01
Never hold your assets
The file is built from read-only exchange access and the public addresses of your wallets. CashoutReady never asks for a seed phrase, a login or an API key that can trade or withdraw.
Security
Built to read your history, not to keep it
A Source-of-Wealth file needs the most complete picture of your crypto life that exists anywhere: every exchange, every wallet, every transfer. CashoutReady is designed so that this picture stays out of reach of anyone who does not need it, inside ChainComply as much as outside it, and does not outlive your case unless you decide it should.
Nothing CashoutReady holds can move a coin.
ISO/IEC 27001 certified ChainComply's information security management is audited and certified, not self-declared. Certificate IC-IS-2509458
Four rules
What CashoutReady refuses to do
Each one holds for every case, from the Simple check to the Full SoW Claim Kit.
02
Never keep your data past the case
Ninety days after delivery, the file, the map and the data behind them are deleted. If you want them kept for the next bank, they are encrypted with a key only you hold.
03
Never know more than the case needs
No need for your passport, because your bank already has it, and with the anonymity add-on you can work under a code name. Identity documents are collected only with the KYC add-on.
04
Never store your name next to your addresses
Who you are and what you hold sit in separate stores. They are brought together only when the case needs it, with a full audit log.
Where your data lives
Two stores while the case runs, and a fixed end
No single store holds both who you are and what you hold, and the case data has a fixed end: ninety days after delivery, unless you choose to keep the file under your own key.
Identity record
- Your name and how to reach you
- Kept only for the invoice, as long as tax law requires
- Under a code name: an alias and a contact channel you choose
- Identity documents only with the KYC add-on
Case data
- Exchange histories and wallet addresses
- The reconstruction, the file and the map, under a case reference
- No name and no address attached
After delivery
- Deleted 90 days after delivery
- Or kept, encrypted with a key only you hold
- Readable again only with your key
Once the case is closed, you can ask for the case data to be deleted sooner. Invoices are kept, because accounting law requires it.
Who sees your file
You decide who reads it
The file is built to be shown, but only by you. Nothing reaches your bank or anyone else unless you send it.
The map link stays yours to switch off
The interactive map opens from a link you share with your bank. It expires with the file after 90 days, and you can switch it off sooner.
Not sold, not reused
Your data is used for your case and for nothing else. It is not sold, and it is not passed on.
You
You receive the file and the interactive map, and you decide who sees them.
The analyst on your case
An analyst at ChainComply reviews the reconstruction before the file reaches you, and works on it under the case reference.
Your bank
Your bank sees what you send it. With the Full SoW Claim Kit, it can also ask ChainComply to confirm that the file is authentic and unchanged.
Data providers
Third-party providers retrieve and augment the transaction data and screen addresses for illicit-activity indicators, so that nothing your bank finds comes as a surprise.
Anonymity
What CashoutReady knows about you
A code name protects you against one provider holding your identity, your addresses and your net worth in the same place. It is anonymity towards CashoutReady, never towards your bank: the file is built to be shown, in your name, to a bank that already knows exactly who you are.
| What CashoutReady knows | In your name | Under a code name | With the KYC add-on |
|---|---|---|---|
| Your name and contact details | Kept only for the invoice, as long as tax law requiresApart from the case data | Not known: an alias and a channel you choose | Kept for 10 yearsApart from the case data |
| Identity documents | Not collected | Not collected | ID or passport photo |
| Wallets, exchange histories and their value | Known while the case runs, under a case reference, whichever way you engage | ||
| After delivery | Deleted at 90 days, or kept under your key, whichever way you engage | ||
In your name
- Your name and contact details
- Kept only for the invoice, as long as tax law requiresApart from the case data
- Identity documents
- Not collected
Under a code name
- Your name and contact details
- Not known: an alias and a channel you choose
- Identity documents
- Not collected
With the KYC add-on
- Your name and contact details
- Kept for 10 yearsApart from the case data
- Identity documents
- ID or passport photo
- Wallets, exchange histories and their value
- Known while the case runs, under a case reference, whichever way you engage
- After delivery
- Deleted at 90 days, or kept under your key, whichever way you engage
A code name comes with DataPatrimony, and with the Full SoW Claim Kit as the anonymity add-on.
How it is built
The technical set-up
The engineering behind these rules is not published, to reduce the attack vectors against client data. Data is hosted in the EU, and CashoutReady does not publish how it is encrypted, how keys are handled or who can access what.
Details on request
Ask the case desk for the details
The case desk takes you, your tax adviser or your bank through the set-up on request.
Questions
About security
Do you ever see my seed phrase, logins or write API keys?
No. CashoutReady never asks for them and never needs them. The reconstruction runs on read-only access and public addresses, and nothing it holds can move funds.
Why is read access preferred to an export?
Because a bank cannot tell an edited export from an honest one, and banks say so: a CSV can be easily modified. Read access pulls the history from the exchange itself, and every figure in the file traces back to the record or the chain it came from. Where an exchange offers no read access, its exported history is used instead.
What happens to my data after 90 days?
The file, the map and the data behind them are deleted. If you chose to keep the file, it is encrypted with a key only you hold instead. Once the case is closed, you can also ask for deletion sooner.
What if I lose the key?
Then the kept file cannot be reopened, by you or by ChainComply. A key that nobody else holds cannot be recovered by anyone else either, so keep it somewhere safe. You will need to recreate your case.
Can my bank check that the file is genuine?
Yes, if you have the Full SoW Claim Kit: the bank can contact ChainComply to confirm that the file is authentic and unchanged. The file remains your claim, so a bank usually verifies it independently as well.
Do you share my data with anyone?
The only data that leaves ChainComply goes to the third-party providers that retrieve and augment the transaction data and screen addresses for illicit-activity indicators. Nothing goes to your bank unless you send it, and the data is never sold.
Where is my data stored?
In the EU. The rest of the hosting set-up is not published, to reduce attack vectors. Identity and case data are kept apart, and the case desk can take you through the details.
Next step
Ask how it works before you share anything
The first call is free and needs no data at all. The case desk can take you through the set-up before a single wallet address is shared.