KYC Policy

All merchants and businesses must complete our Know Your Customer (KYC) process before accessing verification services. Our KYC program requires:

• Government-issued photo identification for all authorized representatives
• Proof of business registration and legal entity status
• Employer Identification Number (EIN) verification
• Proof of business address
• Beneficial ownership information for entities with 25%+ ownership

Our KYC verification follows a structured multi-step process:

1. Online Application — Submit business and personal information through our secure onboarding portal
2. Document Upload — Provide required identification and business documents
3. OTP Verification — Verify email address through one-time passcode
4. Document Review — Our compliance team reviews submitted documents
5. KYC Form — Complete additional verification questions if required
6. Approval — Account activation upon successful verification

The typical verification process takes 1-3 business days.

We accept the following documents for identity and business verification:

Personal Identification:

• Valid passport
• State-issued driver's license
• National ID card

Business Documentation:

• Articles of incorporation or organization
• Business license or registration certificate
• Certificate of good standing
• EIN confirmation letter (CP 575 or 147C)
• Recent utility bill or bank statement for address verification

KYC verification is not a one-time event. We conduct ongoing monitoring:

• Periodic re-verification of customer information (annually at minimum)
• Triggered reviews based on changes in transaction patterns
• Screening against updated sanctions and PEP lists
• Prompt investigation of any adverse media or negative information
• Customer obligation to report material changes in business status

All KYC documents and personal information are handled with the highest security:

• Documents are encrypted at rest using AES-256 encryption
• Transmitted over TLS 1.3 encrypted connections
• Stored in access-controlled, SOC 2 certified environments
• Access limited to authorized compliance personnel only
• Retained in accordance with regulatory requirements (minimum 5 years after account closure)
• Securely destroyed after the retention period expires