Home / TrustCard / TrustCard Specification
TrustCard
Trust in Code. Trust in Payments.
Overview
TrustCard is an open-source specification for a secure, privacy-first digital wallet and universal debit card platform. It is designed to enable interoperable digital payments through existing Visa and Mastercard payment infrastructure while maintaining transparency, strong security, and user ownership.
The specification defines a modular architecture for digital wallets, payment processing, identity verification, encryption, authentication, APIs, and compliance. TrustCard is intended for financial institutions, fintech companies, payment processors, open banking providers, merchants, governments, and open-source developers seeking a vendor-neutral foundation for secure digital payments.
Objectives
- Create an open-source digital wallet specification
- Support worldwide payment interoperability
- Maintain user privacy by default
- Eliminate unnecessary vendor lock-in
- Support regulatory compliance
- Provide enterprise-grade security
- Enable community auditing
- Support future payment technologies
- Allow modular implementation
Core Features
Universal Payment Compatibility
- Visa compatible
- Mastercard compatible
- Contactless NFC payments
- EMV chip support
- Magnetic stripe compatibility where required
- QR code payments
- Merchant payment terminals
- Mobile POS systems
- Online checkout
- In-app purchases
- Recurring payments
- Subscription payments
- International payments
- Cross-border transactions
Digital Wallet
- Store multiple payment cards
- Digital debit cards
- Virtual cards
- Physical card support
- Multi-wallet support
- Multi-account support
- Multi-bank support
- Wallet backups
- Secure wallet recovery
- Device synchronization
- Optional offline wallet mode
Card Management
- Instant virtual card creation
- Physical card provisioning
- Card activation
- Card freeze
- Card unfreeze
- Temporary card lock
- Dynamic CVV
- Card replacement
- Spending limits
- Merchant restrictions
- Geographic restrictions
- Time-based restrictions
- Single-use cards
- Disposable virtual cards
Identity & Authentication
- KYC verification
- AML compliance
- Identity verification
- Government ID verification
- Passport verification
- Driver license verification
- Facial verification
- Liveness detection
- Multi-factor authentication
- Two-factor authentication
- Passkeys
- WebAuthn
- Hardware security keys
- Biometric authentication
- PIN authentication
- Password authentication
- Recovery codes
- Trusted devices
Security
- End-to-end encryption
- Zero-knowledge architecture
- AES-256 encryption
- TLS 1.3
- Perfect Forward Secrecy
- Secure key storage
- Hardware-backed encryption
- Secure enclave support
- Tokenization
- PCI-compliant storage
- Tamper detection
- Secure session management
- Automatic logout
- Device fingerprinting
- Login anomaly detection
- Secure backup encryption
- Secure wallet export
Fraud Protection
- AI fraud detection
- Behavioral analytics
- Transaction risk scoring
- Merchant reputation analysis
- Velocity checks
- Device reputation
- Geographic anomaly detection
- Impossible travel detection
- Suspicious login alerts
- Card misuse detection
- Account takeover detection
- Adaptive authentication
- Manual review workflows
Privacy
- Minimal data collection
- Privacy-first architecture
- User-controlled permissions
- Granular consent management
- Anonymous analytics
- Local encryption
- Optional self-hosting
- Secure data deletion
- Privacy dashboards
- Export personal data
- Delete account
- GDPR compliance
- CCPA compatibility
Financial Features
- Debit accounts
- Checking account integration
- Savings integration
- Multiple funding sources
- ACH transfers
- Wire transfers
- Instant transfers
- Peer-to-peer payments
- Bill payments
- Scheduled payments
- Split payments
- Payment requests
- Merchant payments
- Refund support
- Chargeback management
Multi-Currency
- Multiple currencies
- Automatic exchange rates
- Real-time conversion
- Local currency payments
- International settlements
- FX history
- Currency alerts
Digital Assets
Optional modules:
- Stablecoin support
- Cryptocurrency wallets
- Tokenized assets
- CBDC compatibility
- Blockchain interoperability
- Cross-chain payments
- Digital asset custody
Merchant Features
- Merchant APIs
- Payment APIs
- Checkout SDKs
- Payment links
- QR checkout
- Invoicing
- Refund APIs
- Subscription management
- Transaction reporting
- Merchant analytics
- Settlement reports
Banking Integration
- Open Banking APIs
- PSD2 compatibility
- Banking APIs
- Account aggregation
- Bank verification
- Instant account linking
- Financial institution connectors
APIs
- REST API
- GraphQL API
- Webhooks
- SDKs
- Authentication API
- Card API
- Wallet API
- Payment API
- Identity API
- Merchant API
- Reporting API
Administration
- Administrative dashboard
- Audit logs
- User management
- Card management
- Risk management
- Compliance reporting
- Fraud review
- Transaction monitoring
- System health monitoring
Analytics
- Spending analytics
- Budget tracking
- Category analysis
- Cash flow
- Financial reports
- Monthly summaries
- Merchant insights
- Savings goals
- Export reports
Notifications
- Push notifications
- SMS notifications
- Email notifications
- Login alerts
- Transaction alerts
- Fraud alerts
- Card usage alerts
- Payment reminders
- Bill reminders
Compliance
- AGPL-3.0+
- PCI DSS
- PSD2
- GDPR
- CCPA
- AML
- KYC
- OFAC screening support
- Sanctions screening support
- Audit trail generation
Deployment
- Cloud deployment
- Self-hosted deployment
- Hybrid deployment
- Docker
- Kubernetes
- High availability
- Disaster recovery
- Backup management
- Horizontal scaling
Platform Support
Mobile
- Android
- iOS
Desktop
- Windows
- macOS
- Linux
Web
- Chrome
- Firefox
- Edge
- Safari
Accessibility
- WCAG compliance
- Keyboard navigation
- High contrast mode
- Screen reader support
- Scalable interface
- Reduced motion
- Localization
- Internationalization
Future Modules
- Family accounts
- Youth accounts
- Business accounts
- Expense management
- Payroll integration
- Digital identity wallet
- Government benefit cards
- Healthcare payment cards
- Transit cards
- Loyalty cards
- Rewards platform
- Carbon footprint reporting
- Embedded finance
- AI financial assistant
- Smart budgeting
- Financial coaching
- Open federation between TrustCard providers
Security Principles
- Privacy by default
- Security by design
- Open-source transparency
- Zero trust architecture
- Least privilege
- Defense in depth
- User ownership of data
- Cryptographic verification
- Community auditing
Intended Users
- Individuals
- Financial institutions
- Banks
- Credit unions
- Payment processors
- Merchants
- Governments
- Enterprise organizations
- Fintech startups
- Open-source communities
TrustCard
Trust in Code. Trust in Payments.
Specification Branding License (SBL)
Standard
- Fully AGPL-3.0+ compliant system
- Copyleft enforced for network deployments
- Required attribution:
- Roxanne Ardary
- https://www.roxanneardary.com/
Optional
- Specification Branding License (SBL)
- Attribution-free commercial deployment
- Pricing based on scale, usage, and deployment scope
- https://roxanneardary.com/trustcard/
License & Notice Requirements
TrustCard is released under the GNU Affero General Public License v3.0 or later (AGPL-3.0+).
By contributing to this project, you agree that your contributions will also be released under this license.
Please note the following:
- All contributions must comply with the AGPL-3.0+ terms.
- Under Section 7 of the license, all redistributions, forks, and derivative works must preserve attribution to: Roxanne Ardary and roxanneardary.com.
- TrustCard Index specifications are free to use with attribution. A Specification Branding License can be negotiated upon request.
- The project’s notice.md file tracks attribution requirements and contributor acknowledgments. Any update that adds new contributors or modifies attribution should also update
notice.md. - When submitting a pull request, ensure that any new files maintain the attribution headers where applicable.
- Network-deployed versions of this software must also remain fully AGPL-3.0+ compliant, including exposure of source code modifications when applicable under the license.
For full legal details, please refer to the AGPL-3.0+ license and the project’s notice.md file.
Notice – TrustCard
Attribution Requirement: Under Section 7 of the AGPL 3.0+ license, all redistributions, forks, and derivative works, including network-deployed versions of this project, must provide attribution to Roxanne Ardary and roxanneardary.com.
Contributors
This file tracks contributors and their specific contributions to the project.
- Roxanne Ardary, roxanneardary.com – March 9, 2026
Created the repository for TrustCard, an open-source digital wallet and debit card platform designed for universal payment terminal compatibility with privacy-first, zero-knowledge architecture and end-to-end encryption. - [Add other contributors here] – [Date]
[Describe contribution in one sentence]
License – TrustCard
This repository is licensed under the GNU Affero General Public License v3.0 or later (AGPL-3.0+).
Key Points
- You are free to use, modify, and distribute the code.
- All redistributions, forks, and derivative works or network-deployed versions must also be licensed under AGPL-3.0+ and provide attribution to Roxanne Ardary and roxanneardary.com as required under Section 7 of the license.
- The software is provided “as is,” without warranty of any kind.
For the full license text, see GNU AGPL-3.0 License.