Compliance & trust

The proof under everything.

Verification, accreditation, and jurisdiction gates; an append-only audit log; secure documents; and consent-first data. Trust here isn’t a promise — it’s the mechanism.

The scrape-and-sell modelConsent-first
Layla Haddad
Partner · Meridian Gulf Capital
direct line · +971 50 ••• scraped → sold
listed without consent · resold to 3rd parties · removal: chase it (and watch it reappear)
Published with consent
opt-in only · never sold · revoke and it’s gone for good
Consent-first: opt-in only, and revoke means gone.

Gated · logged · consent-first.

01 — Consent-first data
Layla Haddad
Partner · Meridian Gulf Capital
PUBLISHEDCONSENTED
MandateSeed · Series A
Ticket$250K–$2M
Consent ledger · append-only
  • consent granted — profile published09:14:02

Nothing about a person is public unless they said yes.

Personal profiles publish only on the subject’s consent, recorded to an append-only consent ledger — and revoking it un-publishes instantly.

Published on consent

opt-in only

Append-only ledger

every grant and revoke recorded

Revoke is instant

gone for good

02 — Compliance gates

Eligibility runs before access — every time.

KYC, accreditation, and jurisdiction gates protect every regulated action. Checks run first; access follows.

KYC

identity verified

Accreditation

eligible status confirmed

Jurisdiction

permitted where it runs

DemoForge Seed — SAFEOpen — eligible investors only
Eligibility, accreditation, and jurisdiction are checked before the deal is shown.
VerificationAccreditationJurisdiction

03 — Audit & provenance

Trace any record to the event that created it.

Every action is logged to an append-only audit trail; any published profile can be traced to the exact consent that authorized it.

Audit log · append-only · click a record to trace it
PROVENANCE · what authorized this
  1. profile.published
    09:14:02 · system
  2. consent.granted (scope: public profile)
    09:14:01 · Layla Haddad
↑ traced to the consent that authorized it

Click a record → see what authorized it.

04 — Why this is different

The old model takes. This one asks.

Data brokers scrape your details, sell access, and make you chase removal — only for the profile to reappear. We start from the opposite end: opt-in only, and revoke means gone.

The scrape-and-sell modelConsent-first
Layla Haddad
Partner · Meridian Gulf Capital
direct line · +971 50 ••• scraped → sold
listed without consent · resold to 3rd parties · removal: chase it (and watch it reappear)
Published with consent
opt-in only · never sold · revoke and it’s gone for good
Consent-first: opt-in only, and revoke means gone.
05 — Secure documents

Documents that travel with their permissions.

Confidential documents are access-controlled and logged; the guard travels with the file — there’s no public back door.

SECURE DOCUMENTS
Subscription agreement.pdfaccess-controlled
Term sheet.pdflogged on open
Due-diligence pack.zipcleared parties only

Access-controlled. Logged on open.

Trust you can verify beats trust you’re asked to take.  Built on permission, enforced in code. 

Built on permission,  enforced in code.