Layered controls: screening → treasury governance → custody → attestation → data protection.
Compliance & Security
Compliance is a precondition, not a patch. These controls run across funds, assets and disclosure.
KYC / AML
Mandatory identity & source-of-funds screening before funding; unclear funds rejected.
Custody
Physical gold held by a Brink's-grade custodian, independent of the operator.
3/5 Multisig + Timelock
Treasury needs 3-of-5; large transfers forced through a 48-hour timelock; tech team holds no keys.
LGPD
Personal data hashed & anonymized, minimal retention, no raw storage.
Audit & Reserve Proof
On-chain audit and reserve attestation; coverage published quarterly.
Disclosure discipline
Every figure published on one basis, reconcilable line by line — no selective presentation.
Partner institutions
| Function | Provider | Status |
|---|---|---|
| KYC / AML screening | International compliance provider | Mandatory before funding; named on contract |
| Asset custody | Brink's-grade custodian | Independent of the operator; named on contract |
| Audit | Independent audit firm | Monthly reconciliation; annual external audit |
| Legal opinion | Cross-border issuance counsel | Covers the raise and each jurisdiction |
| Geological report | NI 43-101 / JORC Qualified Person | Issued and signed to international standard |
Safeguards in place
These controls are designed or already operating, spanning funds, assets and disclosure.
3/5 multisig + 48h timelock; no single point can move funds.
5.5% vests by milestone with cliff and clawback, tied to performance.
KYC/AML required to participate; limited to eligible investors.
Output, price and coverage published quarterly and traceable.
Gold delivery claims and reserves reconciled periodically by a third party.
Physical gold fully insured in transit.
Three staggered leases; Yarumo to 2037 — ample operating runway.
PII hashed, minimal retention, compliant with Brazil’s LGPD.
Lock-up and redemption executed by rule in orderly batches.