Confidentiality is workable so long as the regulated firm can identify the parties and disclose on demand. Encrypted amounts are not the thing being restricted.
What Cayman Islands actually says
Cayman matters because so many funds and token issuers are structured through it, and the finding is a set of absences rather than rules. The licensing framework is mature and the travel rule has applied since 2022, with a second licensing phase for trading platforms and custodians since April 2025. But across the regulator's own provider guidance and its dedicated travel rule page, there is no position on anonymity-enhancing assets, nothing on transfers to self-hosted wallets, and no stated monetary threshold for the transfer obligation. For a jurisdiction of this importance to the industry, that silence is itself the useful information: the questions this section is about have not been answered here.
The instruments that matter
- Virtual Asset (Service Providers) Act, 2024 Revision
- with the 2024 amendment act and 2025 amendment regulations forming the current framework
- Travel rule since 1 July 2022
- implemented by Part XA of the anti-money-laundering amendment regulations, covering transfers between a provider and another obliged entity and between a provider and a non-obliged entity
- Licensing phase two from 1 April 2025
- brought virtual asset trading platforms and custodians into licensing, adding prudential requirements, client disclosure and segregation of client assets
- Silent on the questions this section asks
- neither the provider guidance nor the travel rule page addresses anonymity-enhancing assets or self-hosted wallets, and no monetary threshold is stated on either
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- British Virgin IslandsAmericas · Structural confidentiality kept, transactional confidentiality not
- ArgentinaAmericas · Self-custody providers written out of the regime
- CaliforniaAmericas · A licensing regime that arrived in July 2026
- CanadaAmericas · Delistings without a rule that names the assets
- United StatesAmericas · Split by perimeter, not by ideology
- BahamasAmericas · Issuance of privacy tokens barred, trading not
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.