Provider logos bundled with Tygro (served locally; nothing is fetched at runtime, no logo service, API or CDN is used). WHAT A LOGO MEANS. A logo here only identifies the provider a person named, for factual identification (nominative use). Every mark remains the trademark of its owner; Tygro is not affiliated with, sponsored or endorsed by any of them, and nothing here implies it - Tygro has no bank connection. Copyright licences and trademark rights are separate: a copyright waiver or public-domain tag does not grant any trademark right, and no collection below is claimed to be legally cleared. An icon is never inferred from a kind, currency, amount or country, and a card's saved provider name is never rewritten. To remove a logo: delete its file, move its row from src/lib/vault/providerLogoRows.ts to providerDirectoryRows.ts without `logo` (the institution stays searchable; the card shows the neutral icon), delete its line below and its hash in tests/provider-logo-curation.test.ts. tests/provider-registry.test.ts checks that the logo rows, this folder and this file list exactly the same files, and tests/provider-logo-curation.test.ts pins every file's content, so artwork can never be swapped silently (see "Curation rule" at the end). Summary: 114 logo files = 21 curated App Store icons (A) + 18 Simple Icons tiles (B) + 74 Wikimedia Commons logos (C) + 1 Commons logo under CC BY-SA 4.0 (I) + 1 press-kit logo with no usage terms found (J). Rights status in one line: A is UNVERIFIED legacy artwork (kept for quality, flagged); B has a collection-level CC0 grant and a recorded source per icon; C has a per-file Commons "public domain"/CC0 tag (a US-law community assessment). I (mapfre.png) is licensed CC BY-SA 4.0 by its copyright holder (Wikimedia VRTS record), with credit and changes recorded in section I. J (tallymoney.png) is a file from the company's own press kit with NO usage terms found (rights NOT established, section J). None of it is a clearance of any trademark. Two logos were REMOVED on 2026-10-28 because they showed a different organisation (section E); every Commons logo now records how its institution was identified (section F); five group-A icons show in the public demos with their rights still UNVERIFIED (section G); three more logos that were requested for the demos (Santander Pensiones, The Vanguard Group, The Royal Mint) were NOT ADDED because their owners' published terms require a licence or written permission (section H). On 2026-10-29 three more were asked for: MAPFRE was ADDED (section I); InvestEngine (only a retired logo is licensed) and BullionStar (its terms exclude apps) were NOT ADDED (section H, items 4 and 5). A second request the same day put Trading 212 (the existing group-A icon, trading212.png) and TallyMoney (a press-kit logo, section J) on Daniel's fund and gold. ============================================================================ A. 21 CURATED APP STORE ICONS (PNG, 144px) - RIGHTS NOT ESTABLISHED ============================================================================ Each is the provider's own iOS app icon from its Apple App Store listing (1024px artwork via Apple's free lookup API, resized to 144px, not recoloured), the look the Vault cards were curated around. An App Store listing is NOT a licence: no licence grant or brand-asset permission was established for these files, and this file does not claim one; the rights holder could ask for any of them to be removed, and removing one is a one-file change (see above). They are used deliberately: for these 21 providers the app icon is far more recognisable at card size than any documented alternative, and the alternatives that were tried were worse (see section D). No documented replacement exists: Simple Icons holds only wordmarks or recoloured glyphs for them, their Commons files are non-free, CC BY-SA or only very wide wordmarks, and the providers' own brand pages that were checked state no terms (MetaMask's asset page offers an official logo pack but says nothing about third-party use; Ledger's and Trust Wallet's brand URLs returned 404). Replace each with a documented asset whenever one becomes available. caixabank.png 2026-10-05 "CaixaBankNow", CaixaBank, S.A. (id 318806094) barclays.png 2026-10-05 "Barclays", Barclays Services Limited (uk.co.barclays.bmbappstore, id 536248734) wise.png 2026-10-05 "Wise - Global Money", Wise Payments Ltd (com.transferwise.Transferwise, id 612261027) aegon.png 2026-10-05 "Aegon UK", AEGON UK CORPORATE SERVICES LTD (com.aegon.prodapp30, id 1528986569) santander.png 2026-10-07 "Santander España", Banco Santander SA (com.isban.bancosantander.es.public, id 408043474); the flame alone, colours swapped, label removed coinbase.png 2026-10-16 "Coinbase", Coinbase, Inc. (id 886427730) kraken.png 2026-10-16 "Kraken", Payward, Inc. (id 1481947260) binance.png 2026-10-16 "Binance", Binance Switzerland AG (id 1436799971) bitpanda.png 2026-10-16 "Bitpanda", Bitpanda GmbH (id 1449018960) revolut.png 2026-10-16 "Revolut", Revolut Ltd (id 932493382) traderepublic.png 2026-10-16 "Trade Republic", Trade Republic Bank GmbH (id 1410703839) interactivebrokers.png 2026-10-16 "IBKR Mobile", Interactive Brokers LLC (id 454558592) etoro.png 2026-10-16 "etoro", eToro Group Ltd. (id 674984916) degiro.png 2026-10-16 "DEGIRO", DeGiro B.V. (id 1099174456) trading212.png 2026-10-16 "Trading 212", Avus Capital LLC (id 566325832) myinvestor.png 2026-10-16 "MyInvestor", MyInvestor Banco S.A. (id 1587906669) indexacapital.png 2026-10-16 "Indexa Capital", INDEXA CAPITAL A.V. SA (id 1253420807) ledger.png 2026-10-16 "Ledger Wallet", Ledger SAS (id 1361671700) metamask.png 2026-10-16 "MetaMask", ConsenSys AG (id 1438144202) trustwallet.png 2026-10-16 "Trust: Crypto & Bitcoin Wallet", DApps Platform Software Services Ltd. (id 1288339409) phantom.png 2026-10-16 "Phantom", Phantom Technologies Incorporated (id 1598432977) ============================================================================ B. SIMPLE ICONS TILES - 18 SVG files ============================================================================ Source: the npm package "simple-icons" 16.35.0 (https://simpleicons.org, https://github.com/simple-icons/simple-icons), downloaded 2026-10-17 from the npm registry. Declared licence of the package: CC0 1.0 Universal (public domain dedication) - see the package's LICENSE.md. Its DISCLAIMER.md warns that CC0 for the project "doesn't mean to imply that all icons within the project are also CC0", that licence data per icon is incomplete, that brands retain their trademarks and that users must seek any permissions the brand's guidelines require. So the collection licence is recorded here as the basis for each file below, NOT as clearance of any brand: for each icon the package's own "source" field (where the artwork was taken from, usually the brand's press kit or official site) and "guidelines" field are recorded, and the package carries no per-icon licence entry for any of them. HOW EACH TILE IS MADE: a 48x48 SVG of exactly two shapes - a in the brand colour recorded in Simple Icons and the icon's single (unchanged, 24x24 coordinates) scaled by 1.24 and centred, white, or near-black (#111111) where white would contrast less than 2:1 with the brand colour. No script, style, text, image or link; a test enforces it. A tile is used ONLY where there is no better curated icon: the Simple Icons versions of Barclays, Binance, CaixaBank, Coinbase, Revolut and Wise were tried and rejected (section D). file Simple Icons slug brand glyph recorded source / guidelines bankofamerica.svg bankofamerica #012169 #FFFFFF https://www.bankofamerica.com chase.svg chase #117ACA #FFFFFF https://commons.wikimedia.org/wiki/File:Chase_logo_2007.svg wellsfargo.svg wellsfargo #D71E28 #FFFFFF https://www.wellsfargo.com/about hsbc.svg hsbc #DB0011 #FFFFFF https://www.hsbc.com | guidelines: https://www.hsbc.com/terms-and-conditions monzo.svg monzo #14233C #FFFFFF https://monzo.com/press/ starlingbank.svg starlingbank #6935D3 #FFFFFF https://www.starlingbank.com/media/ | guidelines: https://www.starlingbank.com/docs/brand/starling-bank-brand-guidelines.pdf bunq.svg bunq #3394D7 #FFFFFF https://press.bunq.com/media_kits n26.svg n26 #48AC98 #FFFFFF https://n26.com commerzbank.svg commerzbank #FFCC33 #111111 https://commons.wikimedia.org/wiki/Category:Commerzbank_logos deutschebank.svg deutschebank #0018A8 #FFFFFF https://www.db.com nubank.svg nubank #820AD1 #FFFFFF https://nubank.com.br/en/press/ picpay.svg picpay #21C25E #FFFFFF https://www.picpay.com/site/sobre-nos mercadopago.svg mercadopago #00B1EA #FFFFFF https://www.mercadopago.com robinhood.svg robinhood #CCFF00 #111111 https://press.robinhood.com okx.svg okx #000000 #FFFFFF https://commons.wikimedia.org/wiki/File:OKX_logo.svg kucoin.svg kucoin #01BC8D #FFFFFF https://www.kucoin.com/news/en-kucoin-media-kit uphold.svg uphold #49CC68 #FFFFFF https://uphold.com/en-us/brand-assets | guidelines: https://uphold.com/en-us/brand-assets trezor.svg trezor #141609 #FFFFFF https://satoshilabs.visualbook.pro/content/2_trezor/1_logos/2_symbol/trezor-symbol-black-rgb.svg ============================================================================ C. WIKIMEDIA COMMONS LOGOS - 74 PNG files (2026-10-18, re-tiled 2026-10-18; two removed 2026-10-28, see E) ============================================================================ Each is a logo file hosted on Wikimedia Commons whose OWN licence metadata (the Commons "LicenseShortName" field) says "Public domain" or "CC0", with copyright flag false, retrieved through the Commons API on 2026-10-18. The "Public domain" tag on logos is the Commons community's assessment (typically PD-textlogo / PD-ineligible: a mark made only of letters and simple shapes is below the threshold of originality) and it is a UNITED STATES law judgement; other jurisdictions can differ for a more elaborate mark. It is therefore recorded as the basis for each file, not as clearance. Every file also carries Commons' "trademarked" restriction flag where shown: the mark is the provider's trademark and is used here only to identify it. Where the file was found through Wikidata, the institution was identified by its Wikidata entity (Q-id) and that entity's official logo / icon claim, then checked by eye against the provider named; "commons search" means it was found by searching Commons and accepted only after checking, by file name and by eye, that it is that institution. THAT CHECK WAS NOT ENOUGH (two wrong organisations passed it, see E): a search-found logo now also needs identity evidence recorded in F. Files licensed CC BY, CC BY-SA or with any other condition were not used (attribution and share-alike duties do not fit a compact tile) - one exception, requested by the owner on 2026-10-29, with the attribution recorded: mapfre.png (section I). HOW EACH TILE IS MADE (app-icon style): the Commons file (SVG, rejected if it uses text, embedded images, external references, scripts or @import) is rasterised and trimmed to its content, then scaled proportionally - never stretched or recoloured. A logo that is its own coloured square with one uniform edge colour fills the whole tile edge to edge ("fill", like an app icon); any other solid logo sits on a white tile with a small margin; a mark on a transparent background sits on white; a white-on-transparent mark sits on a dark tile. A logo whose content is wider than 2.3:1 is NOT used (it would be unreadable at 36px; that institution keeps the neutral icon). For logos that stack a symbol above a line of small text, ONLY the symbol is shown where that is how the brand is recognised (a plain crop above the gap; nothing redrawn): banconacionargentina, commonwealthbank, pkobankpolski, bancomacro, bankofireland, banrisul, bradesco, caissedepargne, cnpassurances, fondonacionaldelahorro, tatrabanka, creditagricole, zurich. Three logos were removed after review at card size because even so they were unreadable (Vontobel: vertical text; Navy Federal Credit Union and Migros Bank: fine multi-line text); those institutions stay in the directory with the neutral icon. file how Wikidata / source file on Commons licence tag restriction abnamro.png commons search - https://commons.wikimedia.org/wiki/File:ABN_AMRO_logo_(cropped).svg [Public domain] trademarked airbank.png wikidata Q10723691 https://commons.wikimedia.org/wiki/File:AB_Logo_200percent_PPF_RGB.png [Public domain] trademarked aliorbank.png wikidata Q9148395 https://commons.wikimedia.org/wiki/File:Logo-Alior-Bank-SVG.svg [Public domain] trademarked aviva.png wikidata Q791179 https://commons.wikimedia.org/wiki/File:Aviva_Logo.svg [Public domain] trademarked axa.png wikidata Q160054 https://commons.wikimedia.org/wiki/File:AXA_Logo.svg [Public domain] trademarked bancatransilvania.png wikidata Q806161 https://commons.wikimedia.org/wiki/File:Banca_Transilvania_Logo.svg [Public domain] trademarked bancociudad.png commons search - https://commons.wikimedia.org/wiki/File:Banco_Ciudad_Logo.png [Public domain] trademarked bancodobrasil.png commons search - https://commons.wikimedia.org/wiki/File:Logotipo_do_Banco_do_Brasil_(s%C3%ADmbolo).svg [Public domain] trademarked bancoestado.png commons search - https://commons.wikimedia.org/wiki/File:Logo_BancoEstado_(cropped).svg [Public domain] trademarked bancointer.png wikidata Q9645209 https://commons.wikimedia.org/wiki/File:Inter%26Co_logo_icon.svg [Public domain] trademarked bancomacro.png commons search - https://commons.wikimedia.org/wiki/File:Macro_Banco_BMA.png [Public domain] trademarked banconacionargentina.png commons search - https://commons.wikimedia.org/wiki/File:Logo_Banco_de_la_Nacion_Argentina.svg [Public domain] trademarked bancosabadell.png commons search - https://commons.wikimedia.org/wiki/File:Logotipo_del_Banco_Sabadell.svg [Public domain] trademarked bankofireland.png wikidata Q806689 https://commons.wikimedia.org/wiki/File:Bank_of_Ireland_Logo_2020.svg [Public domain] trademarked banquecantonalevaudoise.png wikidata Q685533 https://commons.wikimedia.org/wiki/File:Icon_Banque_Cantonale_Vaudoise.svg [Public domain] trademarked banquepopulaire.png commons search - https://commons.wikimedia.org/wiki/File:Groupe_Banque_Populaire_Logo.svg [Public domain] trademarked banregio.png commons search - https://commons.wikimedia.org/wiki/File:BANREGIO_NUEVO_LOGO-02.svg [Public domain] - banrisul.png wikidata Q4857098 https://commons.wikimedia.org/wiki/File:Banrisul_(Logo_2015).svg [Public domain] - bawag.png wikidata Q379938 https://commons.wikimedia.org/wiki/File:BAWAG_P.S.K._logo.svg [Public domain] trademarked bitvavo.png commons search - https://commons.wikimedia.org/wiki/File:Bitvavo-mark-black.svg [Public domain] - bmo.png commons search - https://commons.wikimedia.org/wiki/File:BMO_Harris_Logo.png [Public domain] trademarked bnpparibas.png wikidata Q499707 https://commons.wikimedia.org/wiki/File:BNP_Paribas.svg [Public domain] trademarked bradesco.png commons search - https://commons.wikimedia.org/wiki/File:Banco_Bradesco_logo_(vertical).png [Public domain] trademarked caissedepargne.png wikidata Q1547738 https://commons.wikimedia.org/wiki/File:Team_Caisse_d%E2%80%99Epargne.svg [Public domain] trademarked caixageraldedepositos.png wikidata Q1026044 https://commons.wikimedia.org/wiki/File:Logo_of_Caixa_Geral_de_Dep%C3%B3sitos.svg [Public domain] trademarked charlesschwab.png wikidata Q1066028 https://commons.wikimedia.org/wiki/File:Charles_Schwab_Corporation_logo.svg [Public domain] trademarked citi.png wikidata Q857063 https://commons.wikimedia.org/wiki/File:Citi_logo_March_2023.svg [Public domain] trademarked cnpassurances.png wikidata Q1023930 https://commons.wikimedia.org/wiki/File:CNP_Assurances_logo_2024.svg [Public domain] trademarked commonwealthbank.png wikidata Q285328 https://commons.wikimedia.org/wiki/File:Commonwealth_Bank_Logo.svg [Public domain] trademarked consorsbank.png wikidata Q30085423 https://commons.wikimedia.org/wiki/File:Consorsbank.png [Public domain] trademarked creditagricole.png wikidata Q590952 https://commons.wikimedia.org/wiki/File:Cr%C3%A9dit_Agricole_2020_logo.svg [Public domain] trademarked csob.png commons search - https://commons.wikimedia.org/wiki/File:%C4%8CSOB_logo.svg [Public domain] trademarked dnb.png wikidata Q80788 https://commons.wikimedia.org/wiki/File:DNB_Logo.svg [Public domain] trademarked ethias.png commons search - https://commons.wikimedia.org/wiki/File:Ethias_logo.svg [Public domain] trademarked evobanco.png commons search - https://commons.wikimedia.org/wiki/File:EVO_Banco_logo.svg [Public domain] trademarked fifththirdbank.png commons search - https://commons.wikimedia.org/wiki/File:Fifth_Third_Bank_logo_(2023,_symbol_only,_full_color).svg [Public domain] trademarked fondonacionaldelahorro.png commons search - https://commons.wikimedia.org/wiki/File:Fondo_Nacional_de_Ahorro_logo.svg [Public domain] insignia goldmansachs.png commons search - https://commons.wikimedia.org/wiki/File:Goldman_Sachs.svg [Public domain] trademarked hellobank.png wikidata Q16466338 https://commons.wikimedia.org/wiki/File:Hello_bank!_Logo.png [Public domain] - infonavit.png commons search - https://commons.wikimedia.org/wiki/File:Logo_INFONAVIT.svg [Public domain] trademarked itauunibanco.png wikidata Q1424293 https://commons.wikimedia.org/wiki/File:Ita%C3%BA_Unibanco_logo_2023.svg [Public domain] trademarked khbank.png wikidata Q6393834 https://commons.wikimedia.org/wiki/File:K%26H_logo.svg [Public domain] trademarked kiwibank.png wikidata Q1516341 https://commons.wikimedia.org/wiki/File:Kiwibank_Logo.svg [Public domain] - kutxabank.png wikidata Q5139377 https://commons.wikimedia.org/wiki/File:Kutxabank.svg [Public domain] trademarked labanquepostale.png wikidata Q3206431 https://commons.wikimedia.org/wiki/File:Logo_La_Banque_postale_2022.svg [Public domain] trademarked lansforsakringar.png commons search - https://commons.wikimedia.org/wiki/File:L%C3%A4nsf%C3%B6rs%C3%A4kringar_logo.svg [Public domain] - lcl.png wikidata Q779722 https://commons.wikimedia.org/wiki/File:Cr%C3%A9dit_Lyonnais_logo.svg [Public domain] trademarked lloydsbank.png wikidata Q1152847 https://commons.wikimedia.org/wiki/File:Lloyds_Bank_1985_wordmark.svg [Public domain] trademarked mbhbank.png commons search - https://commons.wikimedia.org/wiki/File:MBH_Bank_logo_2023.svg [Public domain] trademarked mercadobitcoin.png commons search - https://commons.wikimedia.org/wiki/File:Logotipo_do_Mercado_Bitcoin.svg [Public domain] trademarked natwest.png wikidata Q2740021 https://commons.wikimedia.org/wiki/File:Natwest_2014_logo.svg [Public domain] trademarked opfinancialgroup.png wikidata Q4045597 https://commons.wikimedia.org/wiki/File:OP_Financial_Group.svg [Public domain] - otpbank.png wikidata Q912778 https://commons.wikimedia.org/wiki/File:Otp_bank_Logo.svg [Public domain] trademarked paypal.png wikidata Q483959 https://commons.wikimedia.org/wiki/File:PayPal_2024_(Icon).svg [Public domain] trademarked pkobankpolski.png wikidata Q578832 https://commons.wikimedia.org/wiki/File:PKO_BP_logo_2026.svg [Public domain] trademarked privrednabankazagreb.png wikidata Q7246343 https://commons.wikimedia.org/wiki/File:PBZ_banka_logo.png [Public domain] trademarked pzu.png wikidata Q1807170 https://commons.wikimedia.org/wiki/File:Pzu_newlogo.png [Public domain] - republicaafap.png wikidata Q7314563 https://commons.wikimedia.org/wiki/File:Republica_AFAP.png [Public domain] trademarked saxobank.png commons search - https://commons.wikimedia.org/wiki/File:Saxo_Bank_logo.svg [Public domain] trademarked seb.png commons search - https://commons.wikimedia.org/wiki/File:SEB_logo.svg [Public domain] trademarked sparkasse.png wikidata Q2307760 https://commons.wikimedia.org/wiki/File:Sparkasse.svg [Public domain] trademarked stjamessplace.png commons search - https://commons.wikimedia.org/wiki/File:St._James%27s_Place_logo.svg [Public domain] trademarked swissquote.png commons search - https://commons.wikimedia.org/wiki/File:Logo_Swissquote.svg [Public domain] trademarked tatrabanka.png wikidata Q1718069 https://commons.wikimedia.org/wiki/File:Tatra_banka_logo.svg [Public domain] trademarked tdbank.png wikidata Q1194832 https://commons.wikimedia.org/wiki/File:Toronto-Dominion_Bank_logo.svg [Public domain] trademarked tranquilidade.png commons search - https://commons.wikimedia.org/wiki/File:Tranquilidade-logo.png [Public domain] trademarked triodosbank.png wikidata Q688452 https://commons.wikimedia.org/wiki/File:Triodos_Bank_Icon_2026.svg [Public domain] trademarked uala.png commons search - https://commons.wikimedia.org/wiki/File:Ual%C3%A1-Imagotipo.png [Public domain] - uniqa.png wikidata Q1022419 https://commons.wikimedia.org/wiki/File:Uniqa_Insurance_Group_logo.svg [Public domain] trademarked velobank.png wikidata Q124312517 https://commons.wikimedia.org/wiki/File:Velo_Bank_2022_logo.svg [Public domain] trademarked wealthfront.png wikidata Q18394708 https://commons.wikimedia.org/wiki/File:Wealthfront_Logo.svg [Public domain] trademarked xpinvestimentos.png wikidata Q10394124 https://commons.wikimedia.org/wiki/File:Logotipo_da_XP_Investimentos.svg [Public domain] trademarked zurcherkantonalbank.png wikidata Q248476 https://commons.wikimedia.org/wiki/File:Icon_Z%C3%BCrcher_Kantonalbank.svg [Public domain] trademarked zurich.png wikidata Q230426 https://commons.wikimedia.org/wiki/File:Zurich_Insurance_Group_logo.svg [Public domain] trademarked ============================================================================ D. CONSIDERED AND DELIBERATELY NOT USED ============================================================================ - Simple Icons tiles for Barclays, Binance, CaixaBank, Coinbase, Revolut and Wise (used for about a day in an earlier pass) were REVERTED to the curated App Store icons: CaixaBank's lost its brand colours, Binance's inverted its colours, Barclays' lost the eagle on white, Coinbase's was a tiny unreadable wordmark and the Revolut and Wise tiles were flatter and less recognisable. Documented provenance does not outweigh a logo people cannot recognise; the trade-off is that those six are again unverified legacy artwork (section A), flagged above. - Simple Icons "charles" is Charles Proxy (a software tool), NOT Charles Schwab; "neon" is a database company, NOT the Brazilian bank Neon; "first" and "virgin" are other companies too. Icons are never matched to providers by slug - each was chosen by hand and checked against its recorded source. - Wide wordmarks: for most major banks (Swedbank, Luminor, Artea, Galicia, BBVA, Bankinter, Nordea, Danske, Handelsbanken, Rabobank, UniCredit, Intesa, Pekao, Bancolombia, Banorte ...) Commons only holds public-domain-tagged files as wordmarks 3-10x wider than tall. They cannot be shown legibly in the fixed 36px slot without changing the card layout, so those institutions are in the directory with the neutral icon. - Licences with conditions: Ledger, Openbank (CC BY-SA 4.0), Scottish Widows, Nutmeg (CC BY 4.0), Trade Republic, DEGIRO (CC BY-SA 4.0) and others. MetaMask's fox on Commons is labelled "MIT" with MetaMask's brand-resources repository as source, but that repository states no licence (no LICENSE file), so the label could not be verified. - @web3icons/core (MIT): the licence covers the repository, but it records no per-icon source or brand permission. - Any app-store artwork for NEW providers: an App Store listing is not a licence (see section A). - Wrong-entity or unusable matches rejected on inspection: a Wikidata/Commons hit for "IG" showed an unrelated broadcaster's logo; "U.S. Bank" rendered without its text; "DKB" matched a railway, "Postbank" a Greek bank, "Yape" a Bolivian wallet, "Helvetia" a student society, and so on. ============================================================================ E. REMOVED AFTER REVIEW - THE FILE SHOWED A DIFFERENT ORGANISATION (2026-10-28) ============================================================================ Both were found by searching Commons and accepted on a name match plus a look at the picture. A live check of the files' Commons metadata showed they are not the institutions the registry says. Each was deleted, its row moved to providerDirectoryRows.ts WITHOUT a logo (the institution and its aliases stay searchable; its card shows the neutral icon) and its hash dropped. Nothing was put in their place. vanguard.png was File:Vanguard_univ_logo.png - Commons category "Logos of Vanguard University", source vanguard.edu, uploaded 2025-03-02 (uploader Fma12, author unknown), tagged public domain / trademarked. It is Vanguard University's mark, NOT The Vanguard Group's; the public-domain tag concerned that mark. rbc.png was File:RBC_2024_New_logo.svg - Commons categories "Ryukyu Broadcasting Corporation logos", "Black alphabet logos of Japan", "SVG logos of television channels of Japan". Treated as a Japanese broadcaster's logo, NOT Royal Bank of Canada's (not compared against RBC's own brand pages). LESSON: a name match is not identity ("Vanguard University" contains "vanguard"; RBC is also a broadcaster) and neither is a content hash - the hash pinned the wrong file. See F, and the identity tests in tests/provider-logo-curation.test.ts. ============================================================================ F. IDENTITY EVIDENCE FOR THE 28 SEARCH-FOUND COMMONS LOGOS (checked live against Commons 2026-10-28) ============================================================================ A Wikidata-found logo (the other 46 in C) is identified by the institution's own Wikidata entity (Q-id in C). A logo found by searching needs a Commons category that NAMES the institution (a name token alone is not enough), or it is marked NOT CONFIRMED: kept because nothing says it is wrong, but its institution is NOT established and it should be compared with the institution's own brand page (and replaced or removed if it differs). The NOT CONFIRMED set is pinned in the curation test. abnamro.png category: ABN AMRO bancociudad.png category: Logos of Banco Ciudad de Buenos Aires bancodobrasil.png category: Banco do Brasil logos and banners bancoestado.png category: Banco del Estado de Chile bancomacro.png category: Macro BMA banconacionargentina.png category: Logos of Banco de la Nación Argentina bancosabadell.png category: Banc Sabadell logos banquepopulaire.png NOT CONFIRMED - the Commons file has no categories at all banregio.png category: Banregio bitvavo.png category: Bitvavo bmo.png NOT CONFIRMED - only "Logos of banks"; the file is the retired "BMO Harris" mark bradesco.png category: Bradesco csob.png category: Československá obchodní banka ethias.png category: Ethias evobanco.png category: EVO Banco fifththirdbank.png category: Fifth Third Bank logos fondonacionaldelahorro.png category: Fondo Nacional del Ahorro goldmansachs.png category: SVG logos of Goldman Sachs infonavit.png category: INFONAVIT lansforsakringar.png category: Länsförsäkringar mbhbank.png category: MBH Bank mercadobitcoin.png NOT CONFIRMED - only "SVG logos of companies of Brazil" saxobank.png category: Saxo Bank seb.png category: Skandinaviska Enskilda Banken stjamessplace.png NOT CONFIRMED - only "SVG logos of companies of the United Kingdom" swissquote.png NOT CONFIRMED - Commons itself files it under "Unidentified logos of Switzerland" tranquilidade.png NOT CONFIRMED - only generic Portuguese-company and insurer categories uala.png NOT CONFIRMED - only "Logos of financial services companies of Argentina" ============================================================================ G. PUBLIC DEMOS AND WHAT A REPLACEMENT MUST PROVE ============================================================================ PUBLIC DEMOS - UNVERIFIED RIGHTS, PRELAUNCH REVIEW REQUIRED. The example lives (Sofia, Daniel; the homepage and /demo/*) show real institution names with the same logos a signed-in card shows (the same ProviderMark and registry, no demo-only path). Six of those logos are group-A App Store icons whose usage rights are UNVERIFIED: caixabank, myinvestor (Sofia) and barclays, aegon, coinbase, trading212 (Daniel). Showing them is the owner's product decision (2026-10-28), NOT permission and NOT legal clearance: no licence, brand permission or published brand-asset terms covering this use has been found for any of them (an earlier policy that hid them in the demos was reverted on that decision). Before launch each needs the usage evidence below, or its file removed (a one-file change, see the top of this file). A test pins this list, so adding or dropping an unverified icon in a demo is a deliberate edit of that test and of this section. TallyMoney's press-kit file (section J) is in the same position but is not a group-A icon. No demo name now shows the neutral icon. Daniel's fund is held on Trading 212 (a platform that offers ETFs from third-party issuers; the example names no issuer and does not present Trading 212 as one): trading212.png is the group-A icon registered since 2026-10-16, compared on 2026-10-29 with the current App Store artwork (id 566325832, seller Avus Capital LLC; mean pixel difference 0.45 of 255, i.e. the same image). Trading 212's press kit is behind a "Download press kit" button on trading212.com/press, which answers automated requests with HTTP 403 (access denied), so its contents and any usage terms were NOT read, and no trademark or logo clause was found for the main site (only its API terms are indexed). Rights are therefore NOT established. Daniel's gold is held with TallyMoney (section J), also without established rights. Vanguard and The Royal Mint are no longer used in a demo (Vanguard stays in the directory without a logo; see E and H). Sofia's pension provider is Mapfre, drawn with the CC BY-SA 4.0 file in section I. It is not on the list above because it is not a group-A icon: its copyright licence is documented, but that licence does not touch the trademark, so it is still only used to identify the provider. "Santander Pensiones" is registered as its own pension provider (a different company from the "Santander" entry - the registry never lets a subsidiary borrow its parent's logo) without a logo (section H) and no demo uses it now. A short note on the homepage says provider names belong to their owners and Tygro is not affiliated with them. That note is a courtesy, NOT a licence: it does not make any logo usable. WHAT AN ACCEPTABLE REPLACEMENT NEEDS (all of it, recorded here before the file is added): 1. Usage evidence: a licence, or the brand owner's published brand-asset terms or written permission, that covers showing the mark in a third-party product - with the URL and the date read. An App Store listing is not that (Apple's App Store promo-content terms, read 2026-10-28, allow app icons only to promote the subject app, next to an App Store badge). A "public domain" tag is a copyright view, not a trademark right. 2. Identity evidence: the exact institution - a Wikidata entity, the brand's own page, or a Commons category that names it - and the file compared with the institution's official site at 36px and 84px. A name match or a content hash does not count. 3. A line in A/B/C, an entry in F when found by search, a hash in tests/provider-logo-curation.test.ts, and the file under public/vault/providers/. ============================================================================ H. LOGOS REQUESTED FOR THE DEMOS BUT NOT ADDED (2026-10-28) ============================================================================ Santander Pensiones, The Vanguard Group and The Royal Mint were asked for. Each is NOT ADDED: the owner's own published terms (read 2026-10-28) require a licence or written permission for this kind of use, and for two of them no icon-sized official asset is published at all. Public availability of an image is not authorisation, and nothing here is a finding that any use would be unlawful or legal advice - it records what was found. No demo uses these names any more (see G and J). Items 4 and 5 were added to this section on 2026-10-29. 1. SANTANDER PENSIONES - registered as its OWN pension provider (src/lib/vault/providerDirectoryRows.ts; not an alias of "Santander", saved name never rewritten), no logo. Source: Santander "Basic guidelines" (2020), santander.com/content/dam/santander-com/es/documentos/marca-santander/Guia_Marca_060520_en.pdf. Page 2: the guidelines cover "the application and use of the Santander brand by a third party, provided that such third party is duly authorized to do so by means of the corresponding license that authorizes the use"; "its use and reproduction is prohibited, unless expressly authorized." Page 1: "Santander is a registered trademark." The guide defines a symbol-only (flame) version (pages 7-8, minimum 16px) and says final artwork files are shared, but to licensees; no download or licence offered to us was found. Candidates NOT used: santander.png (section A: App Store derivative, colours swapped, kept only for the "Santander" entry) and Commons "Santander Logo.jpg" (225px JPG of the stacked logo, unknown source, public-domain tag). Neither is an unmodified official symbol. NEEDED: Banco Santander's licence or written permission, and its official symbol-only artwork. 2. THE VANGUARD GROUP - the "Vanguard" entry stays in the directory without a logo (its earlier file was Vanguard University's, see E). Source: Vanguard US Terms and Conditions of Use (investor.vanguard.com/ts/pdf/terms_and_conditions.pdf, (c) 2018): a user may not "Modify, copy, obscure, remove, or display Vanguard's name, logo, trademarks, text, notices, or images without Vanguard's express written permission" (requests: intellectualproperty@vanguard.com); "Nothing contained on this Site should be construed as granting any license or right in or to any trademarks, service marks, or trade dress of Vanguard." Vanguard's UK licence agreement likewise licenses its logo only for named materials, with no alteration. No general brand-asset page was found. Commons holds only wordmarks (File:Vanguard.svg 127x27, File:Vanguard.png 1250x525; public-domain text-logo tag, category "The Vanguard Group logos"): too wide to read in the 36px slot (the 2.3:1 rule in C), and there is no symbol-only file. NEEDED: Vanguard's written permission and a symbol asset legible at icon size from Vanguard itself. 3. THE ROYAL MINT - not in the registry (so no logo can attach to gold in general); the name is saved as typed. Source: The Royal Mint "Copyright and re-use of materials", royalmint.com/aboutus/policies-and-guidelines/advertising-guidelines (undated): "Use of The Royal Mint name, logo or coin as part of a brand identity is not permissible in any circumstance"; "all requests to use licensed coin images should receive written permission from The Royal Mint" (requests: press.office@royalmint.com); "we do not routinely grant permission for UK coinage designs to be used by third parties". Its terms page carries only "(c) The Royal Mint Limited"; no brand-asset page was found. Commons has no corporate logo: only coats of arms (CC BY-SA 4.0, flagged as insignia) and "Royal Mint Refinery Logo.svg", the refinery's different mark. NEEDED: written permission and the official corporate logo from The Royal Mint. When added, it must attach only to a record whose provider resolves to The Royal Mint - the registry keys on the provider NAME, never on the holding's kind - so other gold holdings keep the neutral icon. 4. BULLIONSTAR (requested 2026-10-29 as the gold provider in place of The Royal Mint) - NOT ADDED. Source: bullionstar.com/media-kit/ (read 2026-10-29). The kit offers four wordmark lockups (PNG previews 348x152 and PDFs; no symbol-only file) and says "Feel free to use the below brand assets, trademarks, logotypes and photographs in accordance with our Terms of Use". The "Terms of Use" link is a modal in the page itself ("CONTENT LICENSE AGREEMENT"), and it excludes this use: "All content downloaded from our site may be used for editorial purposes only. Any other use of our site content including, without limitation, personal or commercial use, is strictly prohibited."; "No Commercial Use: You may not use our content in the name of your business, group, event, product, service, app, domain name, social media account."; "You may use the name of BullionStar ... as necessary to give attribution, but you may not otherwise use their names, logos, or trademarks without prior written approval." The media-kit page gives no address for requests (the email is filled in by script); its footer has a contact page. Commons has no BullionStar logo. NEEDED: BullionStar's prior written approval for showing its logo in an app, and its symbol-only artwork (cropping the symbol out of the supplied lockup would alter the mark). Alternatives looked at for gold (2026-10-29), none with a documented licence and a current logo: BullionVault (Commons holds only a 2012 "BV-Logo-square-es.png", uploaded by a Commons user as own work under CC BY-SA 3.0, with no confirmation from BullionVault - not evidence), Goldmoney, The Perth Mint, Sprott, Kinesis, Tavex, A-Mark, APMEX (no official logo on Wikidata, or old self-published files, and no brand-asset terms found). Registered providers that hold gold with a logo (Bitpanda, Revolut, Trade Republic, Interactive Brokers, DEGIRO) are group A/C and no clearer. For gold, the owner then asked for TallyMoney instead (section J). 5. INVESTENGINE (requested 2026-10-29 as the platform for Daniel's global index fund in place of Vanguard) - NOT ADDED. The service is right: investengine.com/portfolios/ (read 2026-10-29) describes an investment platform where clients hold ETFs (DIY and managed portfolios; Stocks & Shares ISA, SIPP, General Investment Account) and says the ETFs come from third-party issuers - InvestEngine is the platform, not the manager of the fund. The logo is the problem: - Commons holds two InvestEngine files (File:InvestEngine_Square_Logo.png 512x512, File:InvestEngine_Company_Logo.jpg 1251x417), both CC BY-SA 4.0, authors "Simon Crookall, Andrey Dobrynin, Alex Rupin", "Items with VRTS permission confirmed", uploaded 2021-11-05 from a 2016 Twitter avatar and a 2021 Times Money Mentor image. - Both show a blue concentric-arcs mark. investengine.com today (logo.png and /favicons/icon-64.svg, fetched 2026-10-29) shows a different, violet "IE" ring mark. The licensed files are the RETIRED logo; showing it would not be the provider's authentic current brand, so it was not used. No licensed copy of the current mark was found. - No brand-asset page exists at any common path (/press, /media, /brand, /press-kit: 404). Its Website terms (investengine.com/using-website/) say "Reproduction of any part of this site is prohibited" and carry no logo or trademark clause; "InvestEngine is the trading name of InvestEngine (UK) Limited". NEEDED: InvestEngine's written permission and its current symbol artwork (or a licence that covers it). Alternatives checked: Interactive Investor (Commons "Interactive Investor logo.jpg", CC BY-SA 4.0, self-published by a Commons user, 2019, no permission record) and AJ Bell (a 2016 self-published CC BY-SA 4.0 file, 200x92) are not clearer; Hargreaves Lansdown's file is a 3.5:1 wordmark. For the fund platform, the owner then asked for Trading 212 instead (section G). The five icons shown in the demos (section G) are in the same unverified position by the owner's product decision; these three were held back because explicit terms were found. ============================================================================ I. ONE CC BY-SA 4.0 LOGO - MAPFRE (added 2026-10-29) ============================================================================ mapfre.png source: File:Logo-mapfre-fondo-rojo-2.png https://commons.wikimedia.org/wiki/File:Logo-mapfre-fondo-rojo-2.png [CC BY-SA 4.0] trademarked (not a Commons flag; see below) Requested as Sofia's pension provider in place of Santander Pensiones. Used only for the registry entry "Mapfre" (Spain, Portugal), which the demo, the picker and a signed-in Vault card share. What the file is: MAPFRE's logo - the clover symbol over the lowercase wordmark, white on its red field - in the identity the group relaunched on 8 January 2026. Commons caption "Big Mapfre logo red background"; author "Mapfre"; source line on the Commons page: MAPFRE's official press-resources logo downloads and its page about the new brand image; 1200x669 PNG; uploaded 2026-01-13 by the Commons user AlbertoSanc. Licence and permission: CC BY-SA 4.0 (https://creativecommons.org/licenses/by-sa/4.0/). The Commons page records that the Wikimedia Foundation received an email in which the copyright holder approved publication on those terms, reviewed by a Volunteer Response Team member (VRTS ticket #2026020510005353). That ticket is not public and was NOT read here; this records what the Commons page says. (The uploader calls it "own work" while the author field says Mapfre - the VRTS record is what carries the permission.) Identity: Wikidata Q544532 (MAPFRE, insurance company); Commons category "MAPFRE". Compared on 2026-10-29 with the company's own current mark - mapfre.com's favicon (mapfre.com/media/2025/12/favicon-mapfre.png) shows the same clover symbol in the same red - and checked at 36px and 84px beside the other tiles. The sibling file "Logo Mapfre 2026.svg" is a public-domain-tagged wordmark 3.6:1 wide and was not used. Service: MAPFRE Vida Pensiones EGFP is MAPFRE's pension-fund manager (the Finect gestoras listing, read 2026-10-29), and mapfre.es publishes a "previsión social empresarial" (employer schemes) brochure. An official consumer product page was NOT read (mapfre.es/planes-de-pensiones returned 404). The demo's pension, its balance and its contributions are fictional; MAPFRE is named only so the example is recognisable and is not a partner of Tygro. Credit (CC BY-SA 4.0 section 3(a)): "mapfre.png - logo of MAPFRE, author: Mapfre (as stated on Commons), licensed CC BY-SA 4.0, https://creativecommons.org/licenses/by-sa/4.0/ ; original: https://commons.wikimedia.org/wiki/File:Logo-mapfre-fondo-rojo-2.png ; changes: see below." This section is the credit; the "Logo credits" link in the footer of the home and sign-in pages leads to it. Changes made (section 3(a)(1)(B)): the original was scaled to 121px wide and centred, unaltered, on a 144x144 square filled with the file's own red (RGB 254,0,45, taken from its corner, so the square continues the logo's own background); the alpha channel was dropped. Nothing was cropped, recoloured, redrawn or compressed beyond PNG re-encoding. The symbol alone (a plain crop) would be sharper at 36px but alters the mark, so it was not done. ShareAlike: this adapted tile (public/vault/providers/mapfre.png) is itself offered under CC BY-SA 4.0. In our reading that applies to this file only, not to Tygro's code or to the other logos, which are separate works (this is a reading, not legal advice). Trademark: a copyright licence is not a trademark licence. "Mapfre" and its logo remain MAPFRE's trademarks; the mapfre.es "Aviso legal" (read 2026-10-29) has no clause about logos or trademarks (only "Mapfre (c) 2026 Todos los derechos reservados"), and no brand-asset or logo-use terms were found on mapfre.com, so NOTHING here establishes trademark use for this purpose. It is shown only to identify the provider, with the non-affiliation note, and removable as described at the top of this file. ============================================================================ J. ONE PRESS-KIT LOGO - TALLYMONEY (added 2026-10-29) - RIGHTS NOT ESTABLISHED ============================================================================ tallymoney.png source: TallyMoney press kit, "Logos / 03 Boxed Lockup / PNG / TallyMoney_Square_Flat-BlueYellow.png" (1591x1515) no licence stated trademarked Requested for Daniel's gold holding. Used only for the registry entry "TallyMoney" (United Kingdom, gold; alias "Tally Money"), shared by the demo, the picker and a signed-in card. Source and date read: tallymoney.com/press-enquiries/ (2026-10-29) says "you can access our latest press release and press imagery via the link below" and links a public Google Drive folder ("Download Press Kit"; folders: ARCHIVE releases, Cameron Parry images, Logos, Product images). The Logos folder (items dated Sep 16) holds primary, horizontal, boxed, boxed-horizontal and rectangle lockups as PDF and PNG; "03 Boxed Lockup" holds six square files (blue/white, blue/yellow, yellow; shaded and flat). The folder holds no brand guidelines or terms file at the levels listed. Rights position: NOT ESTABLISHED. The press page states no conditions for using the files and carries only "tally(R) and TallyMoney(R) are registered trademarks". A press kit is offered for press use; it is not a licence to put the logo in a product, and no permission for that was found or asked for. This does NOT meet the usage-evidence bar in section G (item 1). The file is shown only to identify the provider, by the owner's product decision (2026-10-29), is listed with the other unverified icons for prelaunch review, and is a one-file removal (see the top of this file). Identity and currency: the company's own current site (header logo SVG, tallymoney.com/wp-content/uploads/2026/09/Logo.svg, fetched 2026-10-29) shows the same yellow "tally" wordmark, and the file is the navy-and-yellow lockup of that wordmark, from the kit's September folder. The live App Store icon ("TallyMoney, powered by gold", TallyMoney Ltd, id 1335999675, updated 2026-10-27) is a different, symbol-only mark (a yellow crossbar "t" on navy) that was not used because it is not in the press kit. Compared at 36px and 84px beside the other tiles, light and dark. Service: tallymoney.com/press-enquiries/ describes tally as a unit of gold: "Every unit of tally represents 1 milligram of gold owned by the customer", allocated physical gold held in Swiss vaults. It is gold the customer owns, not a bank deposit or a fund, so the demo's holding is classed as gold (kind "gold", shown as "Gold fund or account"), separate from cash, funds and crypto, and no deposit protection or interest is implied. The £150 is a fictional amount, a weight of gold at an illustrative value; TallyMoney is named only so the example is recognisable and is not a partner of Tygro. Changes made: the flat boxed lockup was centred, unaltered, at 92% width on a 144x144 white square (its rounded corners stay visible); alpha dropped. Not cropped, recoloured or redrawn. The yellow-on-navy variant was chosen because it shares the live app icon's colours; the file is otherwise the kit's. Needed to clear this: TallyMoney's written permission (press@tallymoney.com is the press contact on the page) or published brand terms covering use in a third-party app. ============================================================================ CURATION RULE (so a future expansion cannot silently make the icons worse) ============================================================================ Every file in this folder is pinned by content in tests/provider-logo-curation.test.ts. Changing, replacing or adding a logo therefore fails that test until its hash is updated on purpose - which is the moment to (1) look at the new artwork next to the old at 36px and 84px (a before/after sheet), (2) prefer the curated App Store icons in section A over a documented-but-weaker alternative, (3) record the source and licence here, and (4) never ship a wordmark squeezed into a square. A documented asset replaces a curated icon only when it is at least as recognisable.