Compliance
Compliance & Trust: The Foundation of RMOZ
RMOZ infrastructure aligns with SAMA, CMA, SDAIA, and NCA requirements in Saudi Arabia, and CBUAE and SCA requirements in the UAE. We participate in regulatory engagements and map our controls to ISO 27001 and SOC 2 evidence frameworks. All biometric data remains off-chain in private systems.
01
Sovereign Infrastructure & Data Residency
RMOZ supports in-country deployments with data residency and permissioned governance, designed for regulated environments.
01
In-country deployment
Independent instances per jurisdiction or enterprise, with local governance and auditable controls designed for regulated use cases.
REGULATORY ALIGNMENT
Regulatory operating model
RMOZ is designed for regulated deployment models, including sandbox, pilot, or licensed frameworks coordinated with relevant authorities.
Central banks
Capital markets authorities
Data protection
Cybersecurity
SCOPE
What RMOZ does not do
RMOZ does not replace existing legal ownership, registry authority, or regulatory decision-making.
RMOZ does not replace local regulation and operates only where permitted by law.
02
Strict Security & Audited Controls
Security is embedded in every layer of the RMOZ platform. Our systems, processes, and controls are designed for auditability and evidence mapping aligned to rigorous international standards.
| Certification | Description |
|---|---|
ISO/IEC 27001-aligned | Controls and evidence mapping designed to support Information Security Management System (ISMS) programs for regulated operators. |
SOC 2-aligned controls | Control design and operational evidence intended to support SOC 2-style assurance programs for institutional deployments. |
03
Privacy-Preserving Biometrics
RMOZ Pay is designed with PDPL-first data separation: no raw biometrics or PII on-chain, and biometric templates remain in your private systems.
The ledger records non-sensitive references and verification logs for audit and dispute workflows, while sensitive biometric data stays off-chain.
04
Technology for Regulated Markets
Settlement with legal finality provides immediate and irreversible confirmation, an essential requirement for regulated financial market infrastructures.
Absolute Guarantee
This foundation supports settlement-grade guarantees, auditability, and operational control.
Partner with a Leader in Compliant Innovation
Review our regulatory alignment documentation or contact our compliance team to discuss your deployment.
Contact Our Team