Acceptable use policy

1. Who this policy applies to

It applies to clients, their authorised users, and the end users and businesses that clients serve through the platform. Clients must apply rules at least as strict to their own end users and enforce them.

2. Prohibited activity

• Fraud, deception, or misrepresentation of identity, ownership, business activity, source of funds or the purpose of transactions.
• Money laundering, terrorist or proliferation financing, or sanctions evasion.
• Activity involving sanctioned persons or comprehensively sanctioned jurisdictions.
• Proceeds of crime, darknet markets, illegal goods or services, stolen data, ransomware or extortion.
• Child sexual abuse material, human trafficking or exploitation.
• Market manipulation or wash trading.
• Using mixers, tumblers or other techniques to hide the origin of funds or evade controls.
• Providing regulated services without the permissions they require.

3. Businesses we do not serve

• Shell banks, and businesses that cannot show who owns and controls them.
• Payment, exchange or money services businesses operating without the licence or registration their market requires.
• Unlicensed gambling, and gambling offered where it is not permitted.
• Ponzi or pyramid schemes, high-yield investment programmes, and binary options.
• Offers of securities or investment products made without the authorisation or exemption the law requires.
• Sale of illegal drugs, weapons, counterfeit goods, or goods that infringe intellectual property.
• Services designed to provide anonymity for payments or to defeat screening, including anonymous accounts.

This list is not exhaustive. A business can also be declined because of its risk profile, its markets or the requirements of the partner providing the service.

4. Businesses that need prior approval

• Crypto-asset exchanges, brokers, OTC desks and other virtual asset service providers.
• Payment institutions, e-money institutions, money services businesses and remittance companies.
• Licensed gambling and gaming operators.
• Foreign exchange, contracts for difference and other leveraged trading.
• Precious metals and stones dealers.
• Charities and non-profit organisations.
• Legal adult content, and products such as cannabidiol where they are lawful.
• Crowdfunding and lending platforms.

Approval depends on the licences the business holds, the partner providing each service and the regions involved. Some partners do not accept some of these categories at all. Approval for one service does not cover another.

5. Technical misuse

• Bypassing onboarding, screening, eligibility, jurisdiction or provider controls.
• Unauthorised access, credential sharing or abuse, or vulnerability exploitation.
• Scraping or extracting data beyond your approved integration.
• Introducing malicious code or placing unreasonable load on the platform.

6. What clients must do

• Keep their own policies and controls for the activity they carry out, and apply them to their end users.
• Monitor how their products are used and act on misuse they detect.
• Answer information requests from us or the partner providing a service, accurately and on time.
• Tell us in advance about changes to their business model, products, markets, ownership or licences.

7. If this policy is breached

Depending on the breach, we or the partner providing the service may ask for information, hold or decline specific transactions, suspend a service or an end user, or end the relationship as the client agreement allows. Where the law requires, the obliged provider reports to the authorities. We explain our decision to the client unless the law prevents us.

8. Reporting misuse

Report suspected misuse to support@axorastack.com. Do not send passwords or keys.