Banking-as-a-service
Nucleus BankOS moduleEmbedded finance that stays under your controls.
Fabric is the banking-as-a-service module of Nucleus BankOS. Fintech and corporate partners open accounts, issue cards and move money through governed APIs, while the sponsor bank keeps the ledger of record, the KYC decision and every limit.

At a glance
- What it is
- Banking-as-a-service module for sponsor banks
- Runs on
- Nucleus BankOS, in place of or alongside your current core
- Isolation
- One program per partner; no cross-program access
- Ledger
- Per-end-user sub-ledger, posted to the bank’s general ledger
- KYC and KYB
- Partners submit evidence; the platform and the bank decide
- Partner access
- Scoped API keys over private connectivity, no public host
- Program isolation
- Sub-ledgers
- DDA and FBO structures
- CIP · KYC · KYB
- Debit and virtual cards
- ACH · RTP · FedNow
- Spend controls
- Cross-partner monitoring
- Signed webhooks
- Sandbox
- Embedded credit with Foundry
What it does
The partner owns the experience. The bank keeps the controls.
Launch a program from a template
Start from a retail, fund, gig-wallet, marketplace or SMB-treasury template and edit the onboarding flow in Fabric Studio. The bank promotes each program from draft through UAT to live.
- Five program templates
- Onboarding flows versioned per program
- Fees and revenue share set per program
The bank makes the regulated call
Partners collect applications and evidence; identity, diligence and the decision stay with the platform and the bank’s chosen vendors. No API scope can mark a customer verified.
One ledger for every end user
Every account, card authorization and payment posts double-entry to the bank’s general ledger, with balances held per end user and per program.
Oversight across every partner
Limits are enforced on every write and compliance rules run inline. One monitor shows alerts across all programs, so a pattern spanning two partners is visible to the bank.
Specifications
Specifications
What a Fabric program includes, from program setup to the partner integration.
| Program isolation | Each partner is a program with its own keys, end users, postings and events; no cross-program access |
|---|---|
| Sub-programs | Platforms can nest their own sub-merchants; a sub-program can only narrow the parent’s grants |
| Templates | Retail banking, investment-fund FBO, gig wallet, marketplace payments, SMB treasury |
| Lifecycle | Draft → configuring → UAT → live, promoted by the bank |
| Sub-ledger | Double-entry entries and balances per end user and per program, posted to the general ledger |
| System of record | Set per data class: Nucleus, the existing core, or both with a daily tie-out |
| Flow | Application → identity verification (CIP) → diligence and screening → decision → account opened |
|---|---|
| Businesses | KYB with beneficial owners and control persons |
| Determination | Made by the platform or the bank’s designated vendors; partners submit evidence only |
| Requirements | Each application lists the fields and documents still outstanding |
| Manual review | Borderline applications route to bank staff |
| Adverse action | Denials carry the basis the bank needs for its notice |
| Accounts | Opened per end user on approval; ledger and available balance, holds, transaction search |
|---|---|
| Documents | Monthly statements; 1099-INT and 1098 tax forms |
| Cards | Virtual and physical debit: issue, activate, freeze, close |
| Authorization | The partner can approve or decline in real time; spend controls decide if it does not answer |
| Spend controls | Per-transaction and daily limits, velocity, merchant-category and channel rules |
| Wallets and disputes | Apple Pay and Google Pay provisioning without the partner handling the card number; Reg E disputes |
| ACH | Credit and debit, standard and same-day, with returns and notification-of-change corrections |
|---|---|
| Instant payments | RTP and FedNow credit transfers, 24/7; screened and funds reserved before sending |
| Book transfers | Immediate moves between accounts on the platform |
| Screening | Every payment screened and limit-checked before it reaches a rail |
| Limits | Per-transaction ceilings, daily and velocity caps, set by the bank and enforced on every write |
|---|---|
| Approval queue | Money movement above an optional auto-release ceiling waits for human approval |
| Inline rules | Program compliance rules evaluate activity; a violation raises a flag that can route to the bank |
| Monitoring | Transaction monitoring and screening in DarkMatter, on the same core |
| Deposit coverage | FDIC-coverage rules tracked per partner, with sweep support for reciprocal-deposit networks |
| Audit trail | Append-only record of every API call, money movement, decision and configuration change |
| Partner write-back | Partners must log their own access, security and error events to the bank’s audit trail |
| Connectivity | Private, over BroadStreet through the bank’s own network; no public API host |
|---|---|
| Authentication | Program-scoped keys with least-privilege scopes; rotation without downtime |
| Idempotency | Required on every write, so a retry never duplicates an account or a payment |
| Webhooks | Signed, delivered at least once, retried with backoff, dead-lettered and redeliverable |
| Sandbox | Separate keys and data, seeded test personas, simulated returns and declines |
| Documentation | Partner API reference on the adapfin developer portal, for approved partners |
In depth
Fabric for each side of the program
For sponsor banks
Sponsor-bank controls
Who sets what, how partners are supervised, and the record examiners read.
For partners
Embedded deposits
White-label accounts, sub-ledgers and FBO structures on the bank’s core.
For developers
Partner APIs
What partners integrate, how they connect, and how calls are governed.
Related
Works with
Core
Nucleus BankOS
The core Fabric runs on: one ledger, one customer record.
Module
Foundry
Underwrites embedded cards, pay-later and lines of credit.
Add-on
DarkMatter Synergy+
Connected fraud, cyber and BSA cases across programs.
Solution
Embedded finance
Partner programs on the bank’s own ledger.
Illustrative case study
White-label investor DDAs
A scenario: API-issued accounts for a private-markets partner.
Questions
Fabric: what banks ask
What is banking-as-a-service?
Banking-as-a-service (BaaS) is a model in which a chartered bank provides accounts, cards and payments to the customers of a non-bank partner, inside that partner’s app and brand. The bank remains the regulated institution holding the deposits; the partner owns the customer experience. Fabric is the Nucleus BankOS module a bank uses to run those programs.
What is Fabric?
Fabric is the banking-as-a-service module of Nucleus BankOS. It gives each partner an isolated program with governed APIs for onboarding, accounts, cards and payments, and keeps every end-user balance on the bank’s ledger.
What does a sponsor bank need to launch a BaaS program?
A partner risk and compliance framework, a ledger that shows each end user’s balance, controlled onboarding, card and payment operations, and a way to monitor partner activity. Fabric supplies the systems: program isolation, the sub-ledger, the onboarding flow, limits, monitoring and the audit trail. The bank supplies the policy, the people and the partner agreements.
How does Fabric keep the bank in control of KYC?
Partners submit applicant data and documents, but no API scope lets them set a verification result. Identity verification, diligence and the decision are made by the platform or the bank’s designated vendors, and borderline cases route to bank staff.
What is the difference between a sub-ledger and an FBO account?
An FBO (for-benefit-of) account is a pooled account at the bank held on behalf of many end users; a sub-ledger is the record of what each of those end users owns. In many BaaS programs that record lives with a middleware vendor. In Fabric the sub-ledger sits on the bank’s core and posts to its general ledger.
How do fintech partners connect to Fabric?
Over BroadStreet, adapfin’s private connectivity layer, through the bank’s own network; there is no public API host. The bank issues each partner a program-scoped key with only the scopes it needs, and the partner builds in a sandbox before production keys are issued.
What does a BaaS program cost a bank to run?
The recurring cost is mostly oversight: compliance staff, partner due diligence, reconciliation and the middleware between partner and core. Fabric removes the separate middleware ledger and puts onboarding, limits, monitoring and audit on the core, so the ongoing work is configuring programs and supervising partners. Pricing is quoted per bank; a business case models it against your current setup.
Can Fabric run alongside our existing core?
Yes. Nucleus BankOS sets the system of record per data class, so deposits can sit on Nucleus while loans stay on the incumbent core, or both can hold a record with a daily tie-out. Fabric programs follow those settings.
Can partners offer credit as well as deposits?
Yes, with Foundry. Embedded cards, pay-later and lines of credit are underwritten on Foundry under the bank’s credit policy and booked to the same ledger as the partner’s deposits.
How are partner limits enforced?
On every write. The bank sets per-transaction ceilings, daily and velocity caps, and an optional auto-release ceiling above which money movement waits for human approval. Raising a limit is a logged administrative action.
How does Fabric support exams and audits?
Every API call, money movement, decision and configuration change is written to an append-only audit trail, and partners must log their own access and error events back to it. The bank can follow any action from the partner’s side to its effect on the ledger.
Are deposits in a Fabric program FDIC-insured?
That depends on how accounts are titled and whether the records identify each owner and balance, so the bank and its counsel make the determination. Fabric keeps those per-end-user records on the bank’s core and tracks coverage per partner.
Does Fabric require Nucleus BankOS?
Yes. Fabric is a module of Nucleus BankOS; embedded credit also requires Foundry.
Launch partner programs without giving up the ledger.
A working session on your partner pipeline, your core and your first program.