KYC Disclosure

When KYC is triggered

KYC is required only when you request an Edict tier upgrade to access jurisdiction-restricted venues (e.g. equity perps). Tier 0 (unrestricted venues) does not require KYC. You are never forced to complete KYC; it is opt-in only.

What Sumsub collects

• Government-issued photo ID (passport, driver's license, or national ID)
• Selfie photograph for liveness verification
• Biometric data derived from the selfie (facial geometry for matching)
• Name, date of birth, nationality as extracted from the ID document

Sumsub's role

Sumsub acts as a data processor on behalf of Atrium. They process your KYC documents solely for identity verification purposes. Their privacy policy: sumsub.com/privacy-notice.

Retention

• KYC documents are retained per Sumsub's data retention policy.
• Atrium retains the verification result (pass/fail + tier level) for 5 years per AML record-keeping obligations.
• The underlying documents (ID images, selfie) are stored by Sumsub, not by Atrium directly.

If verification fails

• Your Edict tier remains at 0 (unrestricted venues only).
• Restricted venues remain unavailable.
• No penalty is applied; you may continue using tier-0 features normally.

Appeal mechanism

• Re-submit via the KYC flow with corrected documents.
• Request manual review by contacting privacy@useatrium.me.
• Human escalation available: response within 30 days.