A changing regulatory landscape
As the digital asset industry matures, regulatory frameworks covering digital assets, stablecoins, payments, custody, digital securities and derivatives are becoming more comprehensive. Requirements differ significantly between jurisdictions, and they continue to evolve. A platform serving a global user base cannot rely on a single approval or a general statement of compliance.
NPX is committed to conducting its operations within the scope of applicable laws and regulations. The company is developing a compliance management framework tailored to user location, product characteristics, fund flows and specific service models. The framework is designed to be adjusted as regulatory requirements change, rather than treated as a one-time exercise.
Customer identification and verification
Know Your Customer (KYC) is the foundation of financial integrity controls. NPX collects and verifies identity information appropriate to the risk of the account and the services requested. Verification may include government-issued identification, address information, corporate documentation for institutional clients and beneficial ownership information where applicable.
Identity information is used to prevent impersonation, support sanctions screening and meet recordkeeping obligations. Access to this information is restricted by role and governed by data protection requirements. Customers are expected to keep their information current and to respond promptly to verification requests.
Anti-money laundering and counter-terrorist financing
NPX’s AML and counter-terrorist financing (CTF) program is designed around risk assessment, monitoring and reporting. The program includes sanctions list screening, monitoring for unusual transactions, identification of suspicious activity, escalation procedures and reporting to the appropriate authorities where required by law.
Risk assessment considers the customer, the jurisdiction, the product, the channel and the pattern of activity. Higher-risk relationships receive enhanced due diligence. The program is supported by documented policies, training, independent review and record retention.
Product-level legal and compliance review
Not every digital asset product carries the same regulatory character. Spot trading, leveraged trading, digital asset contracts, derivatives, custody services, fiat-currency payments and security-like tokens may be subject to different rules in different places. NPX applies product-specific legal assessment before launch.
For activities subject to specialized regulation, NPX mandates that all necessary legal assessments and compliance reviews be completed — and all relevant licenses secured — before such services are made available. This reflects a deliberate sequence: define the legal boundary and market-entry requirements first, then decide whether and how to offer the product.
| Control area | What it covers | Trigger for additional review |
|---|---|---|
| Customer identification | Identity, address, entity and beneficial ownership verification | Incomplete or inconsistent information; higher-risk jurisdiction |
| Sanctions screening | Screening of customers, counterparties and transactions | Potential match requiring investigation |
| Transaction monitoring | Pattern detection for unusual or suspicious activity | Deviation from expected activity profile |
| Product assessment | Legal character and licensing requirements of each product | New product, new jurisdiction or regulatory change |
| Digital asset listing review | Legal, market and operational assessment before listing | New asset, changed circumstances or risk signals |
Registration is not a financial license
A critical distinction in the digital asset industry is the difference between corporate registration and financial regulatory licensing. Registering a business entity establishes its legal existence and corporate status. It does not automatically grant authorization for regulated financial activities such as digital asset trading, payments, securities, derivatives, custody or money transmission.
NPX maintains a clear distinction between corporate registration, platform operations and financial regulatory authorization. For activities subject to specific oversight, the company does not claim to hold the necessary licenses based solely on corporate registration. Instead, it conducts legal assessments and compliance reviews tailored to the regions served, the nature of the products offered and local regulatory requirements.
Governance and internal controls
Compliance depends on organizational design. NPX is developing internal access management, approval processes, recordkeeping and periodic review so that compliance decisions are documented and auditable. Roles and responsibilities are defined, and critical actions require appropriate authorization.
The company also maintains user risk disclosures and information transparency practices, so that users understand the scope of services, the conditions of use and the risks associated with specific products. Regulatory change is monitored on an ongoing basis, with product structures adjusted in response.
Truthful communication
NPX commits to providing accurate disclosures about its corporate information, technical capabilities and operational measures that are already in place and verifiable. It will not misrepresent regulatory licenses or capabilities that have not been obtained, applied for or approved, and will not describe standard business registrations as financial regulatory licenses.
This commitment applies to marketing, product documentation, customer communications and public statements. Long-term credibility should rest on verifiable legal entities, clearly defined regulatory boundaries, professional operational systems and capabilities that can be consistently validated.
Related reading
For the security controls that support these obligations, see the security model. For the distinction between entity registration and licensing in more depth, read the NPX compliance wiki or the long-term builder essay.