Compliance & Security

KYC & AML Compliance

HOSTKEY applies a mandatory KYC/AML verification procedure to customers registered through hostkey.com. The purpose of the verification is to establish and verify customer identity, prevent fraud and abuse, comply with applicable legal and regulatory requirements, and maintain a secure environment for our customers and infrastructure.

During the verification process, HOSTKEY may verify information provided during registration and may request additional information where necessary, including legal name, business details, address, contact information and proof of identity.

Depending on the customer, service and risk profile, additional verification measures may be required. These may include identity verification, document verification, sanctions screening and other compliance checks.

Existing customers may also be asked to confirm or update previously provided information when required for compliance or security purposes.

Customers who do not complete the required verification may be restricted from placing new orders or using certain services. In cases involving suspected abuse or violations of applicable law, HOSTKEY may suspend the relevant services in accordance with its applicable terms and procedures.

Refunds to unverified clients are not possible.

Sanctions Screening

HOSTKEY applies sanctions and compliance controls as part of its customer onboarding and ongoing compliance processes.

HOSTKEY does not provide services or allow registration from citizens or residents of jurisdictions that are subject to restrictions specified in its applicable Terms and Conditions.

Where required, customers may be screened against applicable sanctions and watchlists. Additional review may be performed where a customer, jurisdiction, business activity or service usage presents increased compliance risk.

Customer Risk Assessment

HOSTKEY may assess customers based on relevant risk factors, including:

• customer identity and jurisdiction;
• type and nature of the customer's business;
• requested services and infrastructure;
• service usage patterns;
• payment-related information;
• sanctions and compliance screening results;
• abuse reports and other relevant security signals.

Where additional information or clarification is required, HOSTKEY may conduct enhanced verification before providing or continuing services.

Fraud & Abuse Prevention

HOSTKEY maintains procedures designed to identify and prevent fraudulent activity, abuse and misuse of its infrastructure.

These measures may include automated verification, manual review, analysis of customer information, investigation of abuse notifications and cooperation with relevant service providers and competent authorities where legally required.

HOSTKEY may suspend or terminate services where there is a reasonable basis to believe that the services are being used in violation of applicable law, HOSTKEY's Terms and Conditions, or its acceptable use requirements.

Data Protection & Privacy

HOSTKEY processes customer information in accordance with applicable data protection and privacy requirements.

Personal information collected during KYC and compliance procedures is processed for legitimate business, security and legal purposes and, where applicable, to comply with legal and regulatory obligations.

Access to customer information is restricted to authorized personnel and other parties where such access is necessary for the provision of services, compliance with legal obligations, or other purposes described in HOSTKEY's Privacy Statement.

HOSTKEY applies appropriate technical and organizational measures intended to protect customer data against unauthorized access, loss, misuse, alteration and destruction.

For more information about the processing of personal data, please refer to our Privacy Statement.

GDPR & Personal Data Protection

For more information about the processing of personal data and applicable privacy rights, please refer to the HOSTKEY Privacy Statement.

HOSTKEY applies appropriate technical and organizational measures to protect customer data against unauthorized access, loss, misuse, alteration and destruction. Access to customer information is limited to authorized personnel and other parties where necessary.

Personal data collected during KYC and compliance procedures may be processed to verify customer identity, prevent fraud and abuse, provide services, and comply with legal and regulatory obligations.

HOSTKEY processes personal information in accordance with applicable data protection and privacy requirements, including the General Data Protection Regulation (GDPR) where applicable.

Cryptocurrency Payments & Compliance

HOSTKEY accepts cryptocurrency payments through BitPay, a specialized third-party payment provider. HOSTKEY does not directly process cryptocurrency transactions; cryptocurrency payments are handled through the BitPay payment infrastructure.

As described in HOSTKEY's Payment Terms and Methods, customers may make P2P cryptocurrency payments through BitPay from a wallet, application or exchange. Depending on the transaction and applicable requirements, BitPay may require identity verification (BitPay ID/KYC).

BitPay operates through entities subject to applicable regulatory requirements in the United States and the European Union. BitPay, Inc. is subject to U.S. AML, anti-terrorist financing and sanctions requirements and maintains an AML/ATF/Sanctions compliance program. For customers in the Netherlands and other specified European jurisdictions, the relevant contracting entity may be BitPay B.V., which is subject to applicable Dutch and EU requirements, including the Dutch Wwft and sanctions legislation.

Accordingly, cryptocurrency payments made to HOSTKEY may be subject to additional KYC, AML, sanctions screening and other compliance requirements imposed by the payment provider. Customers may be required to provide information or complete verification before a cryptocurrency payment can be processed.

Data Center Security & Certifications

HOSTKEY operates its infrastructure in professional data centers across multiple locations. The security certifications, standards and compliance frameworks applicable to the infrastructure may vary depending on the specific data center and its operator.

HOSTKEY provides information about the locations of its data centers and the applicable certifications and standards for each facility in the dedicated Data Centers section of our website.

View HOSTKEY Data Centers and Certifications

Certifications and standards listed for individual facilities apply to the respective data center and/or its operator and should not be interpreted as certifications issued directly to HOSTKEY B.V. unless explicitly stated otherwise.

Legal & Regulatory Requests

HOSTKEY cooperates with competent authorities and responds to valid legal requests in accordance with applicable law.

Where legally required, HOSTKEY may provide relevant customer, account, service, network or infrastructure information to competent authorities.

Requests for information are handled in accordance with applicable legal requirements and HOSTKEY's internal procedures.

HOSTKEY may also cooperate with law enforcement and other competent authorities in investigations concerning suspected illegal activity, fraud, abuse or other violations of applicable law.

Abuse & Complaints

HOSTKEY maintains procedures for handling reports concerning suspected violations of applicable law, intellectual property rights, security incidents, abuse or violations of HOSTKEY's Terms and Conditions.

Customers and other interested parties may submit a formal complaint in accordance with HOSTKEY's

Complaint Procedure.

The complaint procedure provides information on how to submit a complaint and how complaints are handled by HOSTKEY.

View HOSTKEY Complaint Procedure

Reports and complaints are reviewed by the relevant HOSTKEY team and may be escalated for further investigation where necessary.

Where appropriate and legally permitted, HOSTKEY may take measures including requesting additional information, restricting services, suspending services or terminating services.

Responsible Use of Infrastructure

Customers are responsible for ensuring that their use of HOSTKEY services complies with applicable laws, regulations and HOSTKEY's Terms and Conditions.

HOSTKEY does not permit the use of its infrastructure for unlawful activities, fraud, malicious activity, abuse, or activities that may adversely affect other customers or the security, availability or integrity of HOSTKEY's infrastructure.

Customers are expected to provide accurate and up-to-date information and to cooperate with reasonable compliance and security requests.