KYC, AML & Privacy FAQ

Nexora manages its Know Your Customer (KYC) and Customer Due Diligence (CDD) programme directly. Nexora determines the verification requirements that apply to its users and is responsible for its own onboarding and compliance decisions.

Today, verification is performed by Nexora’s own compliance reviewers. A member uploads their identity document and a selfie through the secure verification flow in their account; an authorised reviewer then examines the submission and decides whether it meets Nexora’s requirements. An automated assistant (see below) prepares notes for that reviewer, but never makes the decision.

In either arrangement, KYC is not outsourced entirely to a third party. Nexora manages the KYC relationship and the compliance process; a provider supplies verification infrastructure supporting that process.

Yes, as an assistant to a person — never as the decision-maker. When a reviewer opens a submission they can run an automated check, which sends the uploaded document and selfie to Anthropic’s Claude and returns notes: whether the name printed on the document matches the account, whether the selfie and the document portrait appear consistent, and anything worth a closer look — an expired document, a date that disagrees with what was typed, glare hiding a security feature, signs of editing.

Those notes are advisory. They are shown to a human reviewer, who approves or rejects the submission themselves. The automated check cannot approve an account, cannot reject one, and cannot release money. It also cannot confirm identity: a language model comparing two photographs is a prompt for human attention, not proof of who someone is.

You have the right to object to solely automated decision-making. Because a person decides every KYC outcome at Nexora, no KYC decision here is made solely by automated means.

Access within Nexora is restricted to authorised personnel who need the information for compliance, security, fraud-prevention, customer-support or legal purposes. Documents are opened through short-lived links generated for a specific review, not stored in shared folders or messaging tools.

Service providers process the information only where necessary to provide their service to Nexora, under contract and on Nexora’s instructions. Those providers are listed in the Privacy Policy.

KYC information is not generally accessible to Nexora staff. Nexora does not sell members’ KYC documents or identity information, and does not use them for advertising or marketing.

Depending on the verification level required, this may include:

• Full legal name and date of birth
• Nationality and country of residence
• Residential address
• Government-issued identification documents
• Document numbers and the information contained in those documents
• Photographs or selfies
• Contact information
• IP address and relevant device information
• Fraud and risk indicators
• Source-of-funds or additional due-diligence information where required

Only information reasonably necessary for identity verification, compliance, security and fraud prevention is collected.

Uploaded documents and selfies are stored as encrypted objects in Cloudflare R2. They are never served publicly: each view is a signed link that expires in fifteen minutes and is issued only to an authorised reviewer.

The details you type — name, date of birth, country, address, document type and number — and the record of the review decision are held in Nexora’s application database, hosted on Railway.

KYC and compliance information is retained only for as long as Nexora’s legal, regulatory, contractual, fraud-prevention and compliance obligations require. Anti-money- laundering rules in most jurisdictions require identity and transaction records to be kept for a period of years after a customer relationship ends — five years is the common international standard.

Closing a Nexora account does not automatically delete KYC records. Nexora may be required to retain identity, transaction and compliance records after the relationship has ended.

Once the applicable retention period expires and no lawful basis for keeping the information remains, it is securely deleted or otherwise disposed of.

Nexora applies technical and organisational measures intended to protect identity information:

• Encryption in transit (TLS) for every upload, view and transfer
• Encryption of stored documents at rest
• Restricted, role-based access — reviewer access only, not general staff access
• Short-lived signed links for document viewing, rather than public URLs
• Authentication and authorisation controls on every administrative action
• Security logging and monitoring of administrative activity
• Fraud-detection controls on deposits and withdrawals
• Incident-response procedures

No system is perfectly secure. These measures reduce risk; they cannot eliminate it, and Nexora does not claim otherwise.

A person at Nexora does. Automated checks return results and notes; Nexora decides whether a member satisfies its onboarding and compliance requirements.

A successful technical check does not prevent Nexora from requesting further information where additional due diligence is required, and a case may be escalated for additional human review rather than determined automatically.

Nexora does not currently perform facial recognition or liveness detection, and does not create or store biometric templates. The selfie you upload is a photograph, reviewed by a person and by the advisory automated check described above.

No. Submit identity documents only through the secure verification flow inside your Nexora account.

Never send passports, national identity cards, selfies or other sensitive documents to anyone claiming to represent Nexora over WhatsApp, Telegram, email or any other informal channel. Nexora staff will not ask you to. Anyone who does is attempting to defraud you — report it to support@wealthnexora.com.

Subject to applicable law and to Nexora’s retention obligations, you may request access to the personal information Nexora holds about you, ask for inaccurate information to be corrected, ask for information to be deleted where no lawful basis for keeping it remains, object to or restrict certain processing, and receive a copy of information you provided in a portable form.

Requests go to support@wealthnexora.com. You also have the right to complain to your local data-protection authority.

These answers are a summary written for readability. Nexora’s Privacy Policy and Terms of Service govern how information is handled and take precedence over this FAQ and over any informal explanation from an individual representative.

You should be able to find out what happens to your identity information without asking. Nexora manages its own KYC and due-diligence obligations and decides every case with a person, using verification infrastructure to support that process — not to replace it.