End-User Custody (Non-Custodial)

In the End-User Custody Model, the End User retains full custody and control over the funds held in their Account(s). Mural maintains the underlying account infrastructure, but does not delegate custody or payout authority to the Developer.

When onboarding an Organization, you will prompt the End User to configure email-based authentication linked to their Mural Account. This authentication mechanism is used to explicitly authorize and approve all outbound payouts from the End User’s Account(s).

Under this model:

• All outbound fund movements require explicit, per-transaction approval from the End User
• The Developer cannot initiate, approve, or execute payouts independently
• Funds cannot be moved without the End User’s authenticated consent

This model removes you—the Developer—from the flow of funds. Without explicit approval from the End User, you cannot initiate payouts or move funds from their Account.