KYC Framework
Overview
To ensure regulatory compliance and secure access to asset-backed functionality, Ontorium integrates a tiered KYC system powered by Sumsub.
Each level of verification unlocks different capabilities within the minting and redemption process.
KYC verification is required to access core functionalities within the Asset Layer, including minting, redemption, and physical settlement.
KYC Levels & Access
L1 (Identity Verification)
Liveness and identity verification required
Enables:
OXAU minting
On-chain redemption
L2 (Proof of Address)
Address verification required
Enables:
All L1 functionality
Physical gold redemption
L3 (Institutional KYC)
Institutional onboarding and whitelisting
Enables:
Full access to all platform services
What is required for KYC/KYB?
Individuals:
Full Legal name
Date of Birth
Country of citizenship and residence
Identity Verification (L1):
Government-issued ID (e.g. passport, driver’s license, national ID)
Address Verification (L2):
Proof of address document (e.g. utility bill, bank statement, government-issued document)
Entities:
Legal entity name
Business name (DBA or trading name if different)
Country of incorporation
Addresses:
Principal place of business
Registered office address (if different)
Mailing address (if different)
Official identification number
Jurisdiction Restrictions
Access to Ontorium services is restricted in certain jurisdictions due to regulatory and compliance requirements.
Restricted Countries
Users located in or associated with the following jurisdictions are not permitted to access minting, redemption, or asset-related services:
FATF Blacklist:
DPRK (North Korea)
Iran
Myanmar
FATF Greylist (Subject to enhanced due diligence):
Algeria, Angola, Bolivia, Bulgaria, Cameroon, Côte d'Ivoire, DR Congo, Haiti, Kenya, Lao PDR, Lebanon, Monaco, Namibia, Nepal, South Sudan, Syria, Venezuela, Vietnam, Yemen
Sanctions Compliance
Addresses and individuals listed under UN, US, EU, or UK sanctions programs are subject to:
Account restriction
Transaction blocking
Service denial
United States Restrictions
The following users are restricted:
US persons
US entities
Users accessing from US IP
This restriction applies due to applicable regulatory requirements.
Last updated
Was this helpful?

