> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blend.money/llms.txt
> Use this file to discover all available pages before exploring further.
# What is Blend?
> Blend is non-custodial account infrastructure. Every user gets their own isolated Gnosis Safe. Compliance controls run on every account.
Most yield products pool user money into one big pot. One hack drains everyone. And no control can attach to a single user: on-chain, the pool is one address, not your users.
Blend gives every user their own [Gnosis Safe](https://safe.global) instead.
Blend is non-custodial account infrastructure built on the Separately Managed Account (SMA) model. Your platform uses it to offer yield products without pooling funds or taking custody. Compliance controls run on every account: sanctions screening (OFAC and global lists) and a per-account audit trail. Yield routing is the flagship product on top.
## Pooled vaults vs. Blend
| | **Pooled vaults** (most apps) | **Blend's SMA model** |
| :------------------------------------------ | :-------------------------------------------------- | :---------------------------------------------------- |
| **How funds are held** | Everyone's money in one pool | **Each user gets their own Safe** |
| **What a hack means** | Entire pool drained. Everyone loses. | **Only the affected Safe is at risk.** |
| **Who controls the money** | Often the platform or its admins | **The user.** They are the only signer. |
| **Per-user controls** | None. You cannot screen or audit a slice of a pool. | **Screening and a full audit trail on every account** |
| **What happens if the platform disappears** | Users may lose access | **Users keep full access** through safe.global |
See [Accounts & Custody](/blend/account-model) for the full comparison and the custody test.
## How it works
1. **Your platform creates Account Types** (e.g. "Savings", "Growth", "BTC+") and picks which vaults to include.
2. **A user signs up and Blend deploys a Safe** just for them. They are the sole signer. Blend screens the address against sanctions lists first.
3. **The user deposits** through your app. Capital routes within the user's mandate to venues scored by [Philidor](/blend/yield#philidor-risk-scoring).
4. **Yield accrues in the user's Safe.** Rebalancing happens automatically. The user can withdraw at any time.
No one pools funds. No one takes custody. The user owns their Safe and can access it directly at [safe.global](https://safe.global), even if your app or Blend goes offline.
## Compliance controls on every account
Per-user accounts are what make per-user controls possible. Two run on every account today.
Read [Compliance Controls](/blend/compliance) for what each control does, when it runs, and what it can never do.
## The flagship product: yield routing
Yield routing runs on this account infrastructure. Capital moves from each user's own Safe across curated venues like Morpho and Aave, never as a pooled position.
Your platform shapes the product: which venues, which risk tiers, which allocations. See [Yield on Blend](/blend/yield).
Why Blend cannot move funds outside the mandate.
Sanctions screening and the audit trail, in detail.
Venues, Philidor scoring, and what you control.
Go from zero to your first deposit in under an hour.