Compliance & Regulation

Built for regulated businesses. Not a compliance shortcut.

MiddleMint's Legal Structure

Thanaaya Technologies is a software vendor, not an exchange operator. We build infrastructure. Our customers operate their own exchanges under their own jurisdictions' rules.

Vendor, Not Operator

  • Thanaaya Technologies: Software vendor, licensed in Dubai
  • Your Instance: You are the VASP/MSB in your jurisdiction
  • Compliance: You set the rules; our platform enforces them
  • KYC/AML: You perform on your end-users; we never touch customer funds

Compliance-as-Code

Instead of one-size-fits-all rules, MiddleMint uses a compliance-config.json approach:

Configurable Elements

  • KYC thresholds per transaction size or jurisdiction
  • Flagging thresholds that surface transactions for your own review
  • Sanctions screening (OFAC, etc.)
  • Geofencing and allowed counterparties
  • Transaction limits and rate limits
  • Audit log retention periods and data export

The platform flags, logs and exports. It does not prepare or file regulatory reports — deciding what a flag means and filing it with your regulator is your compliance function's work.

Your Compliance Responsibility

MiddleMint provides the tools. You determine how to use them. You remain responsible for:

Local Licensing

File for MSB/VASP status in your jurisdiction. We can advise, but you execute and maintain the license.

KYC/AML Program

Design and implement your own program. Our platform enforces your rules, it doesn't invent them.

Regulatory Reporting

File STRs, SARs, and other reports with your regulator as required by law. We export the data.

Dispute Resolution

Handle customer disputes and complaints per your local law and your contract terms with your customers.

Our Own Position

Thanaaya Technologies is a software company licensed in Dubai. We do not hold a virtual-asset services authorisation from any regulator, and we do not need one for what we do — we supply software and never take custody, onboard end-users or execute trades. We say this plainly because a vendor implying regulatory status it does not hold is a problem you would inherit.

Your position is separate from ours and is the one that matters for your platform. See the regulation index for what applies where.

Licensing Checklist

  1. Your Local Licence: You file for VASP/MSB status in your jurisdiction
  2. Customer Contract: Your contract with Thanaaya Technologies makes the vendor/operator distinction clear
  3. Compliance Config: You configure MiddleMint with your jurisdiction's rules
  4. Audit Trail: All transactions logged and auditable for regulators
  5. Insurance / Capital: Your responsibility per your jurisdiction

Not a Compliance Shortcut

MiddleMint does not exempt you from compliance. It makes compliance easier by:

  • Centralizing config management (no code changes per new rule)
  • Logging every transaction immutably, and exporting the raw data on demand
  • Surfacing configured thresholds and flags in one dashboard
  • Segregating funds (non-custodial escrow)

But you remain the entity responsible to your regulator.

Legal Contract Structure

Every customer contract with Thanaaya Technologies includes:

  • Clear statement that Thanaaya Technologies is a software vendor, not a VASP
  • Customer acknowledgment of full compliance responsibility
  • Indemnification: Customer indemnifies Thanaaya Technologies for local compliance failures
  • Non-custodial architecture confirmation
  • Audit rights (your regulator may audit us; we cooperate)