Enterprise · compliance

Data protection by jurisdiction, by design.

The sovereign architecture eases compliance. Personal data and routes live in your node — not in the ledger — so each jurisdiction applies its own rules to its own data.

The immutable ledger never contains personal data. That's a property of the architecture, not a configuration you have to remember to set.

  • Protection by jurisdiction

    Each jurisdiction applies its own rules to data held in its own node — never to a shared pool.

  • Identity verification (KYC)

    Drivers, networks, agents and merchants are verified before they ever operate.

  • Auditability for regulators

    An authority audits its own network against the ledger — cryptographically, on its own evidence.

  • Continuity & exit

    A contractual continuity plan and full data portability when you leave the network.

Data protection by jurisdiction

Personal data never reaches the ledger.

Because personal data and routes stay inside your node, each jurisdiction governs its own data directly. The immutable ledger carries no personal data — by design, not by configuration.

What stays in your node

  • Personal data and routes live in your node — under your jurisdiction's rules.
  • Each jurisdiction applies its own rules to its own data, without a shared pool to reconcile.
  • The sovereign architecture eases compliance because the data never leaves the boundary that governs it.

What the ledger never holds

  • No personal data, ever. The immutable ledger never contains it — by design.
  • Not a configuration. There's no toggle to forget; the architecture excludes it.
  • What the ledger does carry — reputation and signed payment events — is attributable, not personal.
Identity verification · KYC

Everyone is verified before they operate.

Verification is a precondition, not an afterthought. Each kind of participant is checked to the standard their role demands — and to the standard their jurisdiction requires.

  1. drivers

    Documentary, biometric, background

    Documentary, biometric and background checks per jurisdiction — completed before a driver operates.

  2. networks

    Legal-entity verification

    Legal-entity verification at onboarding — a network is a verified entity before it joins.

  3. agents & merchants

    Responsible-party verification

    Responsible-party verification before protocol access — no anonymous access to the network.

Auditability for regulators

Auditable, immutable, and demonstrably neutral.

A transport authority audits its own network against the ledger — verifying reputation and payments cryptographically. Governance decisions are recorded and immutable; routing rules are public and versioned.

Audit against the ledger

The transport authority audits its own network against the ledger — verifying reputation and payments cryptographically, on its own evidence.

Recorded & immutable

Governance decisions — onboarding, sanctions, changes — are recorded and immutable. The record of who decided what, and when, can't be rewritten.

Public, versioned rules

Routing rules are public and versioned — demonstrable neutrality. Anyone can read the rule that applied, and the version that was in force.

What a regulator can verify
Verifiable against the ledgerStays in the node (under jurisdiction)
Driver identity and verification statusTrip routes and passenger personal data
Portable reputation (append-only ledger)Fares and local operating rules
Signed payment events (hash + amount, no personal data)Local payments and card data
Governance decisions and versioned routing rulesOwn-brand app and fleet operations

Build status. The network layer — registry, ledger, roaming and protocol — is on the roadmap and shown as a target architecture, not a live service. The operation plane — node, apps, dispatch, payments and tracking — is what ships today.

Continuity & exit

A continuity plan, and a clean way out.

A contractual continuity plan keeps you running, and full data portability means leaving the network is a process, not a hostage situation.

Contractual continuity

  • A continuity plan in the contract — written down, not improvised at the worst moment.
  • Critical-infrastructure operators get the assurances critical infrastructure demands.

Full data portability on exit

  • Full data portability when you leave the network — your data comes with you.
  • Because the data already lives in your node, exit is a transfer you control — not a request you have to win.
Certifications

We declare a certification only once it's real.

Specific certifications will be declared only once obtained, or verifiably in progress. We claim none on this page — and we'd rather earn your trust by showing the architecture than by listing a badge.

What we will do is walk your legal and compliance team through the jurisdiction model, the KYC standards, the audit path, and the continuity terms — under NDA where appropriate.

  • Claimed today: nothing — no certification is asserted here.
  • When we'll claim it: only on issuance, or when verifiably in progress.
  • What stands now: data protection by jurisdiction, KYC before operating, an immutable audit trail, public versioned routing rules, and full data portability.
  • Under NDA: the full compliance detail for your team to assess.
Talk to us

Bring your compliance team. Hold us to the architecture.

Protection by jurisdiction, KYC before anyone operates, an immutable and auditable record, public versioned rules, and a clean exit — designed so your team can verify it, not just be told it.