Privacy Policy

Effective date: August 1, 2026 Entity: Fidua B.V. (i.o.) Domain: https://fidua.eu

Fidua provides high-value pre-wire compliance verification software for luxury merchants and financial intermediaries. This policy outlines our zero-trust data processing principles under the EU General Data Protection Regulation (GDPR).

1. Zero-data retention architecture

Fidua operates under a strict Zero-Data Retention Model in compliance with GDPR Article 5(1)(c) (Data Minimization):

Ephemeral processing. Raw identity, Open Banking payloads, and screening data are processed strictly in-memory during active sessions.

Automatic purging. All raw personal identifiable information (PII) is permanently purged immediately upon session completion.

Attestation storage. Fidua never stores raw client PII. We retain only non-PII cryptographic attestation outcomes (boolean flags, timestamps, and SHA-256 Merkle root hashes).

2. Sub-processors and data hosting

To execute verification checks, Fidua coordinates read-only API processing through licensed European partners:

Open Banking. Read-only identity verification via licensed European Account Information Service Providers (AISP).

Sanctions and PEP screening. Automated verification against global UN, EU, and OFAC lists.

Data residency. All server processing occurs strictly within European Union data centers.

3. Legal basis and rights

Processing is conducted under Contractual Performance (GDPR Art. 6(1)(b)) and Legitimate Interest (GDPR Art. 6(1)(f)) for fraud prevention and AML alignment. Data subjects retain standard rights under GDPR.

4. Contact

For privacy inquiries: contact@fidua.eu

← Back to Fidua