Accountability you can audit.

SourcePay AI operates as a payments facilitator in partnership with regulated banking and money-services partners. We adhere to U.S. FinCEN BSA/AML rules, OFAC sanctions screening, and applicable state money-transmitter requirements.

• Individual KYC — government ID, liveness check, and address verification.
• Business KYB — entity formation documents, EIN, and beneficial ownership disclosure.
• Ongoing screening against global sanctions, PEP, and adverse-media lists.
• Risk-based enhanced due diligence for higher-value or higher-risk vendors.

• SOC 2 Type II — annual attestation covering security, availability, and confidentiality.
• PCI DSS — out of scope; we never store raw card data. Payment partners are PCI Level 1.
• GDPR & UK-GDPR — Data Processing Addendum available to all enterprise customers.
• HIPAA — supported for benevolence funds via BAA on Enterprise plans.

Verified businesses receive quarterly transparency reports covering payout volumes, dispute outcomes, and any regulator-mandated disclosures. Suspicious-activity reports are filed where required by law.

For audit requests, subpoenas, or partnership compliance questions, email compliance@sourcepayai.com.