Trust CenterHow we think about regulation

Compliance

We would rather move deliberately and truthfully than ship a regulated capability we cannot yet stand behind.

Last updated · 22 July 2026

Principles

  • Truthful by policy: no invented volume, fake scarcity, guaranteed returns or misleading claims.
  • Explicit benefits: what an asset unlocks is always stated up front.
  • Licensed partners: regulated products (payments, card issuance) launch only through licensed partners where legally available.
  • Documented and disclosed: terms, risk and asset descriptions are published and versioned.

How financial-crime controls work here

OnyxOne is not itself a regulated financial institution. Where a regulated product — such as the crypto-funded card — becomes available, it will be delivered through a licensed partner carrying the relevant obligations. At the platform level we operate a risk-based set of controls aligned to applicable law and FATF standards in the markets we serve.

  • Identity verification (KYC) before access to regulated products.
  • Sanctions and PEP screening at onboarding and on an ongoing basis.
  • Geographic eligibility gating, with restricted regions blocked.
  • Transaction monitoring and velocity limits tuned to product risk.
  • Record-keeping for the statutory retention period.

Certifications & roadmap

We build to recognised security standards. SOC 2 and ISO 27001 are on our roadmap and are not yet held; we will publish attestations here once they are complete rather than claim them in advance. Our legal suite is governed by the laws of England & Wales and our data-protection posture follows the UK GDPR and Data Protection Act 2018.

Regional availability

Products and availability are subject to identity verification and geographic eligibility. Some products and regions may be restricted, and a regulated capability will only be offered in a market once it can be offered lawfully there.