Compliance framework
KYC, AML and transaction safety
A practical policy page for identity checks, source-of-funds review and suspicious-activity controls.
The bundled demo website does not collect identity documents or process financial transactions. This page explains what a licensed production operator would need to implement.
Know Your Customer
Production onboarding should verify identity, age, address and jurisdiction through a specialist KYC provider. Documents should not be emailed or stored in the WordPress media library.
Anti-Money Laundering
A compliant operator should define risk scoring, sanctions screening, politically exposed person screening, transaction monitoring, source-of-funds review and escalation procedures.
Crypto-specific controls
- Use approved merchant wallets and documented payment-gateway APIs.
- Verify webhook signatures and blockchain confirmation status server-side.
- Screen wallet risk where legally required.
- Keep clear reconciliation and audit trails.
- Never request a user's private key or seed phrase.
Data retention
Retention periods should follow applicable law and documented business requirements. Access to compliance records must be limited, logged and reviewed regularly.