LogoLogo
English
  • Cregis Wallet Guide
  • Card Guide
  • Announcement
English
  • Welcome
    • Product Overview
    • Tokens and Protocols
  • Getting Started
    • Download and Installation
    • Registration and Login
  • Account Management
    • Team Space and Personal Space
    • Bill and Payment
      • Manage Your Pricing Plan
      • Paid Feature Activation
      • Manage Your Bills
      • Recharge Your Account
    • Security
    • General Setting
  • Team
    • Manage Your Team
    • Member
    • Permission
    • Team Activity
      • Initiate Send Request
      • Approval Process
      • Transaction Signing
  • Wallet and Transactions
    • Wallet
      • Create a Wallet
      • Wallet Member Management
      • Rename Your Wallet
      • Hide Your Wallet
      • Message Signature
    • Token
    • Address
    • Shard
    • Transaction
      • Transfer and Receive Payment
      • Transaction Speed Up and Cancellation
      • Transaction Resend
      • Transaction Dashboard
      • Address book
      • Tron Energy Mode
  • Risk Management
    • Policy Engine
    • Auto-Collection/Signing
    • AML Query
  • API
    • API Manual
      • Creation
      • Configuration
      • Query API access information
      • Create wallet address
      • Collection
      • Callback Query
      • Callback Setting
      • Notification Setting
      • Disable/ Delete an API Project
      • API Center for Developers
      • Integrating the TON Chain via API
    • API Type
  • Payment Engine
    • Introduction
    • Creation
    • Notification Setting
    • Settlement Setting
    • Payment and Settlement Records
  • Checkout Page
  • FAQ
    • Wallet Management
      • What is a Non-Custodial Wallet?
      • Why Can't I See the Team Wallet?
      • Why Does BTC Have Different Address Formats?
      • Can I Create Multiple Addresses Within a Single Wallet?
      • Why Does the Shard Not Support Adding Tokens?
      • Why Can't My Wallet Data Load?
      • Why Is My MATIC Missing?
      • Why Can’t the Member See the Shard Import Entrance When I Try to Authorize a Shard?
    • Transaction Management
      • Why Do Multi-Signature Wallets Require All Parties to Be Online Simultaneously?
      • Why Can't I See the Signature Option in My Team Activity?
      • Why Is My Transaction Status Stuck at "Pending"?
      • Which Policy Executes First if Priorities Are Equal?
      • Why Does It Display 'Please Import the fragment First' When Sending a Transaction?
      • What Should I Do if My Wallet Receives Blacklisted USDT (Black U)?
      • Why Do Some Addresses Require Activation Fees?
      • Can Auto-Signing Continue When Cregis Is Closed?
      • What Are the Differences Between Advanced Mode and Standard Mode for Gas Fee Settings?
      • What is Tron Energy Mode?
      • Can I use the team account balance to pay for the gas fee?
      • Can I Authorize My Employees to Sign?
    • API Management
      • Can I Edit the Type After an API Project Is Created?
      • Why Can't I Find the Option to Create an Order Collection Project?
      • Will the System Stop Immediately After API Address Limits Are Reached?
      • Is It Possible to Initiate Withdrawal Requests Directly via API?
      • What Should I Do When an Abnormal Callback Occurs?
      • Why Does the API Return Unsupported Token When Integrating TON?
      • What should I do if users transfer funds to a stopped project's address?
      • What Should I Do if My Team Version Expires and API address Funds Cannot Be Collected?
      • Is There a Limit on the Number of Transactions Per Collection?
    • Team Account Management
      • Why Can’t My Team Account Be Upgraded?
      • How to Handle Shards When a Member Leaves the Team?
      • How to Disband a Team?
      • How to Invite Team Members?
      • Why Can't I Perform Actions After Editing Permissions?
      • How to Set Up an Approval Process?
      • Will My Team Stop Functioning If I Don’t Renew the Subscription After It Expires?
    • Account Security
      • What is MPC?
      • Is There a Risk of MPC Shards Being Stolen?
      • Where Are My Assets Stored When Using Cregis?
      • What is a TEE Environment?
      • How to Safely Handle a Lost Recovery Phrase?
      • How to Safely Handle Lost or Damaged Devices?
      • How to Enable and Disable Address Book Verification?
      • What is a Policy Engine?
      • What Should I Do If I Forget My Transaction Password?
    • Others
      • How Can I Reimport My Cregis Wallet?
      • Does Cregis Offer a Testing Environment?
      • How Long Does KYB/KYC Approval Take?
      • How to Troubleshoot Issues When Installing the Cregis Application?
      • Why Can’t I Access My Testing Environment?
      • How Can I Check My Cregis Version?
  • Terms and Conditions
    • Terms of Service
    • Personal Information Collection Statement
  • Cregis Support
    • Contact Us
Powered by GitBook
On this page
  • What is a Policy Engine?
  • How to use the Policy Engine?
  • Triggered Actions
  • Expanding the Number of Policies

Was this helpful?

Export as PDF
  1. Risk Management

Policy Engine

PreviousTron Energy ModeNextAuto-Collection/Signing

Last updated 6 months ago

Was this helpful?

What is a Policy Engine?

The Policy Engine is a comprehensive risk management tool in Cregis, offering flexible solutions for withdrawal management. It allows users to set detailed rules and automate actions to regulate withdrawal requests from team members, with future plans to support automatic signing and withdrawals for improved efficiency and reduced manual risks. Currently, it supports policy customization for transaction, payment request initiation, and API withdrawals, enabling users to tailor policies to their needs, such as limiting withdrawals to specific tokens or setting time restrictions. The Policy Engine also includes a daily log feature for monitoring and reviewing policy execution, ensuring transparency, tracking, and auditing of all actions to enhance risk management and safeguard assets.

How to use the Policy Engine?

  1. Accessing the Policy Engine Page

Navigate to the Policy Engine page by selecting "Manage" > "Policy." To begin setting up a process, click "Start Creation"

  1. Action Creation

Before creating rules in the Policy Engine, a policy must first be established. We offer configurations for three types of withdrawals, which users can customize based on their business needs. Once the settings are configured, they must be submitted and will require identity verification before they take effect.

We offer configurations for three types of withdrawals and their corresponding execution actions. Below are the execution actions available for each type:

Withdrawals Type

Transaction

Payment Inititation

API Withdrawal

Configure Withdrawal Wallet

  • No need

  • Yes

  • Yes

Action

  • Reject

  • Initiate approval request

  • Sign Directly

  • Initiate approval request

  • Sign Directly

  • Initiate approval request

  • Action:Reject No advanced settings are required, you can submit directly.

  • Action:Initiate approval request Approval workflow configuration is required, including setting up approval nodes and assigning signatories.

  • Action: Payment Signing You need to designate signatories. Since direct signing is only applicable to payment requests and API withdrawals, it is generally necessary to configure the withdrawal wallet first. Once this is completed, you can proceed with the submission.

Once successfully created, the screen will automatically redirect to the policy logs, where you can see a record of the policy you just established.

You can also go to the "Action" page to view your previously created action.

  1. Policy Creation

To create a policy, go to the Policy page and click on the "+" button.

  • General Setting

    Set the name, type, and relevant settings for this policy, and assign a priority level. When multiple policies are triggered simultaneously, the one with the highest weight will be executed first. For example, if policy A has a priority level of 10 and policy B has a priority level of 5, policy A will be prioritized.

    • If the type is "Transaction", select the source wallet.

    • If the type is "Payment Initiation," no additional settings are required.

    • If the type is "API Withdrawal," select the project.

  • Conditions

    After completing the basic settings, define the rules for the policy. Conditions can be based on the token amount or operation time. Users can choose to set one or both.

  • Token

    In this section, users can select the token. If specific tokens are required, each token must be individually configured with a set amount. Limits can be placed on single transactions, daily, or monthly amounts.

  • Operation Time This limits the operation time for the policy type (Transaction, Payment Initiation, API Withdrawal). Users can select "All Day" or specify a time range. If a specific time is chosen, start and end times must be set. It also allows you to add multiple time periods. Please note: Time is based on UTC+8.

  • Triggered conditions Users can choose "All Conditions" or "Any Condition." Any Condition means the policy will trigger if either the operation time or the token condition is met.

  • Action triggered After setting the trigger conditions, users can select the execution decision from the list of previously created policies of the same type.

Withdrawals Type

Transfer

Payment Inititation

API Withdrawal

Configure Withdrawal Wallet

  • No need

  • Yes

  • Yes

Action

  • Reject

  • Initiate approval request

  • Sign Directly

  • Initiate approval request

  • Sign Directly

  • Initiate approval request

  • Please note: Users can set multiple rules for a single wallet, with each rule being in an "OR" relationship.

  • After configuration, identity verification is required.

  • After configuration, identity verification is required. Then the system will redirect you to the Policy page, where you must activate the policy.

  • Before activation, identity verification and Google two-factor authentication are required.

  • Once this is completed, the Policy Engine setup is finalized.

  1. Editing and Deleting Policies

  • Deleting a Policy Policies can be deleted from the policy page. Before deletion, the strategy must be disabled, which also requires identity verification. Then you can find the delete icon as below.

  1. Viewing Policy Logs

In the Policy Logs, you can see the actions of each policy, including date, time, operator, and actions performed. This page allows filtering by operation date, operator, or policy type.

The search bar also supports searching by action/policy name or ID.

Additionally, if an action triggers a policy, you can view the hit log, which provides detailed information about the triggered policy.

Triggered Actions

There are currently three types of actions that can be triggered, each with a corresponding screen display:

  • Reject If the action triggers a rejection, a window will pop up indicating the operation failed and notifying the user of the triggered policy.

  • Initiate Approval Workflow

If the approval workflow is triggered, a notification will appear, informing the user of the triggered policy.

  • Payment Signature No window will pop up for payment signature action, but you can view the hit policy when checking the details of the request.

Expanding the Number of Policies

The basic version only allows the creation of two policies and two actions, and each policy can only be applied to one wallet only. To increase the number of policies, users can upgrade or expand services on the account page.

  1. Upgrade Team Package

Users can choose to upgrade to the Business or Enterprise edition based on their business needs.

  1. Expand Policies

In addition to upgrading the team package, users can choose to increase the number of policies by clicking "Expand" and selecting the desired number. Each additional policy costs $19 USD.

Editing a Policy Policies can be edited on the Policy page. Before editing, the policy must be disabled, which also requires identity verification. Then you can find the edit icon as below to start you editing.