The ecrop OmniOmni platform provides a secure and compliant foundation for managing your digital assets. We understand that robust security and regulatory compliance are paramount for institutional clients and professional investors. This page outlines the operational processes, controls, and reporting mechanisms implemented within OmniOmni to safeguard your assets and ensure trust.

​
A Multi-faceted Approach to User Security

OmniOmni employs a multi-faceted approach to ensure the secure identification, verification, and monitoring of all users:
  • Identification & Verification: We utilize the PostIdent procedure of Deutsche Post for automated identity verification, collecting and verifying identification data, and performing biometric verification. This integration ensures a streamlined and secure onboarding process while adhering to the highest regulatory standards. We also incorporate third-party data to validate client identities and information, adding an extra layer of verification.
  • Risk Classification: We categorize clients into different risk levels based on factors like PEP status, transaction volume, and country of origin. This risk-based approach allows us to tailor our security measures and monitoring efforts to the specific risk profile of each client.
  • Ongoing Monitoring: We continuously monitor client activity for suspicious patterns and behavioral changes using a combination of rule-based systems and sophisticated machine learning algorithms. This proactive approach helps us detect and prevent potential fraud and other malicious activities.
  • Enhanced Due Diligence (EDD): For high-risk clients, we perform enhanced due diligence measures to minimize the risk of money laundering and terrorist financing. These measures are adjusted and documented based on the assessed risk, ensuring a tailored and thorough approach to client due diligence.
Data Protection: All collected data is encrypted at rest and in transit using industry-standard encryption protocols (e.g., AES-256, TLS 1.3), stored securely, and protected from unauthorized access. Our robust data protection measures ensure the confidentiality and integrity of your sensitive information.

​
Comprehensive Compliance Controls

OmniOmni incorporates a variety of controls to ensure compliance with all KYC/AML requirements:
  • Automated Plausibility Checks: We automatically check all entered data for consistency and plausibility to ensure data quality and prevent errors. This automated process helps streamline operations and reduces the risk of manual errors.
  • Sanctions Screening: We screen client data against international sanctions lists (e.g., OFAC, EU sanctions list, DNK lists) to ensure compliance with international regulations and prevent transactions with sanctioned entities.
  • Beneficial Ownership Identification: We verify the identity of the natural persons who ultimately control or own the assets, a crucial step in preventing money laundering and terrorist financing.
  • Regular Reviews by Compliance Officers: Our trained compliance officers regularly review samples of client data and transactions to ensure the effectiveness of our automated controls and identify any potential risks early on. This manual oversight provides an additional layer of security and ensures that our compliance processes are robust and effective.

​
Regulatory Reporting and Audit Trails

OmniOmni generates comprehensive reports and maintains detailed audit trails to document compliance with KYC/AML requirements and provide necessary information to regulatory authorities:
  • Real-time Transaction Monitoring & Reporting: All transactions are monitored and analyzed in real-time using a combination of rule-based systems and machine learning algorithms. We generate comprehensive reports on all transactions, flagging any suspicious activity and providing detailed information to regulatory authorities.
  • Internal Reporting: We provide regular internal reports on KYC/AML activities and key performance indicators (KPIs) to management and the risk management team, ensuring transparency and accountability within the organization.
  • External Reporting: We report suspicious transactions to the Financial Intelligence Unit (FIU) in accordance with legal requirements, fulfilling our obligations to combat financial crime.
  • Key Performance Indicator (KPI) Reporting: Key performance indicators (KPIs) related to KYC/AML compliance are collected and reported.
OmniOmni fulfills all regulatory reporting obligations and meticulously documents these activities. We adhere to the requirements of relevant laws and regulations, including reports to BaFin and the FIU. Our comprehensive audit trails provide a complete and verifiable record of all transactions and processes, ensuring transparency and accountability.

​
Need help with Compliance?

The legal and regulatory landscape for digital assets is complex and constantly evolving. ecrop does not provide legal advice. We strongly recommend consulting with a qualified legal expert to ensure your specific implementation meets all applicable requirements. We are happy to connect you with experienced legal advisors we have worked with successfully.