Compliance
Compliance & Trust: The Foundation of RMOZ
RMOZ infrastructure aligns with SAMA, CMA, SDAIA, and NCA requirements in Saudi Arabia, and CBUAE and SCA requirements in the UAE. We participate in regulatory engagements and map our controls to ISO 27001 and SOC 2 evidence frameworks. All biometric data remains off-chain in private systems.
01
Sovereign Infrastructure & Data Residency
RMOZ supports sovereign, permissioned deployment in Saudi Arabia. Data is processed and stored locally to meet residency and sovereignty requirements.
01
Saudi Arabia
In-country infrastructure aligned with SAMA, PDPL, and NCA requirements, with permissioned participation and domestic data residency.
REGULATORY ALIGNMENT
Regulatory operating model
RMOZ is designed to operate under sandbox, pilot, or licensed frameworks in coordination with relevant authorities.
Saudi Central Bank
Capital Market Authority
Saudi Data and AI Authority
National Cybersecurity Authority
SCOPE
What RMOZ does not do
RMOZ does not replace existing legal ownership, registry authority, or regulatory decision-making. RMOZ tokens are not securities, not legal tender, and not deposits.
02
Strict Security & Audited Controls
Security is embedded in every layer of the RMOZ platform. Our systems, processes, and controls are designed for auditability and evidence mapping aligned to rigorous international standards.
| Certification | Description |
|---|---|
ISO/IEC 27001-aligned | Controls and evidence mapping designed to support Information Security Management System (ISMS) programs for regulated operators. |
SOC 2-aligned controls | Control design and operational evidence intended to support SOC 2-style assurance programs for institutional deployments. |
03
Privacy-Preserving Biometrics
RMOZ Pay is designed with PDPL-first data separation: no raw biometrics or PII on-chain, and biometric templates remain in your private systems.
The ledger records non-sensitive references and verification logs for audit and dispute workflows, while sensitive biometric data stays off-chain.
04
Technology for Regulated Markets
Settlement with legal finality provides immediate and irreversible confirmation, an essential requirement for regulated financial market infrastructures.
Protocol Integrity
This foundation supports settlement-grade finality, auditability, and operational control.
Partner with a Leader in Compliant Innovation
Review our regulatory alignment documentation or contact our compliance team to discuss your deployment.
Contact Our Team