Compliance Center

Our Commitment to Compliance

OZAMAPAY is committed to maintaining the highest standards of regulatory compliance and ethical business practices. We operate transparently and adhere to all applicable financial regulations, data protection laws, and international best practices for fintech companies.

1. Regulatory Compliance

OZAMAPAY complies with financial regulations in all jurisdictions where we operate:

• Haiti: Compliance with Central Bank of Haiti regulations and financial services laws
• United States: Compliance with FinCEN, OFAC, and state money transmitter regulations
• International: Compliance with FATF (Financial Action Task Force) recommendations
• AML/CFT: Full Anti-Money Laundering and Countering Financing of Terrorism procedures
• Data Protection: Compliance with GDPR and international data protection standards

2. KYC/AML Programs

Our comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) programs include:

• Customer identification and verification at account opening
• Enhanced due diligence for high-risk customers
• Real-time transaction monitoring and suspicious activity detection
• Sanctions list screening (OFAC, UN, EU lists)
• Politically Exposed Person (PEP) screening
• Suspicious Activity Report (SAR) filing with authorities
• Annual compliance audits and testing

3. Data Security & Privacy

We implement industry-leading security measures to protect customer data:

• End-to-end encryption for all data transmission
• AES-256 encryption for data at rest
• Multi-factor authentication (MFA) for account access
• Regular security audits and penetration testing
• PCI DSS compliance for payment card data
• GDPR and international data protection compliance
• Strict access controls and data minimization practices
• Incident response plan and breach notification procedures

4. Transaction Monitoring

All transactions are monitored for compliance and suspicious activity:

• Real-time monitoring of all transactions
• Behavioral anomaly detection algorithms
• Threshold-based alert systems
• Pattern matching for structuring detection
• Geographic and currency risk assessment
• Automated and manual review processes
• Daily suspicious activity investigation

5. Internal Controls & Governance

We maintain robust internal controls and governance structures:

• Designated Compliance Officer responsible for program oversight
• Independent Board Audit Committee
• Written compliance policies and procedures
• Regular staff training on compliance obligations
• Segregation of duties and conflict of interest policies
• Whistleblower protection program
• Regular policy review and updates
• Documentation and record retention procedures

6. Third-Party Due Diligence

We conduct thorough due diligence on all third-party service providers and partners:

• Risk assessment of all service providers
• Background verification and financial stability checks
• Compliance certification and audit reviews
• Contractual compliance obligations
• Ongoing monitoring of third-party activities
• Service Level Agreement (SLA) enforcement

7. Documentation & Recordkeeping

We maintain comprehensive documentation of all compliance activities:

• Customer identification and verification documents (5+ years)
• Transaction records and monitoring activities (5+ years)
• Suspicious activity reports and investigations
• Compliance audit reports and remediation actions
• Staff training records and certifications
• Policy review and update documentation
• Regulatory correspondence and filings

8. Audit & Testing

OZAMAPAY undergoes regular compliance audits and testing:

• Annual internal compliance audits
• Regular independent third-party audits
• Penetration testing and security assessments
• Transaction monitoring system testing
• KYC/AML procedure effectiveness testing
• Regulatory examination readiness
• Remediation tracking and closure