Law & jurisdiction

What is KYC?

Also known as: know your customer
Definition

KYC is the set of identity-verification duties imposed on regulated financial institutions before providing services. These duties bind banks, exchanges and payment institutions because they handle money transmission. Hosting is not a regulated financial activity, so a compute provider has no equivalent obligation in the jurisdictions where we operate.

Why KYC matters

These duties bind banks, exchanges and payment institutions because they handle money transmission. Hosting is not a regulated financial activity, so a compute provider has no equivalent obligation in the jurisdictions where we operate. Hosts that demand a passport do so for chargeback and fraud control, not because a statute requires it — which is why crypto-settled providers, who cannot receive a chargeback, generally do not ask. The distinction matters practically: an identity document collected for fraud control is still an identity document that can be breached, sold, or produced in response to a demand years later.

KYC in practice

When you run a server, KYC means checking who your customer is before letting them in. In practice, you would look at a passport or utility bill, record the details, and re-check them periodically. If you are a financial institution, getting this wrong can mean fines or losing your licence. For a compute provider, the cost is less regulatory and more about trust: collect identity documents for fraud control, and you hold sensitive data that can be breached or demanded years later. Every piece of identity you store is a liability you must protect.

What people get wrong about KYC

People often think KYC is a universal requirement for any online service, so they assume a VPS host must ask for a passport. That is wrong. KYC is a legal duty only for regulated financial institutions like banks and exchanges. A hosting provider has no such obligation, so asking for your ID is a choice, not a requirement. If a host asks, it is for their own fraud protection, not because the law says so.

KYC — common questions

Do I need to provide ID to rent a server?

No, if you choose a no-KYC host. KYC is required for regulated financial services, not for hosting. Many providers still ask for ID for fraud control, but crypto-settled hosts like us generally do not. You just need an email address you control.

What happens to my ID after I give it to a host?

Once a host has your identity document, it becomes their liability. If their data is breached, your document could be exposed. They may also retain it and could share it in response to a legal demand. With a no-KYC host, there is nothing to store or lose.

More from law & jurisdiction

Warrant canary
A warrant canary is a regularly republished statement that a provider has not received a secret legal demand; its disappearance implies that one has arrived.
No-KYC hosting
No-KYC hosting is server hosting that requires no identity verification — no government ID, billing address, phone number or payment card.
Offshore hosting
Offshore hosting means placing a server in a jurisdiction other than your own, typically one outside the Fourteen Eyes alliances and outside EU data-retention rules.
Five Eyes
The Five Eyes is a signals-intelligence sharing alliance between the United States, United Kingdom, Canada, Australia and New Zealand.
Fourteen Eyes
The Fourteen Eyes is the widest of the signals-intelligence sharing groupings, comprising the Five Eyes plus Denmark, France, the Netherlands, Norway, Belgium, Germany, Italy, Spain and Sweden.
MLAT
An MLAT is a treaty through which one country formally requests another to gather evidence on its behalf.
DMCA
The DMCA is United States copyright statute whose notice-and-takedown procedure and safe harbour apply to service providers situated in the United States.
Data retention
Data retention laws require communications providers to store connection metadata for a defined period so that authorities can obtain it later.