Terms of Service

These Terms of Service ("Terms") govern access to and use of KXCO's platform, website, infrastructure services, and any related documentation (collectively, the "Services"). By accessing or using the Services, you confirm that you are an authorised representative of a qualified institutional entity and that you agree to be bound by these Terms.

1. Definitions

• "KXCO" means KXCO and its affiliated group entities
• "Client" means the institutional entity that has entered into an engagement with KXCO
• "Services" means the blockchain infrastructure, tokenization platform, settlement rails, and related services provided by KXCO
• "Authorised User" means an individual employed by or acting on behalf of a Client who is authorised to access the Services
• "Confidential Information" means any non-public information disclosed by either party in connection with the Services

2. Access and Eligibility

Access to KXCO Services is subject to successful completion of KXCO's institutional onboarding process, including KYC verification, AML screening, and regulatory eligibility assessment. KXCO may suspend or terminate access at any time if a Client ceases to meet eligibility requirements or if KXCO has reasonable grounds to believe a Client has violated these Terms or applicable law.

3. Nature of Services

KXCO provides purpose-built blockchain infrastructure. Each deployment is designed, planned, and built in consultation with the Client to meet their specific operational and regulatory requirements. KXCO does not provide off-the-shelf products. The specific scope, deliverables, timeline, and commercial terms of each engagement are set out in a separate written agreement between KXCO and the Client.

4. Acceptable Use

Clients and Authorised Users must not use the Services to:

• Conduct transactions that violate applicable laws, regulations, or sanctions regimes in any jurisdiction
• Facilitate money laundering, terrorist financing, or any other financial crime
• Circumvent or attempt to circumvent the compliance controls embedded in KXCO infrastructure
• Access or attempt to access systems, data, or functionality beyond what is explicitly authorised in the applicable engagement agreement
• Reverse engineer, decompile, or attempt to extract source code or proprietary logic from KXCO infrastructure
• Misrepresent the nature, identity, or authority of the Client or any Authorised User

5. Intellectual Property

All intellectual property rights in KXCO's infrastructure, platform, software, documentation, and methodologies remain the exclusive property of KXCO. Clients are granted a limited, non-exclusive, non-transferable licence to use the Services during the term of their engagement, solely for the purposes specified in the applicable engagement agreement. No rights are granted beyond what is explicitly stated.

6. Confidentiality

Both parties agree to maintain the confidentiality of all Confidential Information received from the other party and to use it only for the purposes of the engagement. This obligation survives the termination of any engagement for a period of five years. All institutional discussions with KXCO are treated as confidential by default. A mutual NDA is available upon request prior to any substantive discussion.

7. Data and Privacy

KXCO's collection and processing of personal and institutional data in connection with the Services is governed by the KXCO Privacy Policy. By engaging KXCO Services, Clients confirm that they have authority to provide any data shared with KXCO and that such sharing is compliant with applicable data protection laws.

8. Limitation of Liability

To the maximum extent permitted by applicable law, KXCO's total liability arising from or in connection with the Services shall not exceed the fees paid by the Client in the three months preceding the event giving rise to the claim. KXCO shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, or business opportunity.

9. Regulatory Compliance

Clients are solely responsible for ensuring their use of KXCO Services complies with all laws and regulations applicable to them in their jurisdiction(s) of operation. KXCO's embedded compliance architecture supports but does not replace the Client's own compliance obligations. KXCO does not provide legal or regulatory advice.

10. Governing Law and Disputes

These Terms are governed by English law. Any dispute arising from or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales, unless otherwise agreed in a separate engagement agreement. KXCO reserves the right to seek injunctive relief in any jurisdiction.

11. Amendments

KXCO reserves the right to amend these Terms at any time. Material amendments will be communicated to active Clients with a minimum of 30 days' notice. Continued use of the Services following such notice constitutes acceptance of the amended Terms.

Compliance Framework

KXCO is built on a foundational principle: compliance is not a feature added to infrastructure — it is the infrastructure. Every component of the KXCO platform, from the consensus mechanism to the transaction API, is designed to operate within and enforce applicable regulatory frameworks. This document outlines KXCO's compliance architecture, the regulatory frameworks we address, and the standards we hold ourselves and our clients to.

1. Regulatory Frameworks

FATF Recommendations

KXCO's KYC, AML, and transaction monitoring architecture is designed in accordance with the Financial Action Task Force (FATF) Recommendations, including the FATF guidance on Virtual Asset Service Providers (VASPs). All participants on the KXCO network are subject to identity verification prior to access. Transaction monitoring is continuous. Suspicious activity reporting is supported and automated where applicable.

EU Markets in Financial Instruments Directive (MiFID II)

For clients operating within the European Economic Area or transacting in instruments that fall within MiFID II scope, KXCO's reporting and record-keeping infrastructure supports the transaction reporting, best execution documentation, and audit trail requirements of MiFID II and its implementing regulations.

EU General Data Protection Regulation (GDPR)

KXCO processes personal data in accordance with GDPR principles including lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, and integrity and confidentiality. Data subject rights are respected and enforceable. Data processing agreements are in place with all relevant third-party processors.

ISO/IEC 27001

KXCO's information security management approach is aligned with ISO/IEC 27001 standards, covering risk assessment, access control, cryptography, physical security, incident management, and business continuity.

Basel III

For banking institution clients, KXCO's infrastructure supports capital adequacy reporting requirements and provides the real-time data visibility necessary for liquidity risk management under Basel III frameworks.

Jurisdiction-Specific Frameworks

KXCO engages with clients across multiple regulatory jurisdictions. Each deployment is designed with the specific regulatory requirements of the client's operating jurisdictions in mind, including local AML laws, digital asset regulations, and financial services licensing requirements.

2. KYC and AML Architecture

Every participant on the KXCO network — whether an institution, an authorised individual, or a machine agent — is subject to identity verification before access is granted. KXCO's KYC process includes:

• Entity verification: legal existence, jurisdiction of incorporation, beneficial ownership, and authorised signatories
• Individual verification: identity document verification, liveness checks, and politically exposed person (PEP) screening
• Sanctions screening: real-time screening against OFAC, UN, EU, and HM Treasury sanctions lists
• Adverse media screening: automated screening for negative news and regulatory actions
• Ongoing monitoring: continuous transaction monitoring and periodic re-verification based on risk classification

3. Transaction Monitoring and Reporting

Every transaction on the KXCO network is recorded in an immutable, timestamped, cryptographically signed on-chain ledger. This provides a complete, tamper-proof audit trail that is available to authorised parties in real time. Monitoring systems analyse transaction patterns for indicators of money laundering, fraud, sanctions evasion, and other financial crime. Anomalous patterns trigger automated alerts and, where required, reporting to relevant authorities.

4. Data Security and Cryptographic Standards

KXCO employs enterprise-grade cryptographic standards for all data at rest and in transit. Access controls are enforced at the network, application, and data levels. The permissioned network architecture means no anonymous participant can interact with KXCO infrastructure. Smart contracts are subject to formal security audit before deployment. Incident response procedures are documented, tested, and subject to regular review.

5. Audit Rights

Clients subject to regulatory audit have access to their complete transaction history, compliance records, and reporting data in formats compatible with standard regulatory examination processes. KXCO cooperates fully with regulatory examinations and law enforcement requests made through lawful channels.

6. Compliance Responsibility

KXCO's compliance architecture supports but does not replace each client's own compliance obligations. Clients remain solely responsible for ensuring their use of KXCO infrastructure complies with all applicable laws and regulations in their jurisdictions. KXCO does not provide legal or regulatory advice. Clients should seek independent legal counsel regarding their specific regulatory obligations.

NDA Request

All discussions with KXCO are treated as confidential by default. For engagements that require the exchange of sensitive institutional, technical, or commercial information prior to a formal engagement agreement, KXCO offers a mutual Non-Disclosure Agreement (NDA).

What the KXCO NDA Covers

• Mutual confidentiality: both parties are bound equally — KXCO's proprietary infrastructure information and your institutional information are protected on the same terms
• Scope: all written, verbal, and electronic disclosures made in connection with the potential engagement
• Duration: obligations survive for five years from the date of disclosure of each piece of Confidential Information
• Permitted disclosures: limited to professional advisors and employees on a need-to-know basis, each bound by equivalent confidentiality obligations
• Exclusions: information that is publicly available, independently developed, or already known to the receiving party prior to disclosure
• Governing law: English law, unless the parties agree otherwise in writing
• Remedies: each party acknowledges that breach may cause irreparable harm for which monetary damages alone are insufficient, and that injunctive relief is an appropriate remedy

How to Request an NDA

To request a mutual NDA, please contact us via the enquiry form on our website or directly by email, indicating that you require an NDA prior to substantive discussion. Please include the full legal name of your entity and the jurisdiction of incorporation so we can prepare the appropriate document promptly.

Alternatively, if you have your institution's standard NDA that you would prefer to use as the basis for discussion, we are open to reviewing that document. Please send it to the address below along with your contact details.

Case Study and Reference Information

Full case studies for KXCO deployments across government, banking, and corporate clients are available under executed NDA. These documents include detailed technical architecture, compliance frameworks, performance data, and client outcomes. Access is available to qualified institutions upon request.