Rails & SKUs

Understanding the rail-based architecture and SKU licensing model for Islamic Open Finance™.

What are Rails?

Rails are self-contained functional modules that provide specific capabilities. Islamic Open Finance™ provides 73 specialized rails across 12 major categories, designed for Shariah-compliant financial infrastructure.

graph TB
    subgraph platform ["🏛️ Islamic Open Finance™ Platform"]
        subgraph core ["🏛️ Core Business Rails"]
            CONTRACTS["📋 Contracts"]
            KYC["🔍 KYC/KYB"]
            COMPLIANCE["✅ Compliance"]
            AML["🛡️ AML/CFT"]
            ZAKAT["🕌 Zakat"]
        end
        subgraph financial ["💰 Financial Rails"]
            TREASURY["🏦 Treasury"]
            CLEARING["🔄 Clearing"]
            PORTFOLIO["📊 Portfolio"]
            RISK["⚠️ Risk"]
            LIMITS["📏 Limits"]
            UNDERWRITING["📝 Underwriting"]
        end
        subgraph payments ["💳 Payments & Routing"]
            ROUTING["🔀 Routing"]
            MESSAGES["📨 Messages"]
            RECONCILIATION["🔗 Reconciliation"]
        end
        subgraph governance ["⚖️ Governance & Legal"]
            GOVERNANCE["🏛️ Governance"]
            LEGAL["📜 Legal"]
            DISPUTES["⚡ Disputes"]
            CASES["📁 Cases"]
        end
        subgraph identity ["🔐 Identity & Access"]
            AUTH["🔑 Auth"]
            CONSENT["📝 Consent"]
            APIKEYS["🔐 API Keys"]
        end
        subgraph integration ["🔌 Integration & Events"]
            WEBHOOKS["🔔 Webhooks"]
            EVENTS["📡 Events"]
            NOTIFICATIONS["📬 Notifications"]
        end
        subgraph infra ["⚙️ Infrastructure"]
            ANALYTICS["📈 Analytics"]
            REPORTING["📊 Reporting"]
            SEARCH["🔎 Search"]
            BILLING["💳 Billing"]
        end
    end

    click CONTRACTS "/api/rails/contracts" "View Contracts API"
    click KYC "/api/rails/kyc" "View KYC API"
    click COMPLIANCE "/api/rails/compliance" "View Compliance API"
    click AML "/api/rails/aml" "View AML API"
    click TREASURY "/api/rails/treasury" "View Treasury API"
    click CLEARING "/api/rails/clearing" "View Clearing API"
    click WEBHOOKS "/api/rails/webhooks" "View Webhooks API"
    click BILLING "/api/rails/billing" "View Billing API"
    click ANALYTICS "/api/rails/analytics" "View Analytics API"
    click REPORTING "/api/rails/reporting" "View Reporting API"
    click SEARCH "/api/rails/search" "View Search API"

    style platform fill:#f5f5f5,stroke:#1a5f4a,stroke-width:3px
    style core fill:#e8f5e9,stroke:#2e7d32,stroke-width:2px
    style financial fill:#e3f2fd,stroke:#1565c0,stroke-width:2px
    style payments fill:#fff3e0,stroke:#ef6c00,stroke-width:2px
    style governance fill:#f3e5f5,stroke:#7b1fa2,stroke-width:2px
    style identity fill:#fce4ec,stroke:#c2185b,stroke-width:2px
    style integration fill:#e0f2f1,stroke:#00695c,stroke-width:2px
    style infra fill:#eceff1,stroke:#455a64,stroke-width:2px

Complete Rail Catalog

Core Business Rails

Rail	Description	Key Features	Endpoints
Contracts	Islamic contract lifecycle management	Murabaha, Ijarah, Musharakah, Mudarabah, Sukuk	25+
KYC	Customer verification & identity	Enhanced KYC/KYB, identity verification, document validation	18+
Compliance	Regulatory compliance & policy enforcement	Shariah compliance, jurisdiction rules, automated checks	15+
AML	Anti-money laundering & sanctions	Screening, PEP detection, sanctions matching, monitoring	12+
Zakat	Zakat calculation & distribution	Nisab calculation, asset classification, distribution tracking	10+

Financial Rails

Rail	Description	Key Features	Endpoints
Treasury	Position & liquidity management	Cash positions, FX management, liquidity forecasting	20+
Clearing	Settlement & clearing operations	T+0 to T+3 settlement, netting, multi-currency	15+
Portfolio	Portfolio management	Position tracking, NAV calculation, rebalancing	14+
Risk	Risk assessment & management	Credit risk, market risk, exposure limits	12+
Limits	Financial limits & controls	Transaction limits, velocity checks, thresholds	10+
Underwriting	Risk underwriting	Proposal evaluation, risk scoring, approval workflows	12+

Payments & Routing Rails

Rail	Description	Key Features	Endpoints
Routing	Payment routing & rules	Intelligent routing, cost optimization, failover	10+
Messages	Financial messaging	ISO 20022, SWIFT, local formats, transformation	15+
Reconciliation	Transaction reconciliation	Auto-matching, exception handling, reporting	12+

Governance & Legal Rails

Rail	Description	Key Features	Endpoints
Governance	Shariah governance	Board management, fatwa tracking, resolution workflows	12+
Legal	Legal document management	Contract templates, version control, signatures	10+
Disputes	Dispute resolution	Case management, escalation, resolution tracking	10+
Cases	Case management	Workflow automation, SLA tracking, audit trails	12+

Identity & Access Rails

Rail	Description	Key Features	Endpoints
Auth	Authentication	JWT, session management, MFA support	15+
OAuth2	OAuth 2.0 / OpenID Connect	Authorization flows, token management	12+
SAML	Enterprise SSO	SAML 2.0, IdP integration	8+
Consent	Privacy & consent	GDPR/CCPA compliance, preference management	10+
API Keys	API key management	Key generation, rotation, scoping	8+

Integration & Events Rails

Rail	Description	Key Features	Endpoints
Webhooks	Event notifications	Delivery, retry, HMAC signing	10+
Events	Event distribution	Pub/Sub, event sourcing, replay	8+
Notifications	Multi-channel notifications	Email, SMS, push, in-app	10+
Integrations	External integrations	Connectors, sync jobs, data feeds	12+

Infrastructure Rails

Rail	Description	Key Features	Endpoints
Analytics	Real-time analytics	High-performance OLAP, dashboards, custom queries	12+
Reporting	Regulatory reporting	Basel III, AAOIFI, IFSB, custom templates	10+
Search	Full-text search	Fast indexing, faceted search, filters	6+
Billing	Usage metering & billing	Stripe integration, invoicing, usage tracking	12+
Observability	Platform monitoring	SLO tracking, distributed tracing, audit logs	10+
Audit	Audit trails	Comprehensive logging, compliance reporting	8+

SKU Model

SKUs (Stock Keeping Units) package rails into commercial offerings:

// Example SKU structure
{
  id: "banking-core",
  tier: "professional",
  enabled_rails: [
    "contracts", "kyc", "compliance", "aml",
    "treasury", "risk", "reporting", "webhooks"
  ],
  limits: {
    contracts_max: 100000,
    api_calls_per_month: 5000000,
    rate_limit_per_minute: 1200
  },
  price: 8500, // USD/month
  sla: { uptime: "99.9%", support: "24x7" }
}

Available SKUs

SKU	Tier	Target	Rails
Sandbox Free	Free	Developers	4 rails
Funds Pro	Professional	Fund Managers	10 rails
Banking Core	Professional	Retail Banks	16 rails
National Rail	Enterprise	Central Banks	20 rails
Takaful Complete	Enterprise	Takaful Operators	23 rails

Jurisdiction Packs (Add-ons)

Pack	Jurisdictions
GCC Regulatory	SAMA, CBUAE, DIFC, CBB, CBK, CBO, QCB
Malaysia Pack	BNM, SC Malaysia

Feature Add-ons

Feature	Description
Advanced Analytics	AI-powered insights
White Label	Custom branding
Dedicated Infrastructure	Single-tenant
Extended Retention	10-year data retention

Enabling Rails

Rails are enabled per workspace via the SDK:

import { IslamicOpenFinance } from "@iof/sdk";

const iof = new IslamicOpenFinance({ apiKey: process.env.IOF_API_KEY });

// Enable a rail for a workspace
await iof.workspaces.enableRail({
  workspaceId: "ws_123",
  rail: "contracts",
  sku: "iof.contracts.murabaha.growth",
});

// Check enabled rails
const workspace = await iof.workspaces.get("ws_123");
console.log(workspace.enabledRails);
// ["contracts", "kyc", "compliance", "webhooks"]

Rail Independence

Each rail operates independently with:

Own database schema - Isolated data models
Own API endpoints - Dedicated routes under /api/v1/{rail}
Own events - Rail-specific event types
Own policies - Cerbos authorization policies
Own metrics - Prometheus metrics per rail

Event-Driven Architecture

Rails communicate via standard event envelopes:

interface EventEnvelope {
  event_id: string;
  event_type: string; // e.g., "contract.created"
  schema_version: string; // Semantic versioning
  occurred_at: string; // ISO 8601
  producer: string; // Rail name
  trace_id: string; // Distributed tracing
  entity: {
    type: string; // e.g., "contract"
    id: string;
  };
  payload: Record<string, unknown>;
  term_ids: string[]; // Taxonomy terms
}

Multi-Tenant Architecture

All rails are multi-tenant by design:

Tenant isolation - Data is always scoped by tenantId
Workspace partitioning - Workspaces further segment tenant data
Policy enforcement - Cerbos policies enforce access control
Audit trails - All operations are logged with tenant context

Next Steps

Getting Started - Quick start guide
API Reference - Complete endpoint documentation
Webhooks - Event notification setup
Authentication - Security configuration