Trust & Compliance

Institutional-grade security, compliance, and operational standards

KYC/AML Screening

All participants on the platform undergo comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) screening processes.

  • Identity verification through accredited KYC providers
  • Screening for PEP (Politically Exposed Persons), sanctions, and adverse media
  • Ongoing monitoring and periodic re-screening
  • Manual review processes for flagged cases

KYC status is tracked through a state machine: not_started → in_progress → passed/failed/needs_review. All screening results are recorded in our audit trail.

Investor Eligibility

All investors must complete an eligibility review process before accessing deal information or expressing indications of interest.

  • Professional Investors: As defined by applicable EU/EEA regulations
  • Sophisticated HNW Individuals: High net worth individuals meeting sophistication criteria
  • Institutional Investors: Qualified institutional buyers

Eligibility status is tracked: not_submitted → submitted → under_review → approved/rejected. Only approved investors can view listings and submit indications of interest.

Audit Trail & Compliance

Every action on the platform is recorded in an immutable audit trail, ensuring full transparency and regulatory compliance.

  • All identity and eligibility changes are logged
  • Listing changes and state transitions are recorded
  • Indication of interest submissions and reviews are tracked
  • Transaction status transitions and milestones are logged
  • Document generation and uploads are recorded
  • Issuer consent and ROFR events are tracked

Audit events include actor identity, event type, entity information, before/after states (where relevant), IP address, user agent, and timestamps. All audit logs are exportable for compliance reporting.

Data Security & Privacy

We implement enterprise-grade security measures to protect sensitive information and ensure data privacy compliance.

  • Encryption at rest and in transit
  • Logical and physical separation of PII storage
  • Access controls and role-based permissions
  • Regular security audits and penetration testing
  • EU/EEA data residency compliance
  • Logging of all PII access and modifications

We comply with applicable data protection regulations including GDPR. Please review our Privacy Policy for detailed information.

Regulatory Compliance

Our platform is designed to comply with EU/EEA regulations for private market secondaries. We operate as a passive bulletin board with deal desk facilitation, not as a multilateral trading facility.

  • No automated matching or order book functionality
  • All transactions require manual review and approval
  • Strict eligibility gating for professional investors only
  • Comprehensive KYC/AML screening for all participants
  • Complete audit trail for regulatory reporting

Partner Integrations

We work with accredited partners to provide regulated services:

  • KYC/AML Providers: Accredited identity verification and screening services
  • Custodians/Escrow: Qualified custodians and escrow partners for asset and payment handling
  • Settlement Partners: Licensed brokerage, custody, escrow, and transfer agent partners for regulated services and settlement coordination where required

Have questions about our compliance and security practices?