Compliance Framework

AssetLink operates under the regulatory framework of Portugal and the European Union. We are actively aligned with MiCA (Markets in Digital Assets Regulation), the EU's comprehensive framework for digital asset regulation, which establishes clear rules for issuers, service providers, and market participants.

Our compliance posture is designed to meet the requirements of AMLD (Anti-Money Laundering Directives), GDPR (General Data Protection Regulation), MiFID II (Markets in Financial Instruments Directive) where applicable, and Portuguese financial regulations overseen by the CMVM and Banco de Portugal.

All users must complete identity verification before accessing investment features. Our KYC process collects government-issued identification, proof of address, and biometric verification to confirm user identity.

KYC verification is processed by Dragao, our AI-powered compliance engine, which cross-references data against international databases and applies risk scoring to each applicant. Human review is applied for elevated-risk cases.

We reserve the right to request additional documentation or restrict account functionality if verification cannot be satisfactorily completed.

AssetLink implements a comprehensive AML program including: (a) transaction monitoring for suspicious patterns and anomalies; (b) sanctions screening against OFAC, EU, and UN sanctions lists; (c) Politically Exposed Persons (PEP) screening; (d) risk-based approach to customer due diligence; (e) enhanced due diligence for high-risk jurisdictions and transactions.

Suspicious activity is flagged by our AI systems and reviewed by our compliance team. We file Suspicious Activity Reports (SARs) with the relevant authorities as required by law.

Every asset submitted for listing on AssetLink undergoes rigorous verification through InspectPro, our patent-pending AI verification engine. InspectPro analyzes ownership documentation, valuations, legal encumbrances, and asset condition.

Assets that do not meet our verification standards are rejected. InspectPro assigns a verification score and a detailed risk report that is made available to institutional partners and their clients before any investment is made.

This process is designed to protect investors from fraudulent or misrepresented assets and to maintain the integrity of the platform.

We implement multiple layers of investor protection: (a) mandatory risk disclosures for all investment products; (b) clear documentation of investment rights and obligations; (c) cooling-off periods where applicable; (d) segregation of client assets from company assets; (e) transparent fee structures with no hidden costs.

Our platform provides AI-powered risk analysis through Linka AI, but we clearly disclose that AI insights are informational only and do not constitute financial advice.

As a Portugal-based company, we are fully subject to GDPR. We have appointed a Data Protection Officer (DPO), maintain comprehensive records of processing activities, conduct Data Protection Impact Assessments (DPIAs) for high-risk processing, and implement privacy-by-design principles across our technology stack.

For full details on how we handle personal data, please refer to our Privacy Policy.

All settlement and asset structuring infrastructure deployed through Forja undergoes multiple rounds of security review, including automated vulnerability scanning, internal code review, and third-party audits before deployment to production systems.

We maintain a responsible disclosure policy for security researchers and continuously monitor deployed infrastructure for anomalous behavior.

AssetLink is not available in jurisdictions where the provision of alternative investment services is prohibited or requires licenses that we do not hold. Users are responsible for ensuring that their use of the platform complies with their local laws.

We actively block access from sanctioned jurisdictions and reserve the right to restrict service to additional jurisdictions as regulatory landscapes evolve.

Compliance is not a one-time event. We continuously monitor regulatory developments, update our policies and procedures, train our team, and enhance our technology to meet evolving standards.

We engage with regulators proactively and participate in industry working groups to contribute to the development of clear and fair regulatory frameworks for alternative investments.

We maintain transparent relationships with our regulators and provide required reporting on schedule. We publish periodic transparency reports on platform activity, compliance metrics, and security incidents.

If you have compliance-related concerns or wish to report suspicious activity on the platform, contact our compliance team at [email protected].

For compliance inquiries, contact us at [email protected] or write to: AtivoLabs, Av. da Liberdade 110, Lisbon, Portugal.