List of Terminologies

Terms	Descriptions
Hosted Sandbox	The Hosted Sandbox provides a hands-on environment for users to explore and evaluate our wallet solution without local installation. Accessible via API or TLS Certificates, it supports testing and Proof of Concept (PoC) projects. This sandbox is for demonstration purposes only and is not intended to replicate a production environment.
Self-Installed Sandbox Environment	Self-installed sandbox environments allow users to experience the complexities of setting up and maintaining a self-installed wallet while the IT department assists with setup and technical installation needs. It provides comprehensive functionality for the testnet network(s) and allows users to go through the full process of setting up and maintaining the wallet.
Self-Installed Production Environment	The self-installed production environment is the actual Institutional Vault environment. The production environment leverages the same infrastructure as the “live” wallet environment, providing a fully secured and scalable end-solution environment for mainnet network(s).
Assets	The term "asset" in this context refers to the tokens or native tokens of each cryptocurrency network.
MPC	Multi-party computation enables multi-party approval enforcement, which previously needed MultiSig, in a more flexible, efficient, and blockchain-compatible manner.
Administration Policy	Administration Policy is a collection of administrative regulations governing all wallet operations.
Transfer Policy	A list of rules about how transfers or transactions should be done.
Staking Policy	A list of rules about how the staking process should be done.
Approver	The approver is any user granted permission to approve transactions through the approval app.
Confirmer	The confirmer is typically the user who initiated the transaction intent and is responsible for initiating the confirmation process by sending a confirmation request to the approval app.
Key Ceremony	A key ceremony is a critical event where cryptographic keys are generated, distributed, and securely stored to ensure the integrity, confidentiality, and authenticity of sensitive information and communications within the Institutional Vault.
EncryptorMasterPassword	The password or key file creates encryption and authentication keys to safeguard sensitive data within the persistent MPA DB.
ERS	Emergency Recovery Service.
Intent	Willingness to perform a certain action (e.g. transfer some crypto funds) initiated by the user.
MPA	MPC Policy Authority - a trusted entity containing the policies (rules) of the system and shares of cryptographic keys to perform cryptographic operations (multi-party signing), policy changes, and enforcement.
mpagen	A provisioner helper tool that facilitates the secure generation and provisioning of sensitive values for MPA policy nodes.
Institutional Vault Approver	The approver app of the Institutional Vault.
Freeze	Freeze is an action that immediately halts the generation of any new Institutional Vault transfers.
PK	Public Key.
SK	Secret Key.
Last Notification	Last notification is a feature of the Institutional Vault that notifies you of significant events when an operation reaches an end state.
System Users	The system user is the one who may approve or deny operation requests.
User	Refers to an individual who has access to the Institutional Vault.
Account	Functionality within the Institutional Vault that segregates different wallet addresses. For balance-based chains like Ethereum, each account is associated with a unique address. For UTXO-based chains like Bitcoin, an account can contain multiple addresses. Accounts can be further restricted by policies. It is used to securely store and manage digital assets, send and receive digital assets, track balances, and view transaction history. In most cases, an account can hold one wallet address per protocol, except for Bitcoin, where multiple Bitcoin addresses can be created per account. In summary, a user can access the Institutional Vault and specific permissions. At the same time, an account is a functionality within the wallet that allows for the management and segregation of different wallet addresses.
OIDC	An external Open ID Connect is an authentication service to verify user identities and provide secure access tokens to the wallet.