UnifiedCash FleetEnd-to-end cash-management optimization
Capabilities Products Architecture Access
FLEET CONTROL
Two products · one cash lifecycle

End-to-end optimization of physical cash — from a single ATM to the whole network.

The UnifiedCash fleet minimizes the cost, risk and movement of physical cash across its entire lifecycle — forecasting demand, running cash-center operations, reconciling and settling, and recirculating surplus across a national network so it serves a deficit instead of returning to the central bank. Two complementary products deliver it: CashCenter runs the day-to-day cash-center operations of a licensed operator, and UnifiedCash is the national orchestration layer that nets and recirculates cash across every participant. The core is jurisdiction-agnostic, with Saudi Arabia (SAR / SAMA) as the first market.

Forecast → operate → settle live Clear & recirculate proven live Network forecasting on the roadmap Operations nodes + orchestration layer
Forecast → recirculate
one optimized cash lifecycle, end to end
2 → 0
wasteful central-bank movements removed per match
denom × fitness × location
the unit of optimization — not raw amounts
58 entities · 12 services
depth of the CashCenter operations node

The problem

Cash logistics is costly at every step — and cash moves twice when it should move once.

Moving physical cash is high-risk, multi-party and heavily regulated. A single operator juggles forecasting, armored transport chain-of-custody, declared-vs-counted discrepancies, counterfeit quarantine, vault inventory, SLA windows, settlement and central-bank reporting — usually across disconnected systems. And above the operators, surplus and deficit are scattered across banks with no neutral brain that sees them all, so cash makes round-trips it never needed to make.

Unoptimized cash today today
  • A single cash order touches half a dozen functions; without a connected backbone the audit trail breaks and risk grows.
  • Demand is guessed, so vaults are over- or under-stocked and CIT trips are scheduled reactively rather than to a forecast.
  • A surplus bank returns cash to the central bank while, across the same city, a deficit bank draws fresh cash from it — two movements for one need.
  • Serviceable notes get returned and reissued — unnecessary banknote production and destruction — while idle vault inventory sits unused next door.
With the UnifiedCash fleet optimized
  • One connected, event-driven backbone runs the whole money-moves lifecycle — every riyal traceable from an ATM low-cash signal to a posted settlement.
  • Forecasting drives ordering, vault inventory and route planning, so cash and crews are positioned ahead of demand.
  • A neutral engine sees every participant's position and nets surplus against deficit per (denomination × fitness) bucket — recirculate, hold, or return to SAMA.
  • Only the unmet fit deficit is drawn fresh from the central bank; the rest stays in circulation — and the whole cash cycle is reported to the regulator.

Fleet capabilities

Seven pillars across the whole cash lifecycle.

The offer is end-to-end optimization, not a single feature. Each pillar spans both products — the CashCenter operations node and the UnifiedCash orchestration layer — with an honest Live / Planned status. Clearing is one pillar of seven, not the headline.

Forecast & plan

Predict demand and position cash, vaults and crews ahead of need — the front of the lifecycle.

CashCenterDemand forecasting + order suggestions + actual-vs-forecast variance ledger, driving route & inventory planning.Live
UnifiedCashNetwork surplus/deficit forecasting (L1) by location & horizon — Ramadan, Eid, Hajj, salary cycles — to schedule netting cycles ahead of demand.Planned

Operate

Run the full physical money-moves lifecycle as one connected, event-driven backbone.

CashCenterOrder management — auto-originated from ATM low-cash, forecast or portal triggers, with a state machine and auto-scheduling.Live
CashCenterCIT chain-of-custody — tours, vehicles, crews, sealed containers, custody events, delivery.Live
CashCenterVault processing & inventory — declared-vs-counted, a denomination × fitness ledger, counterfeit quarantine; ATM/smart-safe telemetry triggers replenishment.Live

Reconcile & settle

Close the loop on every movement — match what was declared to what was counted, then settle.

CashCenterDeclared-vs-counted reconciliation → difference cases (shortage/overage/counterfeit) → settlement → GL postings → customer invoice.Live
UnifiedCashMultilateral net settlement — each participant's net vs the clearing house, settled for finality on the RTGS/SARIE rail (DvP off delivery).Live

Clear & recirculate

The networked win: surplus serves deficit instead of round-tripping through the central bank.

UnifiedCashFitness-aware multilateral netting per (denomination × fitness): recirculate locally, hold for a future deficit, or return unfit notes to SAMA — only unmet fit deficit is drawn fresh.Live
CashCenterA clearing match decomposes into a node's physical cash orders — the operator executes the recirculation legs.Live

Optimize

Cut the cost, distance and idle inventory of cash at every level of the network.

CashCenterRoute & vault-inventory optimization — fewer, fuller CIT trips; less idle vault cash; demand-driven replenishment.Live
UnifiedCashNetwork recirculation cuts banknote production/destruction and central-bank round-trips across all participants.Live

Risk & compliance

Auditable custody and prudent FMI risk so the cash utility is regulator-grade.

CashCenterCounterfeit quarantine + chain-of-custody auditability — one audit trail per order across the whole spine.Live
UnifiedCashFMI risk (CPMI-IOSCO) — net-debit limits (hard block at dispatch), a prefunded guarantee fund, and a default waterfall.Live

Supervise & report

Give the central bank the network view it supervises — recirculation rate and the monetary picture.

UnifiedCashSAMA regulatory reporting (L5) — the headline recirculation rate, monetary picture, fitness/destruction by grade, per-participant flows, filed as immutable snapshots.Live
CashCenterOperator-side SAMA reports (counterfeit/loss/cash-position/CIT) + real-time SLA/KPI windowing.Live

The two products

An operations node and an orchestration layer — equal partners.

The fleet is one lifecycle delivered by two complementary platforms. CashCenter owns the physical operations at the base; UnifiedCash nets and recirculates across the network above. Each is a full, independently running platform that integrates over the shared clearing plane.

Operations live
CashCenter
Cash-center operations platform · participant node

The full money-moves lifecycle for a licensed cash-center operator serving banks and merchants — an event-driven choreographed saga where every riyal is traceable from an ATM low-cash signal to a posted settlement and a customer invoice. 58 entities across 12 domain microservices.

Demand forecasting Route optimization Order management CIT chain-of-custody Vault processing & inventory Reconciliation → settlement → GL Billing & pricing ATM / smart-safe telemetry Workforce & yard CRM & SLA/KPI windowing Customer self-service portal
Clearing live
UnifiedCash
National clearing / orchestration layer

The neutral software brain of a SAMA-style Unified-Cash-Centers programme, sitting above the operator nodes. It nets each participant's surplus against every deficit so cash recirculates locally instead of round-tripping to the central bank — then settles, manages FMI risk, and reports the whole cash cycle to the regulator. The proven L0–L6 spine.

L0 consolidated ledger L1 network forecasting — planned L2 fitness-aware netting L3 net settlement · RTGS/SARIE L4 FMI risk (CPMI-IOSCO) L5 SAMA reporting L6 participant confidentiality Three trust-boundary planes

Inside the orchestration layer

UnifiedCash, layer by layer — L0 to L6.

This is the internal anatomy of the orchestration layer (the "Clear & recirculate", "Reconcile & settle", "Risk", and "Supervise" pillars above), not the whole fleet — the operations node delivers the rest. The L0–L6 spine is built and proven live; network forecasting (L1) and the production- hardening steps (a real SARIE/RTGS connector, physical DB-per-participant) are on the roadmap. Status is shown honestly per layer.

L0

Consolidated position ledger

The network's single book — every participant × center × denomination × fitness, event-sourced from participant feeds and SAMA issuance/destruction.

Live
L1

Network forecasting

Seasonal surplus/deficit prediction by location and horizon — Ramadan, Eid, Hajj and salary-cycle demand — feeding a network long/short map that drives cycle timing. (CashCenter already forecasts single-operator demand today — see the Forecast & plan pillar.)

Roadmap — not yet live; the only spine layer still ahead.
Planned
L2

Fitness-aware multilateral netting

The brain: nets surplus against deficit per (denomination × fitness), deciding recirculate / hold / return-to-SAMA with a draw-from-SAMA tally.

Live
L3

Multilateral net settlement · RTGS/SARIE finality

Each participant's net versus the clearing house, settled for finality on the RTGS rail. Delivery-versus-payment fires automatically when physical legs confirm — payment follows delivery.

Live on a pluggable RTGS adapter; a real SARIE connector drops into the same seam — planned.
Live
L4

FMI risk · CPMI-IOSCO

Net-debit limits (a hard block at dispatch), a prefunded guarantee fund, and a default waterfall — defaulter collateral → guarantee fund → clearing-house skin-in-the-game → mutualized survivors.

Live
L5

Regulatory reporting — the SAMA plane

The network view the regulator supervises: the headline recirculation rate, the monetary picture, fitness/destruction by grade, per-participant flows and the FMI risk summary — filed as immutable snapshots.

Live
L6

Participant confidentiality — Chinese walls

Every participant sees only its own positions, limits, fund tranches, obligations and defaults — enforced in the database via PostgreSQL row-level security; the operator sees the whole network.

Live as RLS Chinese walls; physical DB-per-participant is the next hardening step — planned.
Live
Live — built & proven end-to-end In progress — hardening underway Planned — on the roadmap

Fleet architecture

Two layers: operations nodes at the base, orchestration above.

Operations nodes like CashCenter run the physical cash lifecycle; the UnifiedCash orchestration layer nets and recirculates across all of them over a shared, secured clearing plane. The only things that cross the participant boundary are contract messages — positions inward, instructions outward.

Orchestration layer — UnifiedCash (the clearing utility)
Owns the consolidated ledger, the fitness-aware netting engine, net settlement on the RTGS rail, FMI risk (limits · guarantee fund · default waterfall), and regulatory reporting. Exposed through three trust-boundary planes: an operator control plane, a SAMA regulator plane, and a per-bank participant plane.
Shared clearing plane
A dedicated, hardened message channel (SASL/SSL, per-participant access control) plus the L0 ledger and onboarding. The only things that cross the participant boundary are contract messages — position reports inward, instructions outward — on access-isolated topics. No shared database, no hard cross-participant links.
Operations nodes — bank & cash-center operators
Sovereign platforms (own database, own lifecycle) that touch the plane only through a position reporter and an edge connector. CashCenter is the reference operator node: it runs the full forecast → order → CIT → vault → reconciliation → settlement lifecycle, and a clearing match decomposes into its physical cash orders. Adding a participant is identity + onboarding — not new clearing code.
forecast demand operate (order · CIT · vault) report positions L0 consolidates engine nets instructions fan out physical delivery settle (DvP) report to SAMA

What's next

From a proven lifecycle to a production utility.

Operations and clearing are live end-to-end. The road ahead is predictive timing at both levels, a real settlement rail, physical isolation, and more participants on the network.

Planned

Forecasting at both levels

Deepen CashCenter demand forecasting → route/capacity optimization, and add UnifiedCash L1 network surplus/deficit forecasting to schedule cycles ahead of demand.

Planned

Real SARIE / RTGS connector

A live national settlement rail behind the existing pluggable adapter seam — replacing the finality stub with the real thing.

Planned

DB-per-participant

Physical isolation with soft cross-participant references — the deployment-hardening evolution of the RLS Chinese walls already enforced today.

In progress

More participant nodes

Onboarding additional banks and operators onto the clearing plane — each with its own access-isolated topic and credentials.

Access

Enter a product plane.

The fleet exposes two products. UnifiedCash has three trust-boundary planes (operator, regulator, participant); CashCenter has its operations portal (customer + operator). Each is a separate sign-in — authorised access only.

UnifiedCash · orchestration layer
CashCenter · operations platform