CWA, funds are automatically reconciled and referenced. There is no commingling of funds; the per-matter account structure means each payment is bound to the identity verified at matter creation.

  7. 8. Firm receives an end-to-end audit

    While all this is going on, Kord is generating a real-time, regulator-ready end-to-end audit trail from onboarding and verification to payment and payout.

How are the accounts structured?

Funds move between firm accounts Payments and payouts

Custody Workspace Account (CWA)

This is the firm’s workspace account. You open one per workspace; every CTA and JCTA exists underneath it. Accounts are safeguarded and segregated from Kord’s and the firm’s own accounts.

The CWA givs you live visibility of balances and transactions, updating as soon as payments arrive and leave, with downloadable statements.

This is also where you set the controls—such as approvers, payees, and caps—governing the CTAs and JCTAs beneath it. You can move money between your CWA and transaction accounts without the funds leaving the secure Kord network.

Account comparison

IncludedCTAJCTA
Connected party checksUp to two partiesUp to six parties
Faster Payments and wallet payouts20 per matter40 per matter
Outbound CHAPS paymentsTwo per accountTwo per account
High Value PayoutsFour per accountFour per account
Client walletIncludedIncluded
Reg 39 reliance packIncludedIncluded
Account provision12-month term; renews if a balance remains12-month term; renews if a balance remains

How does a payout move?

Every payment your firm initiates out of a CWA, CTA, or JCTA requires maker-checker approval. This means the person who raises a payment can never be the person to release it; a compromised API alone cannot move client money.

Make: API

A payment request is made through the API. The API cannot approve a payment, just create the instruction.

Pending

The payment is pending until it is manually approved.

Check: Dashboard

A separate, independently authenticated approver reviews and releases the transaction.

Here, the system is the maker, and a verified person is the checker. Approval can only happen on the dashboard through a separate approver; your firm can name custom approvers on the CWA or on an individual CTA or JCTA. Self-approval is impossible.

Six layers of security

With Kord, there’s nowhere for attackers to exploit. Every request is protected by six layers of security to ensure each one is secure.

  1. 01

    API key authentication

    Every request carries your firm’s API key. API keys only work within your TPMA and can be revoked the moment they are compromised.

  2. 02

    ECDSA request signing

    Requests are cryptographically signed with your firm’s private key using ECDSA. This unique digital signature proves your firm made the request.

  3. 03

    Idempotency keys

    Each request has an idempotency key, which ensures the server only performs the request once even if it's made multiple times, preventing duplicate payments or accounts from being created.

  4. 04

    IP allowlisting

    Requests are only accepted from the IP addresses your firm has registered, so nobody outside your organisation can access your accounts.

  5. 05

    Rate limiting

    Rate limiting prevents brute-force login attempts and other malicious attacks by placing a limit on how many times a user or client can repeat an action.

  6. 06

    Subdomain resolution

    Every firm operates on its own subdomain. Your keys only work with your subdomain, so all your traffic and data are isolated from every other account on the Kord platform.

Frequently asked questions about Kord Custody

Kord Custody is designed so the finance team and fee earners work hand in hand for both matter visibility and transaction speed. The maker-checker dual approval process allows fee earners and cashiers to raise payments with their designated approvers, bringing a level of speed and agility previously reserved for the finance team.