{"data":[{"slug":"lnp2pbot","name":"@lnp2pBot","domain":"lnp2pbot.com","url":"https://lnp2pbot.com/","kyc":"none","kycLevel":1,"kycNote":"No separate registration or document verification is stated. A Telegram username is required; the bot retains trade and reputation metadata.","fee":"0.6% paid by seller, including network fees; community discounts may apply","limit":"No bot-imposed volume limit; Lightning capacity and channel liquidity constrain trades","categories":["Telegram P2P (Lightning)"],"countries":["GLOBAL"],"features":["TG escrow","LN only","Global"],"tagline":"Telegram P2P Bitcoin trading using Lightning hold-invoice escrow.","status":"ok","updatedAt":"2026-09-28","description":"Open-source Telegram P2P Bitcoin marketplace over Lightning hold invoices, with no registration or KYC stated.","cardSummary":"Telegram P2P bitcoin trades over Lightning.","networks":[],"checkedAt":"2026-06-24","lastReviewed":"2026-09-28","reviewSource":"https://lnp2pbot.com/learn/what-type-of-information-do-you-collect-from-each-user.html","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-28","trending":false,"jurisdiction":"??","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Telegram links use to an account. The bot retains trade totals, ratings and disputes; trade count and rating are public by default. Fiat payments happen directly between traders.","auditedBy":null,"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/lnp2pbot","canonical_score":37,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":25,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 3 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://lnp2pbot.com/","https://github.com/lnp2pBot/doc-site/blob/main/english/src/fees-and-commissions.md","https://github.com/lnp2pBot"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://lnp2pbot.com/","https://github.com/lnp2pBot/doc-site/blob/main/english/src/fees-and-commissions.md","https://github.com/lnp2pBot"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://lnp2pbot.com/","https://github.com/lnp2pBot/doc-site/blob/main/english/src/fees-and-commissions.md","https://github.com/lnp2pBot"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Telegram P2P (Lightning)","primary_bucket":"P2P","corporate_identity":null,"evidence_provenance":{"strongest_tier":null,"tiers":[],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":0},"total_sources":0},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":87,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 106 days old"}],"score_computed_at":"2026-10-08T04:04:39.232Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-06-24","lastReviewed":"2026-09-28","kycLastChecked":"2026-09-28"}},{"slug":"1984-hosting","name":"1984 Hosting","domain":"1984.hosting","url":"https://1984.hosting/","kyc":"light","kycLevel":1,"kycNote":"An account can involve contact, support, payment, and fraud-prevention data; no identity-document requirement was established.","fee":"VPS from EUR 8.72/mo; shared hosting EUR 32.90 first year and EUR 218/year renewal","categories":["Hosting"],"countries":["GLOBAL"],"features":["Iceland jurisdiction","XMR accepted","BTC accepted","Domains","VPS","Shared hosting","FreeDNS"],"status":"warning","updatedAt":"2026-09-05","description":"Iceland-based provider of domains, VPS and shared hosting under Icelandic data protection, taking XMR and BTC.","cardSummary":"Iceland hosting, domains, VPS and shared plans.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://1984.hosting/product/pricelist/?l=en","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"IS","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"1984 requires and records a subscriber name, active email address, username, password, active telephone number, payment details and a PIN. It may disclose information when required by law or a valid court order. Its terms say personal data is erased within 30 days after service termination.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":"Official Icelandic company registry lists 1984 ehf. as an active einkahlutafélag (private limited company) operating the hosting service, corroborated by the company's own contact, ToS and privacy pages naming 1984 ehf."},"legalEntity":{"value":"1984 ehf.","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"registrationNumber":{"value":"5003062110","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"registryUrl":{"value":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"incorporationJurisdiction":{"value":"Iceland","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"incorporationDate":{"value":"2006-02-23","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"registeredAddress":{"value":"Breiðagerði 37, 108 Reykjavík (lögheimili); Pósthólf 126, 121 Reykjavík (postal)","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"ultimateOwner":{"value":"Sigurður Þorfinnur Einarsson (42.5% direct); Mörður Áslaugarson (42.5% direct)","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"officers":{"value":["Daði Áslaugarson (stjórnarformaður / chairman)"],"citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/1984-hosting","canonical_score":48,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":7,"transparency":1,"security":17,"accountability":9},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 9 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://1984.hosting/GDPR/"],"reviewedAt":"2026-08-27","note":"subscriber contact, account, support, payment and fraud-prevention data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://1984.hosting/GDPR/"],"reviewedAt":"2026-08-27","note":"operator-hosted"},"sourceModel":{"value":"closed","sourceUrls":["https://1984.hosting/GDPR/"],"reviewedAt":"2026-08-27","note":"closed-service"}},"audit":{"scoreEligible":false,"reason":"ISO/IEC 27001:2022 certificate IS 834168 covers design, development and service management; certification is not a product security audit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"IS","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Hosting","primary_bucket":"Hosting","corporate_identity":{"entity_type":"company","entity_type_note":"Official Icelandic company registry lists 1984 ehf. as an active einkahlutafélag (private limited company) operating the hosting service, corroborated by the company's own contact, ToS and privacy pages naming 1984 ehf.","governance_model":null,"repository_url":null,"legal_entity":"1984 ehf.","registration_number":"5003062110","registry_url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","incorporation_jurisdiction":"Iceland","incorporation_date":"2006-02-23","registered_address":"Breiðagerði 37, 108 Reykjavík (lögheimili); Pósthólf 126, 121 Reykjavík (postal)","parent_entity":null,"ultimate_owner":"Sigurður Þorfinnur Einarsson (42.5% direct); Mörður Áslaugarson (42.5% direct)","prior_entities":[],"officers":[{"name":"Daði Áslaugarson (stjórnarformaður / chairman)","role":null}],"citations":{"legalEntity":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"officers":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false},"entityType":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/5003062110","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":9,"self-reported":0},"total_sources":9},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: IS"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.233Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"IS","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"addy-io","name":"addy.io","domain":"addy.io","url":"https://addy.io/","kyc":"none","kycLevel":0,"kycNote":"No document KYC found. Registration/subscription can create account, recipient, name and payment metadata; crypto subscriptions are processed by NOWPayments and support BTC, XMR, ETH and other coins.","fee":"Free / $1/mo Lite / $4/mo Pro","categories":["Email","Privacy Tools"],"countries":["GLOBAL"],"bestFor":["Email aliasing","Inbox privacy","Stop spam and tracking"],"features":["Email aliasing","No KYC","XMR payment accepted","Open source","Self-hostable","Securitum audited","Unlimited aliases (free tier)","Custom domains"],"tagline":"Unlimited email aliases. No KYC. XMR accepted. Self-hostable.","status":"ok","updatedAt":"2026-06-22","description":"Open-source email aliasing service supporting self-hosting and crypto subscriptions for yearly plans.","cardSummary":"Email aliasing, self-hostable, crypto accepted.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":"GB","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Terms are governed by England and Wales. addy.io stores service data on UpCloud servers in the Netherlands, retains Nginx/Postfix logs with IP addresses for 3 days, and can disclose when compelled by law. Open source and self-hostable if UK/legal-process risk is unacceptable.","auditedBy":["Securitum"],"corporate":{"entityType":{"value":"company","citation":"https://play.google.com/store/apps/details?id=host.stjin.anonaddy&hl=en_US","note":"Google Play and Apple App Store list seller/developer as Who Dares Gains Ltd with matching UK address and contact@help.addy.io; UK trademark ADDY.IO is held by the same company; hosted paid service under England and Wales law."},"governanceModel":{"value":"individual","citation":"https://addy.io/faq/"},"repositoryUrl":{"value":"https://github.com/anonaddy/anonaddy","citation":"https://github.com/anonaddy/anonaddy"},"legalEntity":{"value":"WHO DARES GAINS LTD","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registrationNumber":{"value":"14499841","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registryUrl":{"value":"https://find-and-update.company-information.service.gov.uk/company/14499841","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"incorporationJurisdiction":{"value":"United Kingdom (England and Wales)","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"incorporationDate":{"value":"2022-11-22","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"registeredAddress":{"value":"Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841"},"ultimateOwner":{"value":"William Harvey Browning (ownership of shares 75% or more; voting rights 75% or more)","citation":"https://find-and-update.company-information.service.gov.uk/company/14499841/persons-with-significant-control"},"officers":{"value":["William Harvey Browning (Director, appointed 2022-11-22)","Chelsea Madeleine Browning (Director, appointed 2025-12-01)","Chelsea Browning (Secretary, appointed 2023-03-24)"],"citation":"https://find-and-update.company-information.service.gov.uk/company/14499841/officers"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/addyio","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/addy-io","canonical_score":68,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":17,"control":7,"transparency":17,"security":17,"accountability":10},"applied_caps":[],"score_rationale":["privacy: 17 of 25 points.","control: 7 of 20 points.","transparency: 17 of 20 points.","security: 17 of 25 points.","accountability: 10 of 10 points."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"open"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://addy.io/security/"],"reviewedAt":"2026-08-27","note":"username, recipient email, aliases, delivery metadata, IP/session and payment metadata"},"controlModel":{"value":"hosted-account","sourceUrls":["https://addy.io/security/"],"reviewedAt":"2026-08-27","note":"hybrid-hosted-or-self-hosted"},"sourceModel":{"value":"open","sourceUrls":["https://github.com/anonaddy/anonaddy"],"reviewedAt":"2026-08-27","note":"open-source-self-hostable"}},"audit":{"scoreEligible":true,"auditor":"Securitum","completedAt":"2023-09","scope":"addy.io hosted web application","sourceUrls":["https://addy.io/security/"]}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"GB","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Email","primary_bucket":"Email","corporate_identity":{"entity_type":"company","entity_type_note":"Google Play and Apple App Store list seller/developer as Who Dares Gains Ltd with matching UK address and contact@help.addy.io; UK trademark ADDY.IO is held by the same company; hosted paid service under England and Wales law.","governance_model":"individual","repository_url":"https://github.com/anonaddy/anonaddy","legal_entity":"WHO DARES GAINS LTD","registration_number":"14499841","registry_url":"https://find-and-update.company-information.service.gov.uk/company/14499841","incorporation_jurisdiction":"United Kingdom (England and Wales)","incorporation_date":"2022-11-22","registered_address":"Belmont Suite, Paragon Business Park, Chorley New Road, Horwich, Bolton, England, BL6 6HG","parent_entity":null,"ultimate_owner":"William Harvey Browning (ownership of shares 75% or more; voting rights 75% or more)","prior_entities":[],"officers":[{"name":"William Harvey Browning (Director, appointed 2022-11-22)","role":null},{"name":"Chelsea Madeleine Browning (Director, appointed 2025-12-01)","role":null},{"name":"Chelsea Browning (Secretary, appointed 2023-03-24)","role":null}],"citations":{"legalEntity":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"registrationNumber":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"incorporationDate":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"registeredAddress":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841/persons-with-significant-control","note":null,"agent_verified":false},"officers":{"url":"https://find-and-update.company-information.service.gov.uk/company/14499841/officers","note":null,"agent_verified":false},"entityType":{"url":"https://play.google.com/store/apps/details?id=host.stjin.anonaddy&hl=en_US","note":null,"agent_verified":false},"governanceModel":{"url":"https://addy.io/faq/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"independent-audit","tiers":["independent-audit","third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":1,"third-party-reported":10,"self-reported":1},"total_sources":12},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: GB (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.233Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"GB","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"airvpn","name":"AirVPN","domain":"airvpn.org","url":"https://airvpn.org/","kyc":"none","kycLevel":0,"kycNote":"No email required. Accepts BTC and XMR. Open source client.","fee":"~€7/mo","categories":["VPN"],"countries":["GLOBAL"],"bestFor":["EU-based users","Anti-censorship","Tor over VPN"],"features":["No logs","No email required","BTC accepted","XMR accepted","OpenVPN","WireGuard","Tor over VPN","Eddie client open source"],"tagline":"Hacktivist-operated Italian VPN with a track record of resisting government pressure.","status":"ok","updatedAt":"2026-08-25","description":"Italian hacktivist-operated VPN with OpenVPN, WireGuard and an open-source client, accepting BTC and XMR.","cardSummary":"Italian VPN, no email, accepts BTC and XMR.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"IT","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Italy is EU jurisdiction - subject to Italian court orders and EU data directives. Less restrictive than Five Eyes but not Mullvad/IVPN tier. Official terms also prohibit use by residents of Italy.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://airvpn.org/tos/","note":"Terms of Service explicitly state the VPN is operated by the Italian sole proprietorship AirVPN di Paolo Brini with REA number; corroborated by Privacy Notice and Italian registry extracts."},"governanceModel":{"value":"individual","citation":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654"},"repositoryUrl":{"value":"https://github.com/AirVPN","citation":"https://github.com/AirVPN"},"legalEntity":{"value":"AIRVPN DI PAOLO BRINI (AirVPN di Paolo Brini / Air di Paolo Brini)","citation":"https://airvpn.org/tos/"},"registrationNumber":{"value":"REA PG-279011 (Partita IVA / VAT IT03297800546)","citation":"https://airvpn.org/tos/"},"registryUrl":{"value":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini","citation":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini"},"incorporationJurisdiction":{"value":"Italy (Camera di Commercio Perugia / PG)","citation":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini"},"incorporationDate":{"value":"2012-11-19","citation":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini"},"registeredAddress":{"value":"Via del Sagittario 4, 06131 Perugia (PG), Italy","citation":"https://airvpn.org/tos/"},"parentEntity":{"value":"none","citation":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654"},"ultimateOwner":{"value":"Paolo Brini","citation":"https://airvpn.org/privacy/"},"officers":{"value":[{"name":"Paolo Brini","role":"Titolare (sole proprietor)"}],"citation":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654"},"priorEntities":{"value":["Iridium -- Prior operator of the AirVPN service until transfer in November 2012"],"citation":"https://airvpn.org/aboutus/"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/AirVPN","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/airvpn","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":10},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 10 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://airvpn.org/tos/","https://airvpn.org/buy/","https://airvpn.org/privacy/","https://airvpn.org/status/","https://x.com/airvpn/status/2090804473681580168","https://airvpn.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://airvpn.org/tos/","https://airvpn.org/buy/","https://airvpn.org/privacy/","https://airvpn.org/status/","https://x.com/airvpn/status/2090804473681580168","https://airvpn.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://airvpn.org/tos/","https://airvpn.org/buy/","https://airvpn.org/privacy/","https://airvpn.org/status/","https://x.com/airvpn/status/2090804473681580168","https://airvpn.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"IT","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"VPN","primary_bucket":"VPN","corporate_identity":{"entity_type":"company","entity_type_note":"Terms of Service explicitly state the VPN is operated by the Italian sole proprietorship AirVPN di Paolo Brini with REA number; corroborated by Privacy Notice and Italian registry extracts.","governance_model":"individual","repository_url":"https://github.com/AirVPN","legal_entity":"AIRVPN DI PAOLO BRINI (AirVPN di Paolo Brini / Air di Paolo Brini)","registration_number":"REA PG-279011 (Partita IVA / VAT IT03297800546)","registry_url":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini","incorporation_jurisdiction":"Italy (Camera di Commercio Perugia / PG)","incorporation_date":"2012-11-19","registered_address":"Via del Sagittario 4, 06131 Perugia (PG), Italy","parent_entity":"none","ultimate_owner":"Paolo Brini","prior_entities":[{"name":"Iridium","detail":"Prior operator of the AirVPN service until transfer in November 2012"}],"officers":[{"name":"Paolo Brini","role":"Titolare (sole proprietor)"}],"citations":{"legalEntity":{"url":"https://airvpn.org/tos/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://airvpn.org/tos/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.ufficiocamerale.it/3460/airvpn-di-paolo-brini","note":null,"agent_verified":false},"registeredAddress":{"url":"https://airvpn.org/tos/","note":null,"agent_verified":false},"parentEntity":{"url":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://airvpn.org/privacy/","note":null,"agent_verified":false},"priorEntities":{"url":"https://airvpn.org/aboutus/","note":null,"agent_verified":false},"officers":{"url":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654","note":null,"agent_verified":false},"entityType":{"url":"https://airvpn.org/tos/","note":null,"agent_verified":false},"governanceModel":{"url":"https://lei.bloomberg.com/leis/view/815600FA7D8FFB2E9654","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":7,"self-reported":6},"total_sources":13},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: IT"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.233Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"IT","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"anonshop","name":"Anon Shop","domain":"anonshop.app","url":"https://anonshop.app/","kyc":"none","kycLevel":0,"kycNote":"The published order flow uses an eight-word passphrase, not an email account or identity-document check. Locker orders need a locker location and refund wallet address; address delivery also collects a name and shipping address.","fee":"Locker delivery: 10% with a $10 minimum. Address delivery: 15% with a $15 minimum.","limit":"Package forwarding has a $600 minimum. Other order limits are not published consistently.","categories":["Merchants"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Proxy shopping","Monero payment","Amazon locker delivery","Address delivery","Built-in order chat"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Shopping service that accepts Monero and orders from Amazon, eBay and other stores, with locker or address delivery.","cardSummary":"Monero proxy shopping for Amazon and eBay.","networks":[],"checkedAt":"2026-09-05","lastReviewed":"2026-09-05","reviewSource":"https://anonshop.app/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"??","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"The operator receives purchase details, payment references and order messages. Address delivery also shares a name and shipping address. The FAQ says Amazon returns require an Amazon account. Current retention and deletion terms are not published.","auditedBy":null,"corporate":{"entityType":{"value":"unresolved","citation":"https://anonshop.app/","note":"The site links a business-registration image, but a current legal entity and jurisdiction have not been established."},"governanceModel":{"value":"individual","citation":"https://anonshop.app/"},"repositoryUrl":{"value":"https://github.com/DecentralizeJustice/Anonshop","citation":"https://anonshop.app/"},"source":"Website, order-flow and linked source-code review, 2026-09-05","reviewedAt":"2026-09-05"},"twitter":"https://twitter.com/AnonIndustries_","telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/anonshop","canonical_score":47,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":7,"transparency":8,"security":17,"accountability":3},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 12 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 3 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-09-05","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://anonshop.app/","https://anonshop.app/faq","https://github.com/DecentralizeJustice/Anonshop/blob/main/src/components/placeAddressOrder/addressInfo.vue"],"reviewedAt":"2026-09-05","note":"Order contents, name and delivery address for address orders, refund wallet address, payment references and customer messages are handled by the operator. Current retention terms are not published."},"controlModel":{"value":"hosted-account","sourceUrls":["https://anonshop.app/login","https://github.com/DecentralizeJustice/Anonshop/blob/main/src/components/placeLockerOrder/passphrase.vue"],"reviewedAt":"2026-09-05","note":"Operator-managed shopping and order chat; an eight-word passphrase accesses the hosted order."},"sourceModel":{"value":"partial","sourceUrls":["https://github.com/DecentralizeJustice/Anonshop"],"reviewedAt":"2026-09-05","note":"The current website links public frontend and server-function code. Deployment equivalence and all hosted dependencies are not independently verified."}},"audit":{"scoreEligible":false,"reason":"No current independent audit evidence."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Merchants","primary_bucket":"Merchants","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":3},"total_sources":3},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 33 days old"}],"score_computed_at":"2026-10-08T04:04:39.233Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-09-05","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"azirevpn","name":"AzireVPN","domain":"azirevpn.com","url":"https://www.azirevpn.com/","kyc":"none","kycLevel":0,"kycNote":"No personal data required. No email, no name. Pay with Monero anonymously.","fee":"From €5/mo","categories":["VPN"],"countries":["GLOBAL"],"bestFor":["Privacy VPN","WireGuard users","Monero-paying users"],"features":["RAM-only servers","Blind Operator 2.0","No personal data required","WireGuard native","Monero accepted","No logs","Multi-hop support","Open source client"],"tagline":"RAM-only VPN. Blind Operator. Monero accepted. Sweden.","status":"ok","updatedAt":"2026-03-13","description":"Swedish RAM-only WireGuard VPN with Blind Operator mode and no personal data required at signup.","cardSummary":"Swedish RAM-only VPN with Blind Operator.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":"SE","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Sweden is a 14 Eyes intelligence-sharing country. AzireVPN uses diskless servers and says its no-logs design was independently audited, but its April 2026 audit disclosure still listed one critical, one medium, and one low finding as in progress. Malwarebytes' privacy policy applies to its websites and products and describes broader website/product data collection.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://www.azirevpn.com/about","note":"AzireVPN is operated as a commercial VPN service by Swedish limited company Netbouncer AB and is stated on its official About page to be owned by Malwarebytes following a 2024 acquisition."},"legalEntity":{"value":"Netbouncer AB","citation":"https://play.google.com/store/apps/details?id=com.azirevpn.android&hl=en_US"},"registrationNumber":{"value":"559089-4175","citation":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"registryUrl":{"value":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","citation":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"incorporationJurisdiction":{"value":"Sweden","citation":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"incorporationDate":{"value":"2016-12-07","citation":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"registeredAddress":{"value":"Mässvägen 4, 125 30 Älvsjö, Sweden","citation":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"parentEntity":{"value":"Malwarebytes","citation":"https://www.azirevpn.com/about"},"officers":{"value":["Tobias Leonard P Windh (styrelseledamot / board member)","Carl William Öling (styrelsesuppleant / deputy board member)"],"citation":"https://www.allabolag.se/befattningshavare/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/AzireVPN","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/azirevpn","canonical_score":57,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":17,"control":7,"transparency":8,"security":17,"accountability":8},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 17 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://www.azirevpn.com/privacy"],"reviewedAt":"2026-08-27","note":"account credentials and six-month internal payment reference; processor sees payment-path data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://www.azirevpn.com/privacy"],"reviewedAt":"2026-08-27","note":"operator-hosted-vpn"},"sourceModel":{"value":"partial","sourceUrls":["https://www.azirevpn.com/"],"reviewedAt":"2026-08-27","note":"partial-open-source-client"}},"audit":{"scoreEligible":false,"reason":"Current official audit announcement and report reviewed; scope is the VPN service, not merely the CLI."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"SE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"VPN","primary_bucket":"VPN","corporate_identity":{"entity_type":"company","entity_type_note":"AzireVPN is operated as a commercial VPN service by Swedish limited company Netbouncer AB and is stated on its official About page to be owned by Malwarebytes following a 2024 acquisition.","governance_model":null,"repository_url":null,"legal_entity":"Netbouncer AB","registration_number":"559089-4175","registry_url":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","incorporation_jurisdiction":"Sweden","incorporation_date":"2016-12-07","registered_address":"Mässvägen 4, 125 30 Älvsjö, Sweden","parent_entity":"Malwarebytes","ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Tobias Leonard P Windh (styrelseledamot / board member)","role":null},{"name":"Carl William Öling (styrelsesuppleant / deputy board member)","role":null}],"citations":{"legalEntity":{"url":"https://play.google.com/store/apps/details?id=com.azirevpn.android&hl=en_US","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.allabolag.se/foretag/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","note":null,"agent_verified":false},"parentEntity":{"url":"https://www.azirevpn.com/about","note":null,"agent_verified":false},"officers":{"url":"https://www.allabolag.se/befattningshavare/netbouncer-ab/%C3%A4lvsj%C3%B6/datacenters/2KGO9JZI5YDLG","note":null,"agent_verified":false},"entityType":{"url":"https://www.azirevpn.com/about","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":7,"self-reported":2},"total_sources":9},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: SE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"SE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"azteco","name":"Azteco","domain":"azte.co","url":"https://azte.co/","kyc":"light","kycLevel":1,"kycNote":"Azteco or its partners can require identity and live-face checks. Cash purchase does not guarantee anonymous redemption.","fee":"Retailer-set commission plus applicable network or processing fees","limit":"Varies by voucher and distributor","categories":["Gift Cards","Merchants"],"countries":["GLOBAL"],"bestFor":["Cash Bitcoin on-ramp","Gift Bitcoin to anyone","No-account Bitcoin purchase"],"features":["Cash purchase option","No Azteco account generally required","Identity verification may apply by country or purchase channel","Lightning or on-chain","Voucher-based","Retail locations","Bitcoin only"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","description":"Bitcoin vouchers bought with cash at retail in 190+ countries, redeemed to any Bitcoin or Lightning address.","cardSummary":"Bitcoin vouchers bought with cash in 190+ countries.","networks":["BTC","Lightning"],"checkedAt":"2026-06-24","lastReviewed":"2026-09-05","reviewSource":"https://azte.co/legal/terms","jurisdictionConfidence":"inferred","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"Azteco collects personal information for direct purchases and redemption, including IP address, browser or partner service and receiving wallet address. Direct website purchases in several Latin American countries may require an identity document and live face scan. Brazil redemption requires CPF, email and partner-exchange KYC. Retail cash purchases may expose less payment data, but policies vary by retailer and country.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://azte.co/legal/terms","note":"Official Terms of Service, Privacy Policy and Imprint state the Services are operated by Azteco Holdings USA, Inc.; UK Companies House overseas-company registration FC042098 confirms it as a Delaware private limited company with registration number 4594652."},"legalEntity":{"value":"Azteco Holdings USA, Inc.","citation":"https://find-and-update.company-information.service.gov.uk/company/FC042098"},"registrationNumber":{"value":"4594652","citation":"https://find-and-update.company-information.service.gov.uk/company/FC042098"},"registryUrl":{"value":"https://find-and-update.company-information.service.gov.uk/company/FC042098","citation":"https://find-and-update.company-information.service.gov.uk/company/FC042098"},"incorporationJurisdiction":{"value":"Delaware, United States","citation":"https://find-and-update.company-information.service.gov.uk/company/FC042098"},"registeredAddress":{"value":"1716 12th Street, Santa Monica, CA 90404, USA","citation":"https://azte.co/legal/imprint"},"officers":{"value":["Paul Ferguson (Director)","Alexander Akintokunbo Fernandez (Director)"],"citation":"https://find-and-update.company-information.service.gov.uk/company/FC042098/officers"},"priorEntities":{"value":["AZTECO LTD. (UK Companies House 11296915, dissolved 2021-01-19)","AZTECO HOLDINGS LTD. (UK Companies House 12062763, dissolved 2024-01-30)"],"citation":"https://find-and-update.company-information.service.gov.uk/officers/SiHPq9mk-cC3IxcxEm4Knup0DqM/appointments"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/Azteco_co","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":1029,"productName":"Azteco voucher","kind":"gift-card","baseCurrency":"USD","fees":{"creation":null,"load":null,"spend":null,"fx":null,"monthly":null},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":null,"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"Azteco commission","url":"https://azte.co/commission","reviewedAt":"2026-08-09"}],"note":"Commission and identity requirements vary by vendor and payment method. A fixed schedule was not recorded."}],"details_url":"https://cunicula.com/en/provider/azteco","canonical_score":33,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://azte.co/","https://azte.co/legal/terms","https://azte.co/legal/privacy","https://azte.co/faq"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://azte.co/","https://azte.co/legal/terms","https://azte.co/legal/privacy","https://azte.co/faq"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://azte.co/","https://azte.co/legal/terms","https://azte.co/legal/privacy","https://azte.co/faq"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"inferred","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Official Terms of Service, Privacy Policy and Imprint state the Services are operated by Azteco Holdings USA, Inc.; UK Companies House overseas-company registration FC042098 confirms it as a Delaware private limited company with registration number 4594652.","governance_model":null,"repository_url":null,"legal_entity":"Azteco Holdings USA, Inc.","registration_number":"4594652","registry_url":"https://find-and-update.company-information.service.gov.uk/company/FC042098","incorporation_jurisdiction":"Delaware, United States","incorporation_date":null,"registered_address":"1716 12th Street, Santa Monica, CA 90404, USA","parent_entity":null,"ultimate_owner":null,"prior_entities":[{"name":"AZTECO LTD.","detail":"UK Companies House 11296915, dissolved 2021-01-19"},{"name":"AZTECO HOLDINGS LTD.","detail":"UK Companies House 12062763, dissolved 2024-01-30"}],"officers":[{"name":"Paul Ferguson (Director)","role":null},{"name":"Alexander Akintokunbo Fernandez (Director)","role":null}],"citations":{"legalEntity":{"url":"https://find-and-update.company-information.service.gov.uk/company/FC042098","note":null,"agent_verified":false},"registrationNumber":{"url":"https://find-and-update.company-information.service.gov.uk/company/FC042098","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://find-and-update.company-information.service.gov.uk/company/FC042098","note":null,"agent_verified":false},"registeredAddress":{"url":"https://azte.co/legal/imprint","note":null,"agent_verified":false},"priorEntities":{"url":"https://find-and-update.company-information.service.gov.uk/officers/SiHPq9mk-cC3IxcxEm4Knup0DqM/appointments","note":null,"agent_verified":false},"officers":{"url":"https://find-and-update.company-information.service.gov.uk/company/FC042098/officers","note":null,"agent_verified":false},"entityType":{"url":"https://azte.co/legal/terms","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":6,"self-reported":2},"total_sources":8},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; inferred jurisdiction: US"}],"evidence_confidence":59,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 106 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"inferred","evidenceStatus":"partial","checkedAt":"2026-06-24","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"bando","name":"Bando","domain":"bando.cool","url":"https://bando.cool/","kyc":"full","kycLevel":4,"kycNote":"Official terms require Know Your Customer and Know Your Business policies for platform use and related financial services.","fee":"Product-specific; disclosed during onboarding or in the applicable service terms.","categories":["Treasury","Stablecoin Payments"],"countries":["MX"],"features":["Mexican CETES","Digital-dollar treasury","MXN conversion","KYB/KYC onboarding","China payouts (coming soon)"],"status":"ok","updatedAt":"2026-08-25","description":"Business treasury platform for Mexican CETES and digital dollars, with MXN conversion and required KYB/KYC onboarding; China payouts are marked coming soon.","cardSummary":"Business treasury for CETES and digital dollars.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://bando.cool/","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"MX","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"No longer fits a no-KYC spend/top-up listing. Financial services are compliance-managed by Etherfuse entities; Bando operates as technology provider ETERNAL TECH HIRO S.A. DE C.V.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://bando.cool/privacy","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"ETERNAL TECH HIRO S.A. DE C.V.","citation":"https://bando.cool/privacy"},"incorporationJurisdiction":{"value":"Mexico","citation":"https://bando.cool/privacy"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/bandocool","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/bando","canonical_score":25,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":0,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 0 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://bando.cool/","https://bando.cool/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://bando.cool/","https://bando.cool/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://bando.cool/","https://bando.cool/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":4,"identity_requirement":"full","hosted_operator_data":null,"jurisdiction":"MX","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Treasury","primary_bucket":"Privacy Tools","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"ETERNAL TECH HIRO S.A. DE C.V.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Mexico","incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://bando.cool/privacy","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://bando.cool/privacy","note":null,"agent_verified":false},"entityType":{"url":"https://bando.cool/privacy","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":3},"total_sources":3},"privacy_score":20,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-80,"detail":"Full identity verification recorded (level 4 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: MX"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":4,"noOperatorData":false,"jurisdiction":"MX","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"basicswap","name":"BasicSwap","domain":"basicswapdex.com","url":"https://basicswapdex.com","kyc":"none","kycLevel":0,"kycNote":"No account. No email. Atomic swaps are protocol-level - no service provider can be coerced.","fee":"no fees (atomic swap)","categories":["P2P"],"countries":["GLOBAL"],"bestFor":["Trustless BTC/XMR swaps","No-counterparty-risk trading","Self-custodial swaps"],"features":["Atomic swaps (trustless)","BTC/XMR native support","No account, no custodian","Decentralized order book (SMSG)","Open source","No central operator"],"tagline":"Trustless atomic swap DEX. BTC ↔ XMR with no accounts, no custodian, no KYC.","status":"ok","updatedAt":"2026-08-25","description":"Open-source cross-chain atomic-swap protocol using a distributed order book, with no central operator or user account.","cardSummary":"Trustless cross-chain atomic swap DEX.","networks":["BTC","XMR","LTC","FIRO","PART"],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://basicswapdex.com/terms.html","jurisdictionConfidence":"unknown","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"??","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"BasicSwap has no central operator or legal entity identified by its current terms, so Swiss/Five-Eyes jurisdiction claims are unsupported. It remains low-liquidity software without a published independent BasicSwap code audit. July and August 2026 swap-security issues were fixed in mandatory releases; update before trading.","auditedBy":[],"corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://basicswapdex.com/terms.html","note":"Current official terms describe open-source software and a system with no operator."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"official terms recheck 2026-08-25","reviewedAt":"2026-08-25"},"twitter":null,"incidents":[{"title":"Adaptor-signature counterparty fund-trapping issue","status":"resolved","severity":"critical","startedAt":"2026-08-01","resolvedAt":"2026-08-01","summary":"BasicSwap described a critical adaptor-signature issue that could let a counterparty trap, but not steal, swap funds. Version 0.17.7 fixed it; the project then published mandatory Bitcoin Cash/Litecoin follow-up releases 0.17.8 and 0.17.9 on 3 August.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"complete","sources":[{"label":"BasicSwap v0.17.7 mandatory release","href":"https://x.com/BasicSwapDEX/status/2083562003356930454"},{"label":"BasicSwap v0.17.8/v0.17.9 follow-up","href":"https://x.com/BasicSwapDEX/status/2084076112179609945"}]},{"title":"July 2026 swap-security issue","status":"resolved","severity":"high","startedAt":"2026-07-14","resolvedAt":"2026-07-14","summary":"BasicSwap told users to withdraw offers and stop new swaps while a swap-security issue was fixed. Version 0.17.2 was published the same day as the mandatory fix.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"complete","sources":[{"label":"BasicSwap initial security notice","href":"https://x.com/BasicSwapDEX/status/2076894892786143518"},{"label":"BasicSwap v0.17.2 fix","href":"https://x.com/BasicSwapDEX/status/2077030033273561112"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/basicswap","canonical_score":32,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":14,"accountability":6},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 14 of 25 points.","accountability: 6 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://basicswapdex.com/terms.html","https://x.com/BasicSwapDEX/status/2076894892786143518","https://x.com/BasicSwapDEX/status/2077030033273561112","https://x.com/BasicSwapDEX/status/2083562003356930454","https://x.com/BasicSwapDEX/status/2084076112179609945","https://basicswapdex.com"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://basicswapdex.com/terms.html","https://x.com/BasicSwapDEX/status/2076894892786143518","https://x.com/BasicSwapDEX/status/2077030033273561112","https://x.com/BasicSwapDEX/status/2083562003356930454","https://x.com/BasicSwapDEX/status/2084076112179609945","https://basicswapdex.com"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://basicswapdex.com/terms.html","https://x.com/BasicSwapDEX/status/2076894892786143518","https://x.com/BasicSwapDEX/status/2077030033273561112","https://x.com/BasicSwapDEX/status/2083562003356930454","https://x.com/BasicSwapDEX/status/2084076112179609945","https://basicswapdex.com"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"P2P","primary_bucket":"P2P","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Current official terms describe open-source software and a system with no operator.","governance_model":null,"repository_url":null,"legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://basicswapdex.com/terms.html","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"official terms recheck 2026-08-25","reviewed_at":"2026-08-25"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":4,"self-reported":1},"total_sources":5},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"bisq","name":"Bisq","domain":"bisq.network","url":"https://bisq.network/","kyc":"none","kycLevel":0,"kycNote":"No account, email or identity KYC in the Bisq protocol; individual fiat payment methods can expose data to counterparties/banks.","fee":"BTC fee: 0.15% maker and 1.15% taker; BSQ target: 0.075% maker and 0.575% taker; minimum fees apply","limit":"Varies by payment method, account signing and asset","categories":["P2P / Desktop"],"countries":["GLOBAL"],"bestFor":["Maximum decentralization","BTC/fiat P2P","Privacy-maximalist"],"features":["Tor","Non-custodial","Bank/Cash/SEPA"],"tagline":"The original decentralized P2P Bitcoin exchange. No company, no server, no KYC.","status":"warning","updatedAt":"2026-09-05","description":"Decentralized open-source desktop P2P Bitcoin exchange over Tor, with no registration stated as required.","cardSummary":"Desktop P2P bitcoin exchange over Tor.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://bisq.wiki/Trading_fees","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"??","evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"Bisq does not perform KYC, but payment-method, account-signing and asset-specific trade limits apply. A May 2026 Bisq 1 altcoin exploit affected 10 users and 11.59104 BTC; Bisq reported all victims reimbursed on June 5. The June update said XMR auto-confirmation remained disabled pending audit work. Use Bisq 1 v1.10.7 or later and Bisq 2 v2.1.12 or later. Fiat payment details are still shared with counterparties, and Bisq should not be treated as a savings wallet.","auditedBy":null,"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/bisq_network","telegram":"https://t.me/bisq_p2p","publicClaims":{"followTheMoney":{"value":"Bisq DAO\n────────────────────────\nOwners: traders and contributors\nLeadership: no CEO or central team\nRevenue: trading fees\ndistributed through BSQ","reviewedAt":"2026-07-15","sources":[{"label":"Bisq - The DAO","href":"https://bisq.network/dao/","type":"official"}]}},"followTheMoney":"Bisq DAO\n────────────────────────\nOwners: traders and contributors\nLeadership: no CEO or central team\nRevenue: trading fees\ndistributed through BSQ","incidents":[{"title":"Security Incident Post-Mortem","status":"active","severity":"high","startedAt":"2026-05-01","summary":"Require current patched releases, preserve the May 1, 2026 incident, and reassess after a complete audit report and remediation record are published.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unknown","sources":[{"label":"Security Incident Post-Mortem","href":"https://bisq.network/blog/security-incident-post-mortem/"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/bisq","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":21,"control":18,"transparency":12,"security":0,"accountability":2},"applied_caps":[{"key":"active-high-incident","maximum":39,"reason":"An unresolved high-severity incident limits the score to 39."}],"score_rationale":["privacy: 21 of 25 points.","control: 18 of 20 points.","transparency: 12 of 20 points.","security: 0 of 25 points.","accountability: 2 of 10 points.","An unresolved high-severity incident limits the score to 39."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"limited","controlModel":"decentralized","sourceModel":"open"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"limited","sourceUrls":["https://bisq.network/"],"reviewedAt":"2026-08-27","note":"local client data plus counterparty/payment-rail exposure; no central operator account database"},"controlModel":{"value":"decentralized","sourceUrls":["https://bisq.network/"],"reviewedAt":"2026-08-27","note":"decentralized-dao-client"},"sourceModel":{"value":"open","sourceUrls":["https://github.com/bisq-network/bisq/releases/tag/v1.10.7"],"reviewedAt":"2026-08-27","note":"open-source"}},"audit":{"scoreEligible":false,"reason":"Bisq 2 v2.1.12 says vulnerabilities were identified during a recent security audit, but no complete audit citation/scope report was found."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"P2P / Desktop","primary_bucket":"P2P","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":2},"total_sources":2},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"bitbox02","name":"BitBox02","domain":"bitbox.swiss","url":"https://bitbox.swiss/","kyc":"none","kycLevel":2,"kycNote":"No document identity check is required to buy a device. The payment policy lists two processors: BTCPay for on-chain Bitcoin and Lightning, and Stripe for cards, bank transfers, PayPal, Apple Pay, and Google Pay. Available methods vary by country, so the checkout page decides which rails apply.","fee":"One-time hardware purchase","categories":["Wallet"],"countries":["GLOBAL"],"bestFor":["Cold storage","Bitcoin-only self-custody","Paying for hardware in Bitcoin"],"features":["Bitcoin-only edition","Multi-coin edition","Open source firmware","Swiss operator","On-chain Bitcoin checkout","Lightning checkout","microSD backup","BitBoxApp companion"],"tagline":"Swiss hardware signer with Bitcoin-only firmware and Lightning checkout.","status":"ok","updatedAt":"2026-08-07","description":"Swiss hardware wallet from Shift Crypto. The shop takes on-chain Bitcoin and Lightning through BTCPay, plus cards via Stripe.","cardSummary":"Swiss hardware signer taking BTC and Lightning.","networks":["BTC","LN"],"checkedAt":"2026-08-07","lastReviewed":"2026-08-07","reviewSource":"official_bitbox_payment_shipping_policy_intake_2026-08-07","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-07","trending":false,"jurisdiction":"CH","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"BitBox02 is a physical product. Shift Crypto AG holds order and shipping data even when payment settles in Bitcoin or over Lightning. Orders ship from Swiss and German warehouses, and duties and taxes are prepaid on some routes, which adds a customs record.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://bitbox.swiss/imprint/","note":"Official imprint, terms of service, and privacy policy state that BitBox is created and the website operated by Shift Crypto AG, a Swiss Aktiengesellschaft selling hardware wallets."},"governanceModel":{"value":"company-sponsored","citation":"https://bitbox.swiss/dev/"},"repositoryUrl":{"value":"https://github.com/BitBoxSwiss","citation":"https://github.com/BitBoxSwiss"},"legalEntity":{"value":"Shift Crypto AG","citation":"https://bitbox.swiss/imprint/"},"registrationNumber":{"value":"CHE-498.818.196 (commercial register CH-020.3.048.536-0; imprint also lists CH-498.818.196)","citation":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-498.818.196"},"registryUrl":{"value":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-498.818.196","citation":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-498.818.196"},"incorporationJurisdiction":{"value":"Switzerland (Canton of Zurich)","citation":"https://bitbox.swiss/imprint/"},"incorporationDate":{"value":"2020-04-01","citation":"https://www.moneyhouse.ch/en/company/shift-crypto-ag-2790108461"},"registeredAddress":{"value":"Soodmattenstrasse 4, 8134 Adliswil, Switzerland","citation":"https://bitbox.swiss/imprint/"},"officers":{"value":["Douglas Bakkum (Member of the Board, CEO)"],"citation":"https://bitbox.swiss/imprint/"},"priorEntities":{"value":["Shift Cryptosecurity AG in Liquidation (formerly Shift Devices AG), UID CHE-149.201.586, commercial register CH-280.3.019.469-1; trademarks/domains/assets transferred into Shift Crypto AG on foundation"],"citation":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-149.201.586"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/BitBoxSwiss","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/bitbox02","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://bitbox.swiss/","https://bitbox.swiss/policies/payment-policy/","https://bitbox.swiss/policies/privacy-policy","https://bitbox.swiss/policies/privacy-policy/","https://bitbox.swiss/imprint","https://bitbox.swiss/imprint/","https://github.com/BitBoxSwiss/bitbox02-firmware/releases"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://bitbox.swiss/","https://bitbox.swiss/policies/payment-policy/","https://bitbox.swiss/policies/privacy-policy","https://bitbox.swiss/policies/privacy-policy/","https://bitbox.swiss/imprint","https://bitbox.swiss/imprint/","https://github.com/BitBoxSwiss/bitbox02-firmware/releases"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://bitbox.swiss/","https://bitbox.swiss/policies/payment-policy/","https://bitbox.swiss/policies/privacy-policy","https://bitbox.swiss/policies/privacy-policy/","https://bitbox.swiss/imprint","https://bitbox.swiss/imprint/","https://github.com/BitBoxSwiss/bitbox02-firmware/releases"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"CH","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Wallet","primary_bucket":"Wallet","corporate_identity":{"entity_type":"company","entity_type_note":"Official imprint, terms of service, and privacy policy state that BitBox is created and the website operated by Shift Crypto AG, a Swiss Aktiengesellschaft selling hardware wallets.","governance_model":"company-sponsored","repository_url":"https://github.com/BitBoxSwiss","legal_entity":"Shift Crypto AG","registration_number":"CHE-498.818.196 (commercial register CH-020.3.048.536-0; imprint also lists CH-498.818.196)","registry_url":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-498.818.196","incorporation_jurisdiction":"Switzerland (Canton of Zurich)","incorporation_date":"2020-04-01","registered_address":"Soodmattenstrasse 4, 8134 Adliswil, Switzerland","parent_entity":null,"ultimate_owner":null,"prior_entities":[{"name":"Shift Cryptosecurity AG in Liquidation (formerly Shift Devices AG), UID CHE-149.201.586, commercial register CH-280.3.019.469-1; trademarks/domains/assets transferred into Shift Crypto AG on foundation","detail":null}],"officers":[{"name":"Douglas Bakkum (Member of the Board, CEO)","role":null}],"citations":{"legalEntity":{"url":"https://bitbox.swiss/imprint/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-498.818.196","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://bitbox.swiss/imprint/","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.moneyhouse.ch/en/company/shift-crypto-ag-2790108461","note":null,"agent_verified":false},"registeredAddress":{"url":"https://bitbox.swiss/imprint/","note":null,"agent_verified":false},"priorEntities":{"url":"https://www.uid.admin.ch/Detail.aspx?uid_id=CHE-149.201.586","note":null,"agent_verified":false},"officers":{"url":"https://bitbox.swiss/imprint/","note":null,"agent_verified":false},"entityType":{"url":"https://bitbox.swiss/imprint/","note":null,"agent_verified":false},"governanceModel":{"url":"https://bitbox.swiss/dev/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":5,"self-reported":7},"total_sources":12},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: CH"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 62 days old"}],"score_computed_at":"2026-10-08T04:04:39.234Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"CH","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-07","lastReviewed":"2026-08-07","kycLastChecked":"2026-08-07"}},{"slug":"bitchat","name":"Bitchat","domain":"bitchat.free","url":"https://bitchat.free","kyc":"none","kycLevel":0,"kycNote":"No account or identity KYC surface found on the official site; distribution through app stores/GitHub can still expose platform metadata.","fee":"Free","categories":["Messaging","Offline","Bitcoin"],"countries":["GLOBAL"],"bestFor":["Nearby offline messaging","Phone-number-free messaging","Open-source mesh testing"],"features":["Open source","Bluetooth mesh","Nostr transport","No account","No phone number","Private messages","Emergency wipe","Wear OS","Live push-to-talk","Persistent local conversations","Cashu token preview/redemption"],"tagline":"Account-free Bluetooth and Nostr messaging.","status":"ok","updatedAt":"2026-08-25","description":"Peer-to-peer messaging over Bluetooth mesh and Nostr relays, with device-held identity keys, no account, and optional persistent local history.","cardSummary":"Bluetooth mesh messaging with Nostr relays.","networks":["Bluetooth Mesh","Nostr"],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"unknown","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"??","noOperatorData":true,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"The published web privacy policy says delivered messages are not retained and data is not sent to remote servers, but current clients use Nostr relays and Android 2.0.1 persists private conversation history locally. Bluetooth exposes proximity/relay patterns, Nostr relays can observe connection metadata, and a persistent device identifier is derived from the identity key.","corporate":{"entityType":{"value":"company","citation":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622","note":"The iOS app is published and sold by 'permissionless tech, llc' as listed on the Apple App Store developer/seller field; a matching Delaware LLC exists and the open-source project is hosted under the permissionlesstech GitHub org."},"governanceModel":{"value":"company-sponsored","citation":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622"},"repositoryUrl":{"value":"https://github.com/permissionlesstech/bitchat","citation":"https://github.com/permissionlesstech/bitchat"},"legalEntity":{"value":"Permissionless Tech LLC","citation":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622"},"registrationNumber":{"value":"10337715","citation":"https://www.bizapedia.com/de/permissionless-tech-llc.html"},"registryUrl":{"value":"https://icis.corp.delaware.gov/ecorp/entitysearch/namesearch.aspx","citation":"https://www.bizapedia.com/de/permissionless-tech-llc.html"},"incorporationJurisdiction":{"value":"Delaware, United States","citation":"https://www.bizapedia.com/de/permissionless-tech-llc.html"},"incorporationDate":{"value":"2025-09-22","citation":"https://www.bizapedia.com/de/permissionless-tech-llc.html"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/BitchatMe_","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/bitchat","canonical_score":35,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":6},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://bitchat.free/privacy","https://github.com/permissionlesstech/bitchat/releases/tag/v1.7.1","https://github.com/permissionlesstech/bitchat-android/releases/tag/v2.0.1","https://x.com/BitchatMe_/status/2088540574949237214","https://bitchat.free"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://bitchat.free/privacy","https://github.com/permissionlesstech/bitchat/releases/tag/v1.7.1","https://github.com/permissionlesstech/bitchat-android/releases/tag/v2.0.1","https://x.com/BitchatMe_/status/2088540574949237214","https://bitchat.free"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://bitchat.free/privacy","https://github.com/permissionlesstech/bitchat/releases/tag/v1.7.1","https://github.com/permissionlesstech/bitchat-android/releases/tag/v2.0.1","https://x.com/BitchatMe_/status/2088540574949237214","https://bitchat.free"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":false,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Messaging","primary_bucket":"Comms","corporate_identity":{"entity_type":"company","entity_type_note":"The iOS app is published and sold by 'permissionless tech, llc' as listed on the Apple App Store developer/seller field; a matching Delaware LLC exists and the open-source project is hosted under the permissionlesstech GitHub org.","governance_model":"company-sponsored","repository_url":"https://github.com/permissionlesstech/bitchat","legal_entity":"Permissionless Tech LLC","registration_number":"10337715","registry_url":"https://icis.corp.delaware.gov/ecorp/entitysearch/namesearch.aspx","incorporation_jurisdiction":"Delaware, United States","incorporation_date":"2025-09-22","registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.bizapedia.com/de/permissionless-tech-llc.html","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.bizapedia.com/de/permissionless-tech-llc.html","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.bizapedia.com/de/permissionless-tech-llc.html","note":null,"agent_verified":false},"entityType":{"url":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622","note":null,"agent_verified":false},"governanceModel":{"url":"https://apps.apple.com/us/app/bitchat-mesh/id6748219622","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":8,"self-reported":0},"total_sources":8},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Local software or protocol with no hosted operator data"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":0,"noOperatorData":true,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"bitcoin-depot","name":"Bitcoin Depot","domain":"bitcoindepot.com","url":"https://www.bitcoindepot.com/","kyc":"full","kycLevel":4,"kycNote":"Required photo ID on every kiosk transaction from a phased rollout beginning 24 February 2026, up from ID on larger purchases only. The network went offline on 18 May 2026 with the Chapter 11 filing, so no current verification surface exists to check.","fee":"15%","limit":"900 daily (currency not recorded)","categories":["Bitcoin ATM"],"countries":["US","CA"],"features":["US/CA","Buy & Sell","Cash"],"status":"down","updatedAt":"2026-08-07","description":"Bitcoin ATM network taken offline in May 2026 when its operator filed for Chapter 11.","cardSummary":"Bitcoin ATM operator wound down May 2026; network offline.","networks":["atm"],"checkedAt":"2026-08-07","lastReviewed":"2026-08-07","reviewSource":"official_site_batch_6_2026-06-22","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-07","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"US/Five Eyes MSB, FinCEN/FINTRAC registered, that collected phone, email, wallet/transaction, ID, biometric and SSN-related data. Now in Chapter 11 wind-down: customer records are an asset in a court-supervised sale, and a claims agent holds the process.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Bitcoin Depot Inc.","citation":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm"},"registrationNumber":{"value":"87-3219029 (I.R.S. Employer Identification No.); CIK 0001901799","citation":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm"},"registryUrl":{"value":"https://www.sec.gov/cgi-bin/browse-edgar?CIK=0001901799","citation":"https://www.sec.gov/cgi-bin/browse-edgar?CIK=0001901799"},"incorporationJurisdiction":{"value":"Delaware","citation":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm"},"incorporationDate":{"value":"June 30, 2023 (name change via Second Amended and Restated Certificate of Incorporation following SPAC merger; predecessor Lux Vending, LLC incorporated June 7, 2016 in Georgia)","citation":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-113938/btm-20251231.htm"},"registeredAddress":{"value":"8601 Dunwoody Place, Sandy Springs, GA 30350","citation":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-227832/0001193125-26-227832.pdf"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":["GSR II Meteora Acquisition Corp. (SPAC predecessor)","Lux Vending, LLC (Georgia LLC, merged 2023)"],"citation":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-113938/btm-20251231.htm"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/bitcoin_depot","agentUsability":{"status":"hard-blocked","evidence":"The current provider listing is marked down, so this dataset treats agent payment as hard-blocked.","derivedFrom":["status"]},"details_url":"https://cunicula.com/en/provider/bitcoin-depot","canonical_score":12,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":0,"control":0,"transparency":0,"security":5,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 0 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 5 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://www.bitcoindepot.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://www.bitcoindepot.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://www.bitcoindepot.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":4,"identity_requirement":"full","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Bitcoin ATM","primary_bucket":"ATM","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Bitcoin Depot Inc.","registration_number":"87-3219029 (I.R.S. Employer Identification No.); CIK 0001901799","registry_url":"https://www.sec.gov/cgi-bin/browse-edgar?CIK=0001901799","incorporation_jurisdiction":"Delaware","incorporation_date":"June 30, 2023 (name change via Second Amended and Restated Certificate of Incorporation following SPAC merger; predecessor Lux Vending, LLC incorporated June 7, 2016 in Georgia)","registered_address":"8601 Dunwoody Place, Sandy Springs, GA 30350","parent_entity":null,"ultimate_owner":null,"prior_entities":[{"name":"GSR II Meteora Acquisition Corp.","detail":"SPAC predecessor"},{"name":"Lux Vending, LLC","detail":"Georgia LLC, merged 2023"}],"officers":[],"citations":{"legalEntity":{"url":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm","note":null,"agent_verified":false},"incorporationDate":{"url":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-113938/btm-20251231.htm","note":null,"agent_verified":false},"registeredAddress":{"url":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-227832/0001193125-26-227832.pdf","note":null,"agent_verified":false},"priorEntities":{"url":"https://ir.bitcoindepot.com/sec-filings/all-sec-filings/content/0001193125-26-113938/btm-20251231.htm","note":null,"agent_verified":false},"entityType":{"url":"https://www.sec.gov/Archives/edgar/data/1901799/0001193125-26-227832/d130621d8k.htm","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":5,"self-reported":4},"total_sources":9},"privacy_score":20,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-80,"detail":"Full identity verification recorded (level 4 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 62 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":4,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-07","lastReviewed":"2026-08-07","kycLastChecked":"2026-08-07"}},{"slug":"bitcoinvoucherbot","name":"BitcoinVoucherBot","domain":"bitcoinvoucher.bot","url":"https://bitcoinvoucher.bot/","kyc":"none","kycLevel":1,"kycNote":"Official manual describes free avatar creation with a password and generated Liquid-wallet recovery phrase, without email, phone or identity documents. A persistent avatar and trade history are used.","fee":"Official manual: 2.5% of order amount per party, plus network fees; check the live invoice","limit":"Manual documents 10,000-500,000 sats per order; live app parameters are authoritative","categories":["P2P / Lightning"],"countries":["GLOBAL"],"features":["No document KYC stated","No email or phone required","Pseudonymous avatar","Lightning funding / Liquid multisig escrow","Tor-friendly"],"tagline":"Pseudonymous P2P Bitcoin trading with automated escrow.","status":"ok","updatedAt":"2026-09-28","description":"Pseudonymous P2P Bitcoin marketplace described by its operator as non-custodial, with Lightning-funded Liquid multisig escrow.","cardSummary":"P2P Bitcoin trades with Lightning funding and Liquid escrow.","networks":[],"checkedAt":"2026-06-22","lastReviewed":"2026-06-22","reviewSource":"https://bitcoinvoucher.bot/manual.html","jurisdictionConfidence":"unknown","kycLastChecked":"2026-06-22","trending":false,"jurisdiction":"??","evidenceStatus":"partial","riskLevel":"standard","privacyWarning":"Fiat payments and disputes can expose identity details. The manual and homepage describe different payout and collateral arrangements. Live custody controls were not verified.","auditedBy":null,"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/bitcoinvoucherbot","canonical_score":37,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":25,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 3 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://bitcoinvoucher.bot/","https://bitcoinvoucher.bot/#escrow","https://bitcoinvoucher.bot/#features","https://bitcoinvoucher.bot/manual.html","https://p2p.bitcoinvoucher.bot/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://bitcoinvoucher.bot/","https://bitcoinvoucher.bot/#escrow","https://bitcoinvoucher.bot/#features","https://bitcoinvoucher.bot/manual.html","https://p2p.bitcoinvoucher.bot/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://bitcoinvoucher.bot/","https://bitcoinvoucher.bot/#escrow","https://bitcoinvoucher.bot/#features","https://bitcoinvoucher.bot/manual.html","https://p2p.bitcoinvoucher.bot/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"P2P / Lightning","primary_bucket":"P2P","corporate_identity":null,"evidence_provenance":{"strongest_tier":null,"tiers":[],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":0},"total_sources":0},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":59,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 108 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-06-22","lastReviewed":"2026-06-22","kycLastChecked":"2026-06-22"}},{"slug":"bitpay-gift-cards","name":"BitPay Gift Cards","domain":"bitpay.com","url":"https://www.bitpay.com/gift-cards","kyc":"full","kycLevel":4,"kycNote":"An approved BitPay ID is required to buy gift cards. Verification can include identity documents, a selfie and a liveness check.","fee":null,"limit":null,"categories":["Gift Cards"],"countries":["US"],"features":["100+ gift-card brands","BitPay app","Browser extension","BitPay ID required"],"status":"ok","updatedAt":"2026-09-05","description":"Gift cards from more than 100 brands purchased through the BitPay app or browser extension after BitPay ID approval.","cardSummary":"Brand gift cards bought in the BitPay app.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://support.bitpay.com/hc/en-us/articles/360024780212-Purchasing-Gift-Cards-using-BitPay","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Buying a gift card requires a BitPay account and approved BitPay ID. BitPay ID can require identity documents, a selfie, facial biometrics and a liveness check through Sumsub. Brand-specific purchase limits and merchant terms apply.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.bitpay.com/legal/terms-of-use","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"BitPay, Inc.","citation":"https://www.bitpay.com/legal/terms-of-use"},"incorporationJurisdiction":{"value":"Delaware, USA","citation":"https://www.bitpay.com/legal/terms-of-use"},"registeredAddress":{"value":"1870 The Exchange SE Ste 220, PMB 91017, Atlanta, GA 30339-2171 USA","citation":"https://www.bitpay.com/legal/terms-of-use"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/bitpay","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":219,"productName":"BitPay gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":{"percentage":0,"fixed":0,"currency":"USD"},"load":{"percentage":0,"fixed":0,"currency":"USD"},"spend":{"percentage":0,"fixed":0,"currency":"USD"},"fx":null,"monthly":{"percentage":0,"fixed":0,"currency":"USD"}},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":["USD"],"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"BitPay gift-card guide","url":"https://www.bitpay.com/blog/buy-gift-cards-with-crypto/","reviewedAt":"2026-08-09"}],"note":"BitPay records no added purchase fee, but product limits and the identity threshold were not recorded."}],"details_url":"https://cunicula.com/en/provider/bitpay-gift-cards","canonical_score":45,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":5,"control":7,"transparency":8,"security":17,"accountability":8},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 5 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-09-05","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://support.bitpay.com/hc/en-us/articles/360024780212-Purchasing-Gift-Cards-using-BitPay","https://support.bitpay.com/hc/en-us/articles/360030710712-What-is-BitPay-ID-verification-What-documents-are-accepted"],"reviewedAt":"2026-09-05","note":"Account, device, transaction and payment data; BitPay ID approval is required for gift-card purchases and can include identity documents, selfies and liveness checks."},"controlModel":{"value":"hosted-account","sourceUrls":["https://www.bitpay.com/legal/terms-of-use"],"reviewedAt":"2026-08-27","note":"hybrid-wallet-and-operator-purchase"},"sourceModel":{"value":"partial","sourceUrls":["https://www.bitpay.com/legal/terms-of-use"],"reviewedAt":"2026-08-27","note":"partial-open-source-wallet"}},"audit":{"scoreEligible":false,"reason":"Trust-center material did not establish a current gift-card-specific audit citation/date/scope."}},"privacy_observations":{"identity_exposure_level":4,"identity_requirement":"full","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"BitPay, Inc.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Delaware, USA","incorporation_date":null,"registered_address":"1870 The Exchange SE Ste 220, PMB 91017, Atlanta, GA 30339-2171 USA","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://www.bitpay.com/legal/terms-of-use","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.bitpay.com/legal/terms-of-use","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.bitpay.com/legal/terms-of-use","note":null,"agent_verified":false},"entityType":{"url":"https://www.bitpay.com/legal/terms-of-use","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":4},"total_sources":4},"privacy_score":20,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-80,"detail":"Full identity verification recorded (level 4 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":4,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"bitrefill","name":"Bitrefill","domain":"bitrefill.com","url":"https://www.bitrefill.com/","kyc":"light","kycLevel":1,"kycNote":"Terms state suspicious transactions may require KYC to continue using gift-card/top-up services; verified accounts are required for some bill/card products and processors may collect identity data.","fee":"2%","limit":"10,000 daily (currency not recorded)","categories":["Gift Cards","Agent Money"],"countries":["US","UK","EU","AU","IN","CA","SG","ZA","NG","KE","BR","AR","MX"],"features":["AU Visa Digital","170+ Countries","Lightning","eSIMs","Instant"],"status":"ok","updatedAt":"2026-08-25","description":"Sells gift cards, mobile top-ups, eSIMs and bill payments for crypto, with Airfill Prepaid AB named in its terms.","cardSummary":"Gift cards, top-ups and eSIMs bought with crypto.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://help.bitrefill.com/hc/en-us/articles/36440135758738-How-Strong-Customer-Authentication-SCA-requirements-apply-to-the-Bitrefill-Card","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":true,"jurisdiction":"SE","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Bitrefill monitors platform use for compliance and can collect account, email, purchase, payment, IP and verification data. Public reporting says a March 2026 breach exposed about 18,500 purchase records, including email, crypto-payment-address and IP metadata; about 1,000 records also included customer names.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.bitrefill.com/terms/?hl=en","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"AIRFILL PREPAID AB","citation":"https://www.bitrefill.com/terms/?hl=en"},"registrationNumber":{"value":"559001-6035","citation":"https://www.bitrefill.com/terms/?hl=en"},"incorporationJurisdiction":{"value":"Sweden","citation":"https://www.bitrefill.com/terms/?hl=en"},"registeredAddress":{"value":"Mailbox 2333, 111 75 Stockholm, Sweden","citation":"https://www.bitrefill.com/privacy/?hl=en"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentMoney":{"compatible":true,"controlSurfaces":["api","mcp","dashboard","manual"],"protocols":["mcp","merchant-api","gift-card"],"authorizationModel":["api-key","account-permission","human-approval","merchant-lock"],"settlementRail":["crypto","lightning","gift-card"],"autonomyLevel":2,"custodyModel":"merchant-credit","mandateLoggingRisk":"high","revocationQuality":"partial","spendLimits":false,"merchantLock":true,"categoryLock":false,"pauseClose":false,"transactionWebhooks":false,"fundingSource":"crypto-funded","identitySurface":"light-kyc","sourceLinks":[{"label":"Bitrefill homepage","href":"https://www.bitrefill.com/","scope":"provider"},{"label":"Bitrefill API","href":"https://www.bitrefill.com/api/","scope":"controls"}],"dataPath":["AI agent","Bitrefill API/MCP or account","crypto or Lightning payment","Bitrefill order record","gift card or top-up issuer","merchant redemption"],"notes":"Useful for automated gift-card, eSIM, top-up, and bill-payment purchases through API/MCP surfaces, but not anonymous: account, order, payment, issuer, and redemption metadata can remain linkable.","protocolPrivacyNotes":"Treat the API/MCP account as an identity-bearing control plane. Crypto funding can reduce bank-card exposure, but order history, redemption records, account metadata, and merchant behavior still form a durable trail."},"agentUsability":{"status":"api-key-only","evidence":"The current record exposes api/mcp control with light KYC and a light-kyc identity surface; no full document-KYC gate is recorded.","derivedFrom":["kyc","kycLevel","agentMoney.identitySurface","agentMoney.controlSurfaces"]},"cardFees":[{"serviceId":102,"productName":"Bitrefill gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":null,"load":null,"spend":null,"fx":null,"monthly":null},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":null,"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"Bitrefill fee help","url":"https://help.bitrefill.com/hc/en-us/articles/360020448739-What-are-the-fees-for-using-Bitrefill","reviewedAt":"2026-08-09"}],"note":"The provider states that product prices and payment-network costs vary. A complete fixed schedule was not recorded."}],"details_url":"https://cunicula.com/en/provider/bitrefill","canonical_score":34,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://help.bitrefill.com/hc/en-us/articles/36440135758738-How-Strong-Customer-Authentication-SCA-requirements-apply-to-the-Bitrefill-Card","https://help.bitrefill.com/hc/en-us","https://www.bitrefill.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://help.bitrefill.com/hc/en-us/articles/36440135758738-How-Strong-Customer-Authentication-SCA-requirements-apply-to-the-Bitrefill-Card","https://help.bitrefill.com/hc/en-us","https://www.bitrefill.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://help.bitrefill.com/hc/en-us/articles/36440135758738-How-Strong-Customer-Authentication-SCA-requirements-apply-to-the-Bitrefill-Card","https://help.bitrefill.com/hc/en-us","https://www.bitrefill.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"SE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"AIRFILL PREPAID AB","registration_number":"559001-6035","registry_url":null,"incorporation_jurisdiction":"Sweden","incorporation_date":null,"registered_address":"Mailbox 2333, 111 75 Stockholm, Sweden","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://www.bitrefill.com/terms/?hl=en","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.bitrefill.com/terms/?hl=en","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.bitrefill.com/terms/?hl=en","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.bitrefill.com/privacy/?hl=en","note":null,"agent_verified":false},"entityType":{"url":"https://www.bitrefill.com/terms/?hl=en","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":7},"total_sources":7},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: SE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"SE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"boltz","name":"Boltz","domain":"boltz.exchange","url":"https://boltz.exchange/","kyc":"none","kycLevel":0,"kycNote":"The swap service is currently disabled. Previous no-account and swap terms are not evidence of present availability.","fee":"0.1%","categories":["Swap"],"countries":["GLOBAL"],"bestFor":["Lightning ↔ on-chain swaps","Liquid Bitcoin","Non-custodial workflows"],"features":["Non-custodial","No account required","Lightning ↔ On-chain","Liquid swaps","Open source","Submarine swaps","HTLC-based"],"tagline":null,"status":"down","updatedAt":"2026-09-05","description":"Non-custodial Bitcoin bridge swapping between Lightning, on-chain and Liquid using submarine swaps.","cardSummary":"Non-custodial swaps across Lightning and Liquid.","networks":[],"checkedAt":"2026-09-05","lastReviewed":"2026-09-05","reviewSource":"https://www.boltz.exchange/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"SV","evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"Boltz swap services have been disabled since 3 August 2026 and remain disabled until further notice. The provider says its API remains available for cooperative refunds and unilateral refunds do not depend on its infrastructure. It reported repeated attacks and contained exploits, said no user funds were at risk, and did not give a reopening date.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://boltz.exchange/terms","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Boltz S.A. de C.V.","citation":"https://boltz.exchange/terms"},"incorporationJurisdiction":{"value":"El Salvador","citation":"https://boltz.exchange/terms"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/Boltzhq","incidents":[{"title":"Service suspension and ownership handover after targeted attacks","status":"monitoring","severity":"high","startedAt":"2026-08-12","summary":"Boltz said AI-assisted attackers had targeted the service, suspended operations, and announced that all original founders stepped down. On 18 August the old crew still controlled the service and the handover remained in progress; no later provider-owned completion notice was found in the review window.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unresolved","sources":[{"label":"Boltz suspension and founder departure","href":"https://x.com/Boltzhq/status/2087636521746674168"},{"label":"Boltz handover still in progress","href":"https://x.com/Boltzhq/status/2089675696494834097"}]}],"agentUsability":{"status":"hard-blocked","evidence":"The current provider listing is marked down, so this dataset treats agent payment as hard-blocked.","derivedFrom":["status"]},"details_url":"https://cunicula.com/en/provider/boltz","canonical_score":17,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":0,"accountability":5},"applied_caps":[{"key":"active-high-incident","maximum":39,"reason":"An unresolved high-severity incident limits the score to 39."},{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 0 of 25 points.","accountability: 5 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","An unresolved high-severity incident limits the score to 39.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://x.com/Boltzhq/status/2089675696494834097","https://x.com/Boltzhq/status/2087636521746674168","https://status.boltz.exchange/","https://boltz.exchange/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"SV","jurisdiction_confidence":"unknown","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Boltz S.A. de C.V.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"El Salvador","incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false},"entityType":{"url":"https://boltz.exchange/terms","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":3},"total_sources":5},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 33 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"SV","jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-09-05","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"briar","name":"Briar","domain":"briarproject.org","url":"https://briarproject.org/","kyc":"none","kycLevel":0,"kycNote":"No central app account or identity KYC is documented; the account exists only on the user's device. Optional feedback and crash reports can include stored email and device information, and mailing lists are operated by SourceForge.","fee":"Free","categories":["Messaging","Offline"],"countries":["GLOBAL"],"status":"warning","updatedAt":"2026-08-25","changedAt":"2026-08-25","description":"Free, open-source peer-to-peer messaging over Tor, Wi-Fi and Bluetooth without central messaging servers; the project is in maintenance mode.","cardSummary":"P2P messaging over Tor, Wi-Fi and Bluetooth.","networks":["Tor","Bluetooth","Wi-Fi","FOSS","Android","Desktop"],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"GB","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"The project entered maintenance mode on 9 July 2026 and limits work to essential security updates and bug fixes. Official pages list grant funding from Small Media, OTF, Internews, NLnet, Prototype Fund and others; no reviewed primary source establishes donor operational control or a backdoor.","corporate":{"entityType":{"value":"company","citation":"https://briarproject.org/copyright/","note":"Briar describes voluntary-board project governance; Sublime Software Ltd holds the website copyright and Companies House lists it as an active UK private limited company."},"governanceModel":{"value":"maintainer-group","citation":"https://briarproject.org/about/"},"repositoryUrl":{"value":"https://code.briarproject.org/briar/briar","citation":"https://code.briarproject.org/briar/briar"},"legalEntity":{"value":"SUBLIME SOFTWARE LTD","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"registrationNumber":{"value":"07051922","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"registryUrl":{"value":"https://find-and-update.company-information.service.gov.uk/company/07051922","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"incorporationJurisdiction":{"value":"United Kingdom","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"incorporationDate":{"value":"2009-10-21","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"registeredAddress":{"value":"26 Carlyle Avenue, Brighton, England, BN2 4DR","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922"},"ultimateOwner":{"value":"Michael Rogers (75% or more of shares)","citation":"https://find-and-update.company-information.service.gov.uk/company/07051922/persons-with-significant-control"},"officers":{"value":["Michael Rogers (Director)"],"citation":"https://find-and-update.company-information.service.gov.uk/company/07051922/officers"},"source":"Briar official governance/copyright pages and Companies House, accessed 2026-08-25","reviewedAt":"2026-08-25"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/briar","canonical_score":38,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":9},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 9 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://briarproject.org/","https://briarproject.org/privacy-policy/","https://briarproject.org/news/2026-maintenance-mode/","https://briarproject.org/about/","https://briarproject.org/copyright/","https://find-and-update.company-information.service.gov.uk/company/07051922","https://find-and-update.company-information.service.gov.uk/company/07051922/persons-with-significant-control","https://code.briarproject.org/briar/briar/-/tags/release-1.5.19","https://briarproject.org/download-briar-desktop/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://briarproject.org/","https://briarproject.org/privacy-policy/","https://briarproject.org/news/2026-maintenance-mode/","https://briarproject.org/about/","https://briarproject.org/copyright/","https://find-and-update.company-information.service.gov.uk/company/07051922","https://find-and-update.company-information.service.gov.uk/company/07051922/persons-with-significant-control","https://code.briarproject.org/briar/briar/-/tags/release-1.5.19","https://briarproject.org/download-briar-desktop/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://briarproject.org/","https://briarproject.org/privacy-policy/","https://briarproject.org/news/2026-maintenance-mode/","https://briarproject.org/about/","https://briarproject.org/copyright/","https://find-and-update.company-information.service.gov.uk/company/07051922","https://find-and-update.company-information.service.gov.uk/company/07051922/persons-with-significant-control","https://code.briarproject.org/briar/briar/-/tags/release-1.5.19","https://briarproject.org/download-briar-desktop/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"GB","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Messaging","primary_bucket":"Comms","corporate_identity":{"entity_type":"company","entity_type_note":"Briar describes voluntary-board project governance; Sublime Software Ltd holds the website copyright and Companies House lists it as an active UK private limited company.","governance_model":"maintainer-group","repository_url":"https://code.briarproject.org/briar/briar","legal_entity":"SUBLIME SOFTWARE LTD","registration_number":"07051922","registry_url":"https://find-and-update.company-information.service.gov.uk/company/07051922","incorporation_jurisdiction":"United Kingdom","incorporation_date":"2009-10-21","registered_address":"26 Carlyle Avenue, Brighton, England, BN2 4DR","parent_entity":null,"ultimate_owner":"Michael Rogers (75% or more of shares)","prior_entities":[],"officers":[{"name":"Michael Rogers (Director)","role":null}],"citations":{"legalEntity":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922","note":null,"agent_verified":false},"registrationNumber":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922","note":null,"agent_verified":false},"incorporationDate":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922","note":null,"agent_verified":false},"registeredAddress":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922/persons-with-significant-control","note":null,"agent_verified":false},"officers":{"url":"https://find-and-update.company-information.service.gov.uk/company/07051922/officers","note":null,"agent_verified":false},"entityType":{"url":"https://briarproject.org/copyright/","note":null,"agent_verified":false},"governanceModel":{"url":"https://briarproject.org/about/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"Briar official governance/copyright pages and Companies House, accessed 2026-08-25","reviewed_at":"2026-08-25"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":8,"self-reported":3},"total_sources":11},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: GB (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.235Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"GB","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"btcpay-server","name":"BTCPay Server","domain":"btcpayserver.org","url":"https://btcpayserver.org/","kyc":"none","kycLevel":0,"kycNote":"No KYC of any kind. You run the server. You control the keys.","fee":"Free","categories":["Merchants","Privacy Tools","Agent Money"],"countries":["GLOBAL"],"bestFor":["Merchants accepting BTC","Self-sovereign payments","No-fee transactions"],"features":["Self-hosted","Open source","Lightning","No processor fees","No software KYC","Non-custodial","Merchant payments","WooCommerce plugin"],"tagline":"Self-hosted Bitcoin payments. No middleman, no fees, no KYC.","status":"ok","updatedAt":"2026-09-05","description":"Self-hosted open-source Bitcoin and Lightning payment processor that is non-custodial and charges no fees.","cardSummary":"Self-hosted Bitcoin and Lightning payments.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://blog.btcpayserver.org/security-advisory-btcpay-server-2-4-2/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"BTCPay Server versions before 2.4.2 exposed LND macaroon credentials to unauthenticated remote access, and attackers exploited the flaw to steal funds. Only LND deployments were exposed; built-in on-chain wallets were not affected. Update to a current release, regenerate or rotate credentials, and inspect node activity. Separately managed LND exposure paths need manual credential rotation.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentMoney":{"compatible":true,"controlSurfaces":["api","dashboard","manual"],"protocols":["merchant-api","manual"],"authorizationModel":["human-approval","policy-engine","wallet-grant"],"settlementRail":["crypto","lightning"],"autonomyLevel":1,"custodyModel":"self-custody","mandateLoggingRisk":"medium","revocationQuality":"strong","spendLimits":false,"merchantLock":true,"categoryLock":false,"pauseClose":true,"transactionWebhooks":true,"fundingSource":"self-hosted","identitySurface":"none","sourceLinks":[{"label":"BTCPay Server homepage","href":"https://btcpayserver.org/","scope":"provider"},{"label":"BTCPay Greenfield API","href":"https://docs.btcpayserver.org/API/Greenfield/v1/","scope":"controls"},{"label":"BTCPay wallet docs","href":"https://docs.btcpayserver.org/Wallet/","scope":"custody"}],"dataPath":["AI agent","approval wallet or operator","BTCPay Greenfield API invoice","self-hosted BTCPay server","Bitcoin or Lightning network","merchant order record"],"notes":"Useful as a self-hosted invoice and merchant-payment rail for agent workflows. It avoids platform custody and KYC, but wallet funding, network history, server logs, and merchant order records still need separate controls.","protocolPrivacyNotes":"The safer pattern is agent-drafts, operator-or-policy-signs. Do not put seed material or broad wallet keys in the same runtime that browses, prompts, or receives untrusted task input."},"twitter":"https://x.com/BtcpayServer","incidents":[{"title":"This is a security release; updating is recommended for servers shared with many users.","status":"active","severity":"medium","startedAt":"2026-08-24","summary":"Upgrade to v2.4.3 or later, especially on shared multi-user servers; the release does not claim a confirmed compromise.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unknown","sources":[{"label":"This is a security release; updating is recommended for servers shared with many users.","href":"https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.3"}]}],"agentUsability":{"status":"no-account","evidence":"The current record reports no KYC, no identity surface, and api/dashboard/manual control; no provider identity gate is recorded.","derivedFrom":["kyc","agentMoney.identitySurface","agentMoney.controlSurfaces"]},"details_url":"https://cunicula.com/en/provider/btcpay-server","canonical_score":76,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":25,"control":20,"transparency":15,"security":13,"accountability":3},"applied_caps":[],"score_rationale":["privacy: 25 of 25 points.","control: 20 of 20 points.","transparency: 15 of 20 points.","security: 13 of 25 points.","accountability: 3 of 10 points."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"none","controlModel":"local-self-custody","sourceModel":"open-reproducible"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"none","sourceUrls":["https://btcpayserver.org/"],"reviewedAt":"2026-08-27","note":"deployment administrator controls store, invoice, network and user data"},"controlModel":{"value":"local-self-custody","sourceUrls":["https://btcpayserver.org/"],"reviewedAt":"2026-08-27","note":"self-hosted-operator-controlled"},"sourceModel":{"value":"open-reproducible","sourceUrls":["https://github.com/btcpayserver/btcpayserver/releases/tag/v2.4.3"],"reviewedAt":"2026-08-27","note":"open-source-self-hosted"}},"audit":{"scoreEligible":false,"reason":"Security policy exists, but no current complete independent audit report with date/scope was established."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Merchants","primary_bucket":"Merchants","corporate_identity":null,"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":3},"total_sources":4},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.236Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"btcvps","name":"BTCVPS","domain":"btcvps.com","url":"https://btcvps.com/","kyc":"none","kycLevel":1,"kycNote":"Official terms say BTCVPS does not verify user identities and registration does not require personal documentation. Privacy policy says it does not collect government ID, full legal name, home address, phone, billing address, credit card information, or KYC documents.","fee":"KVM VPS from €6/mo or €64.80/yr","categories":["Hosting"],"countries":["GLOBAL","NL","LT"],"bestFor":["Crypto-paid VPS hosting","Email-only server signup","Users who need disclosed Netherlands jurisdiction"],"features":["Email-only signup","No identity verification","KVM VPS","Full root access","Encrypted storage","Netherlands and Lithuania locations","Monero and Bitcoin payments"],"tagline":"Email-only no-ID VPS hosting with Monero/Bitcoin payments and NL/LT server locations.","status":"ok","updatedAt":"2026-08-25","description":"KVM VPS provider with email-only signup and Monero or Bitcoin payment, on server locations in the Netherlands and Lithuania.","cardSummary":"KVM VPS with email-only signup.","networks":["BTC","XMR","BCH","DASH","LTC","WOW","DGB"],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"NL","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Not bulletproof hosting. Terms say BTCVPS complies with Dutch law and valid court orders. Privacy policy says app-level IP tracking is not used, but default Nginx access logs may include IP, path, timestamp, user agent and status for operations/security.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://btcvps.com/","note":"BTCVPS is a commercial paid VPS hosting vendor (crypto payments, plans, ToS/AUP); not an open-source project, foundation, or unresolved type."},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/btcvps","telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/btcvps","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":25,"accountability":5},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 5 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://btcvps.com/","https://btcvps.com/privacy-policy","https://status.btcvps.com/api/getMonitorList/KGzIQFcCuv","https://btcvps.com/blog/maintenance-on-netherlands-node01-wednesday-aug-19","https://x.com/btcvps/status/2088795270868005105"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://btcvps.com/","https://btcvps.com/privacy-policy","https://status.btcvps.com/api/getMonitorList/KGzIQFcCuv","https://btcvps.com/blog/maintenance-on-netherlands-node01-wednesday-aug-19","https://x.com/btcvps/status/2088795270868005105"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://btcvps.com/","https://btcvps.com/privacy-policy","https://status.btcvps.com/api/getMonitorList/KGzIQFcCuv","https://btcvps.com/blog/maintenance-on-netherlands-node01-wednesday-aug-19","https://x.com/btcvps/status/2088795270868005105"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"NL","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Hosting","primary_bucket":"Hosting","corporate_identity":{"entity_type":"company","entity_type_note":"BTCVPS is a commercial paid VPS hosting vendor (crypto payments, plans, ToS/AUP); not an open-source project, foundation, or unresolved type.","governance_model":null,"repository_url":null,"legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://btcvps.com/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":1},"total_sources":1},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: NL"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.236Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"NL","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"cake-pay","name":"Cake Pay","domain":"cakepay.com","url":"https://cakepay.com/","kyc":"light","kycLevel":1,"kycNote":"A valid email and cryptocurrency payment are required. The reviewed documentation does not establish a higher-limit KYC tier.","fee":"Products are sold at face value plus a small cryptocurrency-conversion fee.","limit":"USD 5,000 daily; individual card minimums and maximums vary","categories":["Gift Cards"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Gift cards","Prepaid cards","150,000+ merchants","Email-only signup","No name or ID requested by Cake Pay","Bitcoin, Litecoin, Monero and Zcash payments"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Cake Labs service buying merchant gift cards and payment cards with crypto, requiring a valid email address.","cardSummary":"Merchant gift cards bought with crypto.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://docs.cakewallet.com/cake-pay","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"KN","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Cake Pay requires an email address for purchase, delivery and support. It says it asks for no name or ID, but merchants may require additional information when a product is redeemed or used. Cake Wallet's optional third-party services apply their own privacy policies and may request identity information. The dedicated Cake Pay terms and privacy pages currently expose no policy body.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://cakepay.com/terms/","note":"Terms of Service and Privacy Policy explicitly state the Cake Pay service is operated by Cake Labs LLC, a real operating company that also runs Cake Wallet."},"legalEntity":{"value":"Cake Labs LLC","citation":"https://cakepay.com/terms/"},"incorporationJurisdiction":{"value":"Nevis, Saint Kitts and Nevis","citation":"https://cakewallet.com/terms/"},"registeredAddress":{"value":"Hunkin Waterfront Plaza, Suite 556, Main Street, Charlestown, Saint Kitts and Nevis","citation":"https://www.info-clipper.com/en/company/saint-kitts-and-nevis/cake-labs-llc.kndb5zaen.html"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/AborCakePayApp","telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":1086,"productName":"Cake Pay gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":{"percentage":0,"fixed":0,"currency":"USD"},"load":{"percentage":0,"fixed":0,"currency":"USD"},"spend":{"percentage":0,"fixed":0,"currency":"USD"},"fx":null,"monthly":{"percentage":0,"fixed":0,"currency":"USD"}},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":["USD"],"supportedRegions":["US"],"expiry":null,"kycThreshold":null,"sources":[{"label":"Cake Pay catalogue","url":"https://cakepay.com/","reviewedAt":"2026-08-09"}],"note":"The provider records no fee, but product limits and the identity threshold were not recorded."}],"details_url":"https://cunicula.com/en/provider/cake-pay","canonical_score":47,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":7,"transparency":1,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://cakewallet.com/security/"],"reviewedAt":"2026-08-27","note":"email, order, IP/browser, payment and merchant/card-program data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://cakewallet.com/security/"],"reviewedAt":"2026-08-27","note":"operator-purchase-inside-open-wallet"},"sourceModel":{"value":"closed","sourceUrls":["https://github.com/cake-tech/cake_wallet"],"reviewedAt":"2026-08-27","note":"partial-open-source-wallet-client"}},"audit":{"scoreEligible":false,"reason":"Security disclosure channel exists; no current Cake Pay product audit report with date/scope found."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"KN","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Terms of Service and Privacy Policy explicitly state the Cake Pay service is operated by Cake Labs LLC, a real operating company that also runs Cake Wallet.","governance_model":null,"repository_url":null,"legal_entity":"Cake Labs LLC","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Nevis, Saint Kitts and Nevis","incorporation_date":null,"registered_address":"Hunkin Waterfront Plaza, Suite 556, Main Street, Charlestown, Saint Kitts and Nevis","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://cakepay.com/terms/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://cakewallet.com/terms/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.info-clipper.com/en/company/saint-kitts-and-nevis/cake-labs-llc.kndb5zaen.html","note":null,"agent_verified":false},"entityType":{"url":"https://cakepay.com/terms/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":2},"total_sources":4},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: KN"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"KN","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"cake-wallet","name":"Cake Wallet","domain":"cakewallet.com","url":"https://cakewallet.com/","kyc":"none","kycLevel":0,"kycNote":"Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.","fee":"Free","categories":["Wallet"],"countries":["GLOBAL"],"features":["XMR + ZEC + BTC + LTC","Self-custody","Built-in swap","Open source","iOS + Android","No account","Exchange via Trocador"],"status":"warning","updatedAt":"2026-03-13","description":"Multi-coin privacy wallet - XMR, ZEC, BTC, LTC. Self-custody, built-in no-KYC swap, open source. iOS and Android. (Zero KYC)","cardSummary":"Multi-coin wallet with built-in swaps.","networks":[],"checkedAt":"2026-06-24","lastReviewed":"2026-06-22","reviewSource":"official_site_batch_1_2026-06-22","jurisdictionConfidence":"verified","kycLastChecked":"2026-06-22","trending":true,"jurisdiction":"US","noOperatorData":true,"evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Cake Labs nodes may transiently receive IP address, wallet sync height, and submitted transactions/channels but state they do not retain them. Optional third-party buy/sell and swap services have separate privacy/KYC practices and may request personal information.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://cakewallet.com/terms/","note":"Official Terms of Use state the apps are provided by Cake Labs LLC, a limited liability company formed under the laws of Nevis; security page and copyright also name Cake Labs LLC as developer."},"governanceModel":{"value":"company-sponsored","citation":"https://cakelabs.com/"},"repositoryUrl":{"value":"https://github.com/cake-tech/cake_wallet","citation":"https://github.com/cake-tech/cake_wallet"},"legalEntity":{"value":"Cake Labs LLC","citation":"https://cakewallet.com/terms/"},"incorporationJurisdiction":{"value":"Nevis (Saint Kitts and Nevis)","citation":"https://cakewallet.com/terms/"},"officers":{"value":[{"name":"Vikrant Sharma","role":"CEO / Founder"},{"name":"Seth For Privacy","role":"COO"}],"citation":"https://cakewallet.com/about/"},"priorEntities":{"value":["Cake Technologies, LLC (later renamed BLOCKBUY LLC) -- Florida LLC originally FOTOLOCKR, LLC (2015), renamed Cake Technologies, LLC (2018), renamed BLOCKBUY LLC (2022), voluntary dissolution 2024-07-12; managers included Vikrant Sharma and Sunali Sharma; Apple App Store still lists Cake Technologies, LLC as developer name","Cake Labs LLC (Florida) -- Separate Florida LLC filed 2026-07-14, active; principal address 1416 Haven Dr, Orlando, FL 32803; authorized member Adam R Dewolfe - not the Nevis operating entity named in Terms"],"citation":"https://search.sunbiz.org/Inquiry/CorporationSearch/SearchResultDetail?inquirytype=EntityName&directionType=Initial&searchNameOrder=CAKETECHNOLOGIES%20L150000241281&aggregateId=flal-l15000024128-fe067468-d0a1-4996-8c43-2a6e0a2d919b&searchTerm=CAKE%20TECHNOLOGIES&listNameOrder=CAKETECHNOLOGIES%20L150000241281"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"publicClaims":{"followTheMoney":{"value":"Cake Wallet\n────────────────────────\nFounder and CEO: Vikrant Sharma\nCake Wallet founded: 2018\nCake Labs founded: 2017\nSoftware: open source","reviewedAt":"2026-07-15","sources":[{"label":"Cake Wallet - About","href":"https://cakewallet.com/about/","type":"official"}]}},"followTheMoney":"Cake Wallet\n────────────────────────\nFounder and CEO: Vikrant Sharma\nCake Wallet founded: 2018\nCake Labs founded: 2017\nSoftware: open source","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cake-wallet","canonical_score":44,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://cakewallet.com/","https://cakewallet.com/terms/","https://cakewallet.com/privacy/","https://cakewallet.com/security/","https://github.com/cake-tech/cake_wallet/releases/tag/v6.4.1","https://status.cakewallet.com/api/status-page/cake/badge","https://status.cakewallet.com/api/status-page/cake"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://cakewallet.com/","https://cakewallet.com/terms/","https://cakewallet.com/privacy/","https://cakewallet.com/security/","https://github.com/cake-tech/cake_wallet/releases/tag/v6.4.1","https://status.cakewallet.com/api/status-page/cake/badge","https://status.cakewallet.com/api/status-page/cake"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://cakewallet.com/","https://cakewallet.com/terms/","https://cakewallet.com/privacy/","https://cakewallet.com/security/","https://github.com/cake-tech/cake_wallet/releases/tag/v6.4.1","https://status.cakewallet.com/api/status-page/cake/badge","https://status.cakewallet.com/api/status-page/cake"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":false,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Wallet","primary_bucket":"Wallet","corporate_identity":{"entity_type":"company","entity_type_note":"Official Terms of Use state the apps are provided by Cake Labs LLC, a limited liability company formed under the laws of Nevis; security page and copyright also name Cake Labs LLC as developer.","governance_model":"company-sponsored","repository_url":"https://github.com/cake-tech/cake_wallet","legal_entity":"Cake Labs LLC","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Nevis (Saint Kitts and Nevis)","incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[{"name":"Cake Technologies, LLC (later renamed BLOCKBUY LLC)","detail":"Florida LLC originally FOTOLOCKR, LLC (2015), renamed Cake Technologies, LLC (2018), renamed BLOCKBUY LLC (2022), voluntary dissolution 2024-07-12; managers included Vikrant Sharma and Sunali Sharma; Apple App Store still lists Cake Technologies, LLC as developer name"},{"name":"Cake Labs LLC (Florida)","detail":"Separate Florida LLC filed 2026-07-14, active; principal address 1416 Haven Dr, Orlando, FL 32803; authorized member Adam R Dewolfe - not the Nevis operating entity named in Terms"}],"officers":[{"name":"Vikrant Sharma","role":"CEO / Founder"},{"name":"Seth For Privacy","role":"COO"}],"citations":{"legalEntity":{"url":"https://cakewallet.com/terms/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://cakewallet.com/terms/","note":null,"agent_verified":false},"priorEntities":{"url":"https://search.sunbiz.org/Inquiry/CorporationSearch/SearchResultDetail?inquirytype=EntityName&directionType=Initial&searchNameOrder=CAKETECHNOLOGIES%20L150000241281&aggregateId=flal-l15000024128-fe067468-d0a1-4996-8c43-2a6e0a2d919b&searchTerm=CAKE%20TECHNOLOGIES&listNameOrder=CAKETECHNOLOGIES%20L150000241281","note":null,"agent_verified":false},"officers":{"url":"https://cakewallet.com/about/","note":null,"agent_verified":false},"entityType":{"url":"https://cakewallet.com/terms/","note":null,"agent_verified":false},"governanceModel":{"url":"https://cakelabs.com/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":6},"total_sources":9},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Local software or protocol with no hosted operator data"}],"evidence_confidence":87,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 108 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":0,"noOperatorData":true,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-06-24","lastReviewed":"2026-06-22","kycLastChecked":"2026-06-22"}},{"slug":"calyx-institute","name":"Calyx Institute","domain":"calyxinstitute.org","url":"https://calyxinstitute.org/","kyc":"light","kycLevel":1,"kycNote":"No identity KYC to use Calyx tools, but memberships/hardware require user-provided contact/shipping and payment data; privacy policy says cash or Bitcoin payments retain only provided information plus membership ID.","fee":"CalyxOS is free; mobile internet memberships start at USD 500/year","categories":["Privacy Tools"],"countries":["GLOBAL"],"features":["CalyxOS","Android fork","microG included","Pixel, Motorola, Fairphone and SHIFT support","Open source","VPN included with mobile internet membership","No Google account required"],"status":"ok","updatedAt":"2026-09-05","description":"US nonprofit digital-rights organization offering privacy tools, memberships, hotspots and CalyxOS phones.","cardSummary":"US nonprofit privacy tools and hotspots.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://calyxinstitute.org/membership","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Mobile internet membership requires contact, shipping and payment data and uses Mobile Citizen and T-Mobile infrastructure. T-Mobile can observe network and location metadata, and Calyx recommends using a VPN. Encrypted membership data is hosted on Vultr. New CalyxOS phone memberships remain temporarily paused, while existing memberships and phones are unaffected.","auditedBy":null,"corporate":{"entityType":{"value":"foundation","citation":"https://calyxinstitute.org/about","note":"Official site and IRS filings describe it as a 501(c)(3) nonprofit/public charity (New York domestic not-for-profit corporation) founded 2010."},"governanceModel":{"value":"foundation","citation":"https://projects.propublica.org/nonprofits/organizations/272800937"},"repositoryUrl":{"value":"https://gitlab.com/CalyxOS","citation":"https://gitlab.com/CalyxOS"},"legalEntity":{"value":"The Calyx Institute (CALYX INSTITUTE)","citation":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf"},"registrationNumber":{"value":"EIN 27-2800937; NY DOS ID 3951504","citation":"https://projects.propublica.org/nonprofits/organizations/272800937"},"registryUrl":{"value":"https://apps.dos.ny.gov/publicInquiry/","citation":"https://en.wikipedia.org/wiki/Calyx_Institute"},"incorporationJurisdiction":{"value":"New York, United States","citation":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf"},"incorporationDate":{"value":"2010-05-19","citation":"https://en.wikipedia.org/wiki/Calyx_Institute"},"registeredAddress":{"value":"254 36th St Ste C660, Brooklyn, NY 11232, USA","citation":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf"},"parentEntity":{"value":"none","citation":"https://www.causeiq.com/organizations/calyxinstitute,272800937/"},"ultimateOwner":{"value":"none (501(c)(3) public charity)","citation":"https://projects.propublica.org/nonprofits/organizations/272800937"},"officers":{"value":["Nicholas Merrill (President)","Ellen McDermott (Interim Executive Director)","Eric Bortel (Engineering Director)","Benjamin Knauss (Finance Director)","Ashi Krishnan (Director)","Liz O'Sullivan (Director)","Carey Shenkman (Director)","Kobi Snitz (Director)"],"citation":"https://projects.propublica.org/nonprofits/organizations/272800937"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/calyxinstitute","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/calyx-institute","canonical_score":56,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":7,"transparency":8,"security":17,"accountability":10},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 14 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 10 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://calyx.org/legal/privacy-policy"],"reviewedAt":"2026-08-27","note":"membership identity/contact, membership ID, possible IP logs and service-provider data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://calyx.org/legal/privacy-policy"],"reviewedAt":"2026-08-27","note":"mixed-membership-service-and-open-source-os"},"sourceModel":{"value":"partial","sourceUrls":["https://calyxos.org/news/2026/07/01/calyxos-official-release-is-back/"],"reviewedAt":"2026-08-27","note":"open-source-os-plus-operator-service"}},"audit":{"scoreEligible":false,"reason":"No current organization/service-wide independent audit citation/date/scope established."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Privacy Tools","primary_bucket":"Privacy Tools","corporate_identity":{"entity_type":"foundation","entity_type_note":"Official site and IRS filings describe it as a 501(c)(3) nonprofit/public charity (New York domestic not-for-profit corporation) founded 2010.","governance_model":"foundation","repository_url":"https://gitlab.com/CalyxOS","legal_entity":"The Calyx Institute (CALYX INSTITUTE)","registration_number":"EIN 27-2800937; NY DOS ID 3951504","registry_url":"https://apps.dos.ny.gov/publicInquiry/","incorporation_jurisdiction":"New York, United States","incorporation_date":"2010-05-19","registered_address":"254 36th St Ste C660, Brooklyn, NY 11232, USA","parent_entity":"none","ultimate_owner":"none (501(c)(3) public charity)","prior_entities":[],"officers":[{"name":"Nicholas Merrill (President)","role":null},{"name":"Ellen McDermott (Interim Executive Director)","role":null},{"name":"Eric Bortel (Engineering Director)","role":null},{"name":"Benjamin Knauss (Finance Director)","role":null},{"name":"Ashi Krishnan (Director)","role":null},{"name":"Liz O'Sullivan (Director)","role":null},{"name":"Carey Shenkman (Director)","role":null},{"name":"Kobi Snitz (Director)","role":null}],"citations":{"legalEntity":{"url":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf","note":null,"agent_verified":false},"registrationNumber":{"url":"https://projects.propublica.org/nonprofits/organizations/272800937","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf","note":null,"agent_verified":false},"incorporationDate":{"url":"https://en.wikipedia.org/wiki/Calyx_Institute","note":null,"agent_verified":false},"registeredAddress":{"url":"https://calyxinstitute.org/files/2022CalyxForm990-Public.pdf","note":null,"agent_verified":false},"parentEntity":{"url":"https://www.causeiq.com/organizations/calyxinstitute,272800937/","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://projects.propublica.org/nonprofits/organizations/272800937","note":null,"agent_verified":false},"officers":{"url":"https://projects.propublica.org/nonprofits/organizations/272800937","note":null,"agent_verified":false},"entityType":{"url":"https://calyxinstitute.org/about","note":null,"agent_verified":false},"governanceModel":{"url":"https://projects.propublica.org/nonprofits/organizations/272800937","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":8,"self-reported":4},"total_sources":12},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"cashu","name":"Cashu","domain":"cashu.space","url":"https://cashu.space","kyc":"none","kycLevel":0,"kycNote":"The Cashu protocol has no account or identity-verification layer. Individual custodial mint operators can set their own access, compliance, and fee policies.","fee":"Protocol and mint fees vary; Lightning routing and on-chain fees may also apply.","categories":["Privacy Tools","Wallet"],"countries":["GLOBAL"],"bestFor":["Lightning privacy","Offline Bitcoin payments","Advanced users"],"features":["Chaumian e-cash","Lightning-native","Offline transactions","QR code / Bluetooth transfer","No account required","Open source","Blind signature privacy","Multi-wallet support"],"tagline":"Private Lightning e-cash. The mint can't link sender to receiver. BETA - small amounts only.","status":"ok","updatedAt":"2026-08-25","description":"Chaumian e-cash protocol on Bitcoin Lightning where each mint is a custodian holding the backing funds.","cardSummary":"Chaumian e-cash on Bitcoin Lightning.","networks":["Bitcoin","Lightning Route","FOSS"],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://cashu.space/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Custodial risk: every Cashu mint is a single-sig custodian of your sats. If a mint rugs, is hacked, or disappears, ecash tokens become worthless. Only use trusted mints and keep amounts small. Proof-of-liabilities not yet standardized. Multi-mint splitting helps but adds UX complexity.","auditedBy":[],"corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://cashu.space/","note":"Cashu is described across its official site, docs, GitHub org, and coverage as a free open-source Chaumian ecash protocol for Bitcoin with no operating company; anyone can run mints/wallets, and a separate Swiss nonprofit (OpenCash Association) only funds/supports development without owning it."},"governanceModel":{"value":"maintainer-group","citation":"https://bitcoinmagazine.com/business/ecash-makes-bitcoin-and-fiat-private-with-calle-cashu"},"repositoryUrl":{"value":"https://github.com/cashubtc","citation":"https://github.com/cashubtc"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/CashuBTC","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cashu","canonical_score":35,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":6},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://cashu.space/","https://github.com/cashubtc/nuts/commits/main.atom","https://cashu.space"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://cashu.space/","https://github.com/cashubtc/nuts/commits/main.atom","https://cashu.space"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://cashu.space/","https://github.com/cashubtc/nuts/commits/main.atom","https://cashu.space"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Privacy Tools","primary_bucket":"Privacy Tools","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Cashu is described across its official site, docs, GitHub org, and coverage as a free open-source Chaumian ecash protocol for Bitcoin with no operating company; anyone can run mints/wallets, and a separate Swiss nonprofit (OpenCash Association) only funds/supports development without owning it.","governance_model":"maintainer-group","repository_url":"https://github.com/cashubtc","legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://cashu.space/","note":null,"agent_verified":false},"governanceModel":{"url":"https://bitcoinmagazine.com/business/ecash-makes-bitcoin-and-fiat-private-with-calle-cashu","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":1},"total_sources":3},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"changehero","name":"ChangeHero","domain":"changehero.io","url":"https://changehero.io/","kyc":"light","kycLevel":1,"kycNote":"No account for basic swaps; fiat/card flows and flagged transactions can require email, one-time verification, or AML/KYC documents.","fee":"Up to 0.5% Best Rate / up to 0.7% Fixed Rate","limit":"Crypto swaps: no hard maximum; fiat purchases: €25 minimum","categories":["Swap"],"countries":["GLOBAL"],"features":["No account","ZEC supported","XMR supported","Instant","Fixed + floating rate","350+ swap assets","150+ fiat-purchase assets"],"status":"ok","updatedAt":"2026-08-25","description":"No-account crypto swap and fiat on-ramp advertising no KYC to 700 EUR, with terms reserving AML document requests.","cardSummary":"No-account swaps and fiat on-ramp.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://changehero.io/","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"CR","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Canadian MSB/Five Eyes exposure via MoneyMaple Tech Ltd.; terms allow AML/KYC procedures and identity-document requests.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://changehero.io/press-kit","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"HEROFINTECHS LIMITADA","citation":"https://changehero.io/press-kit"},"registrationNumber":{"value":"4062001322968","citation":"https://changehero.io/press-kit"},"incorporationJurisdiction":{"value":"Costa Rica","citation":"https://changehero.io/press-kit"},"registeredAddress":{"value":"Los Yoses, Cale 39. Avenidas, 8 & 9, San José, San Pedro, 11501, Costa Rica","citation":"https://changehero.io/press-kit"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/changehero_io","telegram":"https://t.me/changehero","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/changehero","canonical_score":34,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://changehero.io/","https://changehero.io/legal/privacy-policy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"CR","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"HEROFINTECHS LIMITADA","registration_number":"4062001322968","registry_url":null,"incorporation_jurisdiction":"Costa Rica","incorporation_date":null,"registered_address":"Los Yoses, Cale 39. Avenidas, 8 & 9, San José, San Pedro, 11501, Costa Rica","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://changehero.io/press-kit","note":null,"agent_verified":false},"registrationNumber":{"url":"https://changehero.io/press-kit","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://changehero.io/press-kit","note":null,"agent_verified":false},"registeredAddress":{"url":"https://changehero.io/press-kit","note":null,"agent_verified":false},"entityType":{"url":"https://changehero.io/press-kit","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":5},"total_sources":5},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: CR"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"CR","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"cheapgpt","name":"CheapGPT","domain":"cheapgp.selly.store","url":"https://cheapgp.selly.store/","kyc":"light","kycLevel":1,"kycNote":"The storefront and checkout show email delivery without a CheapGPT account or identity-document step. Selly and payment providers also receive customer and transaction data.","fee":"Varies by voucher. A separate buyer-fee schedule is not published.","limit":null,"categories":["Developer Tools"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["AI and software vouchers","Email delivery","Crypto and fiat payment methods","Purchase-protection claim"],"tagline":null,"status":"warning","updatedAt":"2026-09-05","changedAt":null,"description":"Selly-hosted storefront selling AI subscription and voucher products such as Perplexity, Grammarly and Picsart.","cardSummary":"Storefront for AI subscriptions and vouchers.","networks":[],"checkedAt":"2026-09-05","lastReviewed":"2026-09-05","reviewSource":"https://cheapgp.selly.store/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"??","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"Selly's policy permits collection of email, IP address, browser, device and payment details, with some information shared with the seller. Payments go directly to sellers without Selly escrow. CheapGPT does not disclose its legal operator or retention terms; voucher validity depends on the reseller and issuing platform.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"https://cheapgp.selly.store/","note":"The current official storefront does not disclose a legal operator or jurisdiction."},"source":"Official primary source review 2026-09-05","reviewedAt":"2026-09-05"},"twitter":null,"telegram":"https://t.me/CheapGPTStore","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cheapgpt","canonical_score":41,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":7,"transparency":1,"security":17,"accountability":2},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 2 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-09-05","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://selly.io/privacy","https://cheapgp.selly.store/contact"],"reviewedAt":"2026-09-05","note":"Selly may collect email, IP, browser, operating system and payment data, and share customer metadata with the merchant."},"controlModel":{"value":"hosted-account","sourceUrls":["https://selly.io/terms","https://cheapgp.selly.store/"],"reviewedAt":"2026-09-05","note":"Hosted reseller storefront. Selly says payments go directly to sellers and it provides no escrow."},"sourceModel":{"value":"closed","sourceUrls":["https://cheapgp.selly.store/"],"reviewedAt":"2026-09-05","note":"Hosted voucher storefront; no merchant application source is published."}},"audit":{"scoreEligible":false,"reason":"No audit evidence."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Developer Tools","primary_bucket":"Privacy Tools","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":1},"total_sources":1},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 33 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"??","jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-09-05","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"clearswap","name":"ClearSwap","domain":"clearswap.io","url":"https://clearswap.io/","kyc":"light","kycLevel":1,"kycNote":"No current KYC policy was found. This does not establish that verification is never required.","fee":null,"limit":null,"categories":["Swap"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Open-source protocol","Peer-to-peer and liquidity-pool swaps","On-chain and cross-chain swaps","EVM and non-EVM token interface","Staking"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Cross-network swap app with generic terms rather than a stated no-KYC policy, and Google Analytics on its site.","cardSummary":"Swap app for confidential cross-network swaps.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"ClearSwap exposes an open-source swap protocol through an interface operated by an unnamed Administration. Its policy permits collection of wallet, IP, device and interaction data, cookies and web beacons, and the current site loads Google Analytics. The legal operator, incorporation jurisdiction, KYC policy and reusable limits remain undisclosed.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf","note":"Current terms identify only an unnamed Administration and do not establish a registered legal entity."},"repositoryUrl":{"value":"https://github.com/Cryptorubic","citation":"https://clearswap.io/pdf/clearswap-terms-of-use.pdf"},"source":"Official primary source review 2026-09-05","reviewedAt":"2026-09-05"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/clearswap","canonical_score":49,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":0,"security":17,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 3 of 10 points.","Limited evidence: sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"email, wallet, device/browser/IP, cookies and Google Analytics data"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"hosted-frontend-over-third-party-protocols"},"sourceModel":{"value":"unknown","sourceUrls":["https://clearswap.io/pdf/clearswap-terms-of-use.pdf"],"reviewedAt":"2026-08-27","note":"claimed-open-protocol-unverified-deployment"}},"audit":{"scoreEligible":false,"reason":"No independent audit or vulnerability-disclosure evidence."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":null,"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":2},"total_sources":2},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coincards","name":"CoinCards","domain":"coincards.com","url":"https://coincards.com/","kyc":"light","kycLevel":2,"kycNote":"Coincards can request identity, address and source documents before providing service.","fee":null,"limit":null,"categories":["Gift Cards"],"countries":["US","CA","EU","UK"],"features":["US and Canada storefront","Electronic gift cards","Physical gift cards","Mobile top-ups"],"status":"warning","updatedAt":"2026-09-05","description":"Canadian gift cards and top-ups from Stuff Technologies Inc., paid in Bitcoin, Lightning, Monero or Litecoin.","cardSummary":"Canadian gift cards and top-ups for crypto.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://coincards.com/terms-conditions/","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"CA","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Coincards may require identity verification before service and can request formal identity, address and source documents. The service collects transaction, device, IP and fraud-control data and shares data with payment, fulfillment, compliance and legal recipients. Product fees and limits vary.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://coincards.com/terms-conditions/","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Stuff Technologies Inc.","citation":"https://coincards.com/terms-conditions/"},"incorporationJurisdiction":{"value":"Canada","citation":"https://coincards.com/terms-conditions/"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/coincards","telegram":"https://t.me/coincardsofficial","incidents":[{"title":"Security Incident - August 04, 2025","status":"active","severity":"high","startedAt":"2025-08-04","summary":"Retain incident in canonical data and require a quantified final remediation/affected-user update before treating it as fully resolved.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"unknown","sources":[{"label":"Security Incident - August 04, 2025","href":"https://coincards.com/security-incident-august-04-2025/"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":217,"productName":"Coincards gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":{"percentage":0,"fixed":0,"currency":"USD"},"load":{"percentage":0,"fixed":0,"currency":"USD"},"spend":{"percentage":0,"fixed":0,"currency":"USD"},"fx":null,"monthly":{"percentage":0,"fixed":0,"currency":"USD"}},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":["USD","CAD"],"supportedRegions":["US","CA"],"expiry":null,"kycThreshold":null,"sources":[{"label":"Coincards FAQ","url":"https://coincards.com/faq/","reviewedAt":"2026-08-09"}],"note":"Coincards records no service fee, but product limits and the identity threshold were not recorded."}],"details_url":"https://cunicula.com/en/provider/coincards","canonical_score":33,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":7,"transparency":1,"security":12,"accountability":7},"applied_caps":[{"key":"active-high-incident","maximum":39,"reason":"An unresolved high-severity incident limits the score to 39."},{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 12 of 25 points.","accountability: 7 of 10 points.","An unresolved high-severity incident limits the score to 39.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://coincards.com/terms-conditions/"],"reviewedAt":"2026-08-27","note":"account/order/payment, identity/EDD and fraud-prevention data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://coincards.com/terms-conditions/"],"reviewedAt":"2026-08-27","note":"operator-gift-card-merchant"},"sourceModel":{"value":"closed","sourceUrls":["https://coincards.com/security-incident-august-04-2025/"],"reviewedAt":"2026-08-27","note":"closed-service"}},"audit":{"scoreEligible":false,"reason":"No current independent audit evidence."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"CA","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Stuff Technologies Inc.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Canada","incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coincards.com/terms-conditions/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://coincards.com/terms-conditions/","note":null,"agent_verified":false},"entityType":{"url":"https://coincards.com/terms-conditions/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":4},"total_sources":4},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: CA (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.237Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"CA","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coinflip","name":"CoinFlip","domain":"coinflip.tech","url":"https://coinflip.tech/","kyc":"light","kycLevel":2,"kycNote":"Identity requirements depend on the service and transaction tier and can include ID, selfie and source-of-funds checks.","fee":"Kiosk and cashier transactions: 4.99% to 21.90%; Preferred: 0.5% to 9.99%; minimum USD 2.49 network fee also applies","limit":null,"categories":["Bitcoin ATM"],"countries":["US","CA"],"features":["US","Buy & Sell","Cash"],"status":"ok","updatedAt":"2026-09-05","description":"CoinFlip/Olliv crypto ATM and wallet service, with US ATM locations and a separate EU page operating under MiCA.","cardSummary":"Crypto ATM and wallet service.","networks":["atm"],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://coinflip.tech/terms/terms-of-service","jurisdictionConfidence":"inferred","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"CoinFlip uses tiered identity and transaction monitoring. Depending on service and limit, it can collect identity documents, Social Security number, source-of-funds evidence, location, device, session-replay, selfie and facial data. Transaction limits vary by verification tier, customer and location. Current terms cover US and Canadian dollar transactions.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://coinflip.tech/terms/terms-of-service","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"GPD Holdings LLC","citation":"https://coinflip.tech/terms/terms-of-service"},"incorporationJurisdiction":{"value":"Delaware","citation":"https://calixsolutions.io/wp-content/uploads/2020/01/CoinFlip-ATM-Placement-Agreement.pdf"},"registeredAddress":{"value":"433 W. Van Buren St., Suite 1050N, Chicago, IL, 60607","citation":"https://apps.sos.wv.gov/business/corporations/organization.aspx?org=497016"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/coinflipatms","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/coinflip","canonical_score":46,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":15,"transparency":1,"security":17,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 15 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 7 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"noncustodial-hosted","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://coinflip.tech/about-us"],"reviewedAt":"2026-08-27","note":"identity, contact, device, location, transaction, marketing and partner data"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://coinflip.tech/about-us"],"reviewedAt":"2026-08-27","note":"regulated-operator-plus-self-custodial-wallet"},"sourceModel":{"value":"closed","sourceUrls":["https://coinflip.tech/about-us"],"reviewedAt":"2026-08-27","note":"closed-service-with-separate-wallet"}},"audit":{"scoreEligible":false,"reason":"No current product-specific independent audit citation/date/scope found."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"inferred","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Bitcoin ATM","primary_bucket":"ATM","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"GPD Holdings LLC","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Delaware","incorporation_date":null,"registered_address":"433 W. Van Buren St., Suite 1050N, Chicago, IL, 60607","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coinflip.tech/terms/terms-of-service","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://calixsolutions.io/wp-content/uploads/2020/01/CoinFlip-ATM-Placement-Agreement.pdf","note":null,"agent_verified":false},"registeredAddress":{"url":"https://apps.sos.wv.gov/business/corporations/organization.aspx?org=497016","note":null,"agent_verified":false},"entityType":{"url":"https://coinflip.tech/terms/terms-of-service","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":2},"total_sources":4},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; inferred jurisdiction: US"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"inferred","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coingate-gift-cards","name":"CoinGate Gift Cards","domain":"coingate.com","url":"https://coingate.com/gift-cards","kyc":"light","kycLevel":2,"kycNote":"Verification can be required before a gift card or its redemption page is released.","fee":null,"limit":null,"categories":["Gift Cards"],"countries":["EU","UK","US"],"features":["6000+ Brands","70+ cryptocurrencies","Cards and mobile wallets","Instant delivery"],"status":"ok","updatedAt":"2026-09-05","description":"Worldwide e-gift card marketplace taking crypto or card, run by Lithuanian UAB Decentralized under EU MiCA.","cardSummary":"Worldwide e-gift cards, crypto or card checkout.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://coingate.com/gift-cards","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"LT","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Rewards Distributed UAB operates CoinGate Gift Cards and collects order, payment, recipient, IP, browser, device and fraud-screening data. Its policy says gift-card purchase records can be kept for 10 years and shared with payment, gift-card, fraud, AML and legal recipients. Verification can be required before a redeem page or gift card is released.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://coingate.com/gift-cards/terms-and-conditions"},"legalEntity":{"value":"Rewards Distributed UAB","citation":"https://coingate.com/gift-cards/terms-and-conditions"},"registrationNumber":{"value":"306096569","citation":"https://coingate.com/gift-cards/terms-and-conditions"},"incorporationJurisdiction":{"value":"Lithuania","citation":"https://coingate.com/gift-cards/terms-and-conditions"},"registeredAddress":{"value":"Laisves pr. 60-1107, Vilnius, Lithuania","citation":"https://coingate.com/gift-cards/terms-and-conditions"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"Official primary source review 2026-09-05","reviewedAt":"2026-09-05"},"twitter":"https://x.com/coingate_cards","telegram":"https://t.me/coingate_gift_cards","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":214,"productName":"CoinGate gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":null,"load":null,"spend":null,"fx":null,"monthly":null},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":null,"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"CoinGate gift-card catalogue","url":"https://coingate.com/gift-cards","reviewedAt":"2026-08-09"}],"note":"Fees and limits are product-specific and were not recorded as a single schedule."}],"details_url":"https://cunicula.com/en/provider/coingate-gift-cards","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":7,"transparency":1,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://coingate.com/gift-cards/terms-and-conditions"],"reviewedAt":"2026-08-27","note":"identity documents when requested plus order, payment, wallet and transaction data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://coingate.com/gift-cards/terms-and-conditions"],"reviewedAt":"2026-08-27","note":"commissioned-purchasing-agent"},"sourceModel":{"value":"closed","sourceUrls":["https://coingate.com/gift-cards"],"reviewedAt":"2026-08-27","note":"closed-service"}},"audit":{"scoreEligible":false,"reason":"Security.txt contact exists but linked policy returns 410; no current gift-card audit report."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"LT","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":null,"governance_model":null,"repository_url":null,"legal_entity":"Rewards Distributed UAB","registration_number":"306096569","registry_url":null,"incorporation_jurisdiction":"Lithuania","incorporation_date":null,"registered_address":"Laisves pr. 60-1107, Vilnius, Lithuania","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coingate.com/gift-cards/terms-and-conditions","note":null,"agent_verified":false},"registrationNumber":{"url":"https://coingate.com/gift-cards/terms-and-conditions","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://coingate.com/gift-cards/terms-and-conditions","note":null,"agent_verified":false},"registeredAddress":{"url":"https://coingate.com/gift-cards/terms-and-conditions","note":null,"agent_verified":false},"entityType":{"url":"https://coingate.com/gift-cards/terms-and-conditions","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"Official primary source review 2026-09-05","reviewed_at":"2026-09-05"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":5},"total_sources":5},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: LT"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"LT","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coinoswap","name":"CoinoSwap","domain":"coinoswap.com","url":"https://coinoswap.com/","kyc":"light","kycLevel":1,"kycNote":"No CoinoSwap account required for aggregator use; partner exchanges/on-ramps may request KYC or enforce thresholds independently.","fee":"No separate CoinoSwap fee; the quoted rate includes exchange costs except blockchain network fees.","limit":null,"categories":["Swap","Aggregator"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Rate comparison","10+ exchange partners","No registration","Fixed and floating rates","1000+ cryptocurrencies","Partner KYC risk indicator"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Non-custodial swap aggregator and rate comparison site whose partner ramps apply their own KYC thresholds.","cardSummary":"Non-custodial swap rate comparison site.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://coinoswap.com/faq","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"CoinoSwap is an aggregator and partner exchanges may require KYC or hold a transaction. CoinoSwap itself records wallet addresses, swap amounts, timestamps, IP and device data, cookies and optional email, and does not state a retention period for transaction or device data.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://coinoswap.com/terms-of-use","note":"Official Terms of Use state that CoinoSwap refers to Coinoisseurs LLC, a registered company in Wyoming, USA; site lists a Wyoming legal address and operates as a hosted swap aggregator."},"legalEntity":{"value":"Coinoisseurs LLC","citation":"https://coinoswap.com/terms-of-use"},"registrationNumber":{"value":"2024-001534402","citation":"https://thegrid.id/profiles/coinoswap"},"registryUrl":{"value":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx","citation":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx"},"incorporationJurisdiction":{"value":"Wyoming, United States","citation":"https://coinoswap.com/terms-of-use"},"registeredAddress":{"value":"1309 Coffeen Avenue, Suite 16200, Sheridan, Wyoming 82801","citation":"https://coinoswap.com/about-us"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/coinoswap","canonical_score":52,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":0,"security":17,"accountability":6},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","Limited evidence: sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"wallet addresses, transactions, IP, device/browser/OS, optional email, cookies and partner communications"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"hosted-aggregator-over-partners"},"sourceModel":{"value":"unknown","sourceUrls":["https://coinoswap.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"closed-or-undisclosed"}},"audit":{"scoreEligible":false,"reason":"No audit/security disclosure evidence."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"unknown","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Official Terms of Use state that CoinoSwap refers to Coinoisseurs LLC, a registered company in Wyoming, USA; site lists a Wyoming legal address and operates as a hosted swap aggregator.","governance_model":null,"repository_url":null,"legal_entity":"Coinoisseurs LLC","registration_number":"2024-001534402","registry_url":"https://wyobiz.wyo.gov/Business/FilingSearch.aspx","incorporation_jurisdiction":"Wyoming, United States","incorporation_date":null,"registered_address":"1309 Coffeen Avenue, Suite 16200, Sheridan, Wyoming 82801","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false},"registrationNumber":{"url":"https://thegrid.id/profiles/coinoswap","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false},"registeredAddress":{"url":"https://coinoswap.com/about-us","note":null,"agent_verified":false},"entityType":{"url":"https://coinoswap.com/terms-of-use","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":4},"total_sources":6},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"coinsbee","name":"Coinsbee","domain":"coinsbee.com","url":"https://www.coinsbee.com/","kyc":"light","kycLevel":2,"kycNote":"Official KYC/AML page says verification is via Sumsub; unverified limits are max €1,000 per order and €10,000 total, and some products are only available to verified accounts.","fee":"1.5%","limit":"10,000 daily (currency not recorded)","categories":["Gift Cards"],"countries":["US","UK","EU","AU","IN","CA","ZA","NG","KE","MX","BR","AR"],"features":["5,000+ brands","200+ cryptocurrencies","185+ countries","Instant delivery"],"status":"ok","updatedAt":"2026-08-25","description":"Gift-card and mobile top-up marketplace with 5,000+ brands in 185+ countries; verification is required past applicable limits.","cardSummary":"5,000+ gift-card brands and top-ups in 185+ countries.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://www.coinsbee.com/","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"DE","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Coinsbee GmbH is German/EU-regulated; account/order data, crypto payment metadata and Sumsub KYC data can be collected when limits or product rules trigger verification.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.coinsbee.com/en/imprint/","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Coinsbee GmbH","citation":"https://www.coinsbee.com/en/imprint/"},"registrationNumber":{"value":"HRB 767979","citation":"https://www.coinsbee.com/en/imprint/"},"registryUrl":{"value":"https://www.coinsbee.com/en/imprint/","citation":"https://www.coinsbee.com/en/imprint/"},"incorporationJurisdiction":{"value":"Germany","citation":"https://www.coinsbee.com/en/about-us/"},"incorporationDate":{"value":"January 2019","citation":"https://www.coinsbee.com/en/about-us/"},"registeredAddress":{"value":"Lautenschlagerstr. 16, 70173 Stuttgart","citation":"https://www.coinsbee.com/en/imprint/"},"officers":{"value":["Tobias Sorn"],"citation":"https://www.coinsbee.com/en/imprint/"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/coinsbee","telegram":"https://t.me/coinsbee","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":103,"productName":"Coinsbee gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":null,"load":null,"spend":null,"fx":null,"monthly":null},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":null,"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"Coinsbee FAQ","url":"https://www.coinsbee.com/en/faq/","reviewedAt":"2026-08-09"}],"note":"The provider directs buyers to checkout for the final fee. A reusable schedule was not recorded."}],"details_url":"https://cunicula.com/en/provider/coinsbee","canonical_score":31,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://www.coinsbee.com/","https://www.coinsbee.com/en/terms-and-privacy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://www.coinsbee.com/","https://www.coinsbee.com/en/terms-and-privacy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://www.coinsbee.com/","https://www.coinsbee.com/en/terms-and-privacy"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Coinsbee GmbH","registration_number":"HRB 767979","registry_url":"https://www.coinsbee.com/en/imprint/","incorporation_jurisdiction":"Germany","incorporation_date":"January 2019","registered_address":"Lautenschlagerstr. 16, 70173 Stuttgart","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Tobias Sorn","role":null}],"citations":{"legalEntity":{"url":"https://www.coinsbee.com/en/imprint/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.coinsbee.com/en/imprint/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.coinsbee.com/en/about-us/","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.coinsbee.com/en/about-us/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.coinsbee.com/en/imprint/","note":null,"agent_verified":false},"officers":{"url":"https://www.coinsbee.com/en/imprint/","note":null,"agent_verified":false},"entityType":{"url":"https://www.coinsbee.com/en/imprint/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":8},"total_sources":8},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: DE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"coldcard","name":"Coldcard","domain":"coldcard.com","url":"https://coldcard.com/","kyc":"none","kycLevel":0,"kycNote":"No account, no KYC for firmware use. Hardware purchase may expose shipping address.","fee":"Mk5 USD 189; Q USD 289","categories":["Wallet","Privacy Tools"],"countries":["GLOBAL"],"bestFor":["Cold storage","Air-gapped Bitcoin signing","Maximum self-custody"],"features":["Air-gapped signing","Bitcoin-only","Verifiable firmware source","Duress PIN","PSBT via MicroSD","Sparrow compatible","No companion app required","Dual secure elements","Mk5 and Q models"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","description":"Bitcoin-only air-gapped hardware signer by Coinkite with PSBT signing over MicroSD or QR and duress PIN support.","cardSummary":"Bitcoin-only air-gapped hardware signer.","networks":["BTC"],"checkedAt":"2026-08-25","lastReviewed":"2026-09-05","reviewSource":"https://coldcard.com/security/status","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"CA","evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"A July 2026 firmware random-number-generator defect weakened seeds generated on affected Coldcard versions and was exploited offline to steal funds. Devices were not remotely hacked. Installing fixed firmware does not repair an existing weak seed. Users who generated a seed on an affected version must follow Coinkite's migration procedure and move funds to a new seed unless the documented dice-roll exception applies.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://coldcard.com/about","note":"Official Coldcard about page and Coinkite terms state Coldcard is made by Coinkite Inc., a real operating Canadian vendor/shop."},"governanceModel":{"value":"company-sponsored","citation":"https://coldcard.com/about"},"repositoryUrl":{"value":"https://github.com/Coldcard/firmware","citation":"https://github.com/Coldcard/firmware"},"legalEntity":{"value":"Coinkite Inc.","citation":"https://coldcard.com/about"},"incorporationJurisdiction":{"value":"Ontario, Canada","citation":"https://coinkite.com/terms-of-use"},"registeredAddress":{"value":"3219 Yonge St., Unit 376, Toronto, ON M4N 3S1, Canada","citation":"https://coinkite.com/terms-of-use"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/COLDCARDwallet","incidents":[{"title":"2021-2026 firmware RNG entropy defect and Bitcoin theft","status":"monitoring","severity":"critical","startedAt":"2026-07-30","summary":"Affected firmware could generate wallet seeds through a deterministic software fallback rather than the hardware RNG. Affected releases include Mk2 and Mk3 4.0.1 through 4.1.9, Mk4 and Mk5 before 5.6.0, Q before 1.5.0Q, and Edge before 6.6.0X or 6.6.0QX. Current recommended standard releases are Mk4 and Mk5 5.6.2 and Q 1.5.2Q. Updating firmware prevents newly affected seeds but does not repair an existing affected seed. A BIP-39 passphrase does not repair the seed; users must migrate under the official guidance unless its exact independent-dice condition applies. The formal technical postmortem remains unpublished.","directUserHarm":true,"customerDataOrAssetsCompromised":true,"disclosure":"delayed","remediation":"partial","sources":[{"label":"Coinkite security advisory","href":"https://blog.coinkite.com/coldcard-mk3-seed-generation-warning/"},{"label":"Coinkite technical backgrounder","href":"https://blog.coinkite.com/entropy-technical-backgrounder/"},{"label":"Coldcard firmware changelog","href":"https://github.com/Coldcard/firmware/blob/master/releases/ChangeLog.md"},{"label":"Block Engineering independent analysis","href":"https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware"},{"label":"COLDCARD current security status and release guidance","href":"https://coldcard.com/security/status"},{"label":"COLDCARD affected-seed migration guide","href":"https://coldcard.com/security/migrate"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/coldcard","canonical_score":19,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":0,"accountability":7},"applied_caps":[{"key":"active-critical-incident","maximum":20,"reason":"An unresolved critical incident limits the score to 20."},{"key":"unresolved-material-compromise","maximum":49,"reason":"An unresolved customer-data or asset compromise limits the score to 49."},{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 0 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","An unresolved critical incident limits the score to 20.","An unresolved customer-data or asset compromise limits the score to 49.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://coldcard.com/security/status","https://x.com/COLDCARDwallet/status/2083155034762621425","https://x.com/Coinkite/status/2084630256296624637","https://x.com/COLDCARDwallet/status/2090459345301488071","https://coldcard.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://coldcard.com/security/status","https://x.com/COLDCARDwallet/status/2083155034762621425","https://x.com/Coinkite/status/2084630256296624637","https://x.com/COLDCARDwallet/status/2090459345301488071","https://coldcard.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://coldcard.com/security/status","https://x.com/COLDCARDwallet/status/2083155034762621425","https://x.com/Coinkite/status/2084630256296624637","https://x.com/COLDCARDwallet/status/2090459345301488071","https://coldcard.com/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"CA","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Wallet","primary_bucket":"Wallet","corporate_identity":{"entity_type":"company","entity_type_note":"Official Coldcard about page and Coinkite terms state Coldcard is made by Coinkite Inc., a real operating Canadian vendor/shop.","governance_model":"company-sponsored","repository_url":"https://github.com/Coldcard/firmware","legal_entity":"Coinkite Inc.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Ontario, Canada","incorporation_date":null,"registered_address":"3219 Yonge St., Unit 376, Toronto, ON M4N 3S1, Canada","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://coldcard.com/about","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://coinkite.com/terms-of-use","note":null,"agent_verified":false},"registeredAddress":{"url":"https://coinkite.com/terms-of-use","note":null,"agent_verified":false},"entityType":{"url":"https://coldcard.com/about","note":null,"agent_verified":false},"governanceModel":{"url":"https://coldcard.com/about","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":7,"self-reported":5},"total_sources":12},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: CA (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"CA","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"cryptomator","name":"Cryptomator","domain":"cryptomator.org","url":"https://cryptomator.org/","kyc":"none","kycLevel":0,"kycNote":"No account and no identity check for the desktop app. Encryption runs locally, so Skymatic never receives file contents or a user account. Buying a mobile licence or Hub seat is a normal commercial purchase and does create a payment record with Skymatic and its processors.","fee":"Free on desktop, EUR 29.99 one-time per mobile platform","categories":["Privacy Tools"],"countries":["GLOBAL"],"bestFor":["Encrypting files before cloud upload","Using untrusted cloud storage","No-account local encryption"],"features":["Client-side vault encryption","Works with any cloud storage","Unlimited vaults","Open source","Independently audited","Free on Windows, macOS, and Linux","No account required","Filename encryption","Cryptomator Hub for teams"],"tagline":"Client-side vault encryption for any cloud storage, free on desktop.","status":"ok","updatedAt":"2026-08-25","description":"Client-side encryption for files you keep in any cloud. Free on desktop, one-time purchase on mobile, no account needed.","cardSummary":"Local vault encryption for any cloud, no account.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"official_cryptomator_site_legal_pricing_repo_advisories_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"DE","noOperatorData":true,"evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Cryptomator protects file contents and filenames inside a vault, but it does not hide the vault itself: the cloud provider still sees vault size, file count, and modification times. Mobile apps are free only in read-only mode, and a paid licence is tied to one platform.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://cryptomator.org/impressum/","note":"Official Impressum and Privacy Policy identify Skymatic GmbH as the responsible operating company for Cryptomator and related services."},"governanceModel":{"value":"company-sponsored","citation":"https://github.com/cryptomator"},"repositoryUrl":{"value":"https://github.com/cryptomator/cryptomator","citation":"https://github.com/cryptomator/cryptomator"},"legalEntity":{"value":"Skymatic GmbH","citation":"https://cryptomator.org/impressum/"},"registrationNumber":{"value":"HRB 22635","citation":"https://cryptomator.org/impressum/"},"incorporationJurisdiction":{"value":"Germany (Amtsgericht Bonn)","citation":"https://cryptomator.org/impressum/"},"registeredAddress":{"value":"Am Hauptbahnhof 6, 53111 Bonn, Germany","citation":"https://cryptomator.org/impressum/"},"officers":{"value":["Tobias Hagemann (Geschäftsführer)","Sebastian Stenzel (Geschäftsführer)"],"citation":"https://cryptomator.org/impressum/"},"source":"official Cryptomator Impressum, privacy policy, terms, pricing, and repository","reviewedAt":"2026-08-25"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cryptomator","canonical_score":45,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://cryptomator.org/","https://cryptomator.org/pricing/","https://cryptomator.org/privacy/","https://cryptomator.org/impressum/","https://cryptomator.org/terms/","https://docs.cryptomator.org/security/security-target/","https://github.com/cryptomator/cryptomator/releases/tag/1.19.3","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-9q8x-whrw-x44p","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-34rf-rwr3-7g43"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://cryptomator.org/","https://cryptomator.org/pricing/","https://cryptomator.org/privacy/","https://cryptomator.org/impressum/","https://cryptomator.org/terms/","https://docs.cryptomator.org/security/security-target/","https://github.com/cryptomator/cryptomator/releases/tag/1.19.3","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-9q8x-whrw-x44p","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-34rf-rwr3-7g43"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://cryptomator.org/","https://cryptomator.org/pricing/","https://cryptomator.org/privacy/","https://cryptomator.org/impressum/","https://cryptomator.org/terms/","https://docs.cryptomator.org/security/security-target/","https://github.com/cryptomator/cryptomator/releases/tag/1.19.3","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-9q8x-whrw-x44p","https://github.com/cryptomator/cryptomator/security/advisories/GHSA-34rf-rwr3-7g43"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":false,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Privacy Tools","primary_bucket":"Privacy Tools","corporate_identity":{"entity_type":"company","entity_type_note":"Official Impressum and Privacy Policy identify Skymatic GmbH as the responsible operating company for Cryptomator and related services.","governance_model":"company-sponsored","repository_url":"https://github.com/cryptomator/cryptomator","legal_entity":"Skymatic GmbH","registration_number":"HRB 22635","registry_url":null,"incorporation_jurisdiction":"Germany (Amtsgericht Bonn)","incorporation_date":null,"registered_address":"Am Hauptbahnhof 6, 53111 Bonn, Germany","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Tobias Hagemann (Geschäftsführer)","role":null},{"name":"Sebastian Stenzel (Geschäftsführer)","role":null}],"citations":{"legalEntity":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"officers":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"entityType":{"url":"https://cryptomator.org/impressum/","note":null,"agent_verified":false},"governanceModel":{"url":"https://github.com/cryptomator","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"official Cryptomator Impressum, privacy policy, terms, pricing, and repository","reviewed_at":"2026-08-25"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":2,"self-reported":7},"total_sources":9},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Local software or protocol with no hosted operator data"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":0,"noOperatorData":true,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"crypton-sh","name":"Crypton.sh","domain":"crypton.sh","url":"https://crypton.sh/","kyc":"none","kycLevel":0,"kycNote":"No name, email or identity KYC advertised for guest/no-account flows; accounts, card/bank payments and support can still collect email/payment metadata.","fee":null,"limit":null,"categories":["Comms"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Anonymous SMS","eSIM","Crypto only","No accounts","No-KYC"],"tagline":null,"status":"ok","updatedAt":"2026-06-22","changedAt":null,"description":"Phone numbers, travel eSIMs, email aliases and SMS from Rinzler Labs, a Scotland-registered operator.","cardSummary":"Phone numbers, eSIMs and email aliases.","networks":[],"checkedAt":"2026-06-24","lastReviewed":"2026-06-22","reviewSource":"official_site_batch_5_2026-06-22","jurisdictionConfidence":"verified","kycLastChecked":"2026-06-22","trending":false,"jurisdiction":"GB","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Telecom numbers/eSIMs are carrier-facing services; payment, phone-number use, account login and support flows can create metadata even when identity KYC is not required.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://crypton.sh/terms-and-conditions","note":"Terms and privacy state the service is operated by Rinzler Labs (SC769904), confirmed on Companies House and rinzler.ch as operator of Crypton.sh."},"legalEntity":{"value":"RINZLER LABS LIMITED","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"registrationNumber":{"value":"SC769904","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"registryUrl":{"value":"https://find-and-update.company-information.service.gov.uk/company/SC769904","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"incorporationJurisdiction":{"value":"Scotland, United Kingdom","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"incorporationDate":{"value":"2023-05-18","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"registeredAddress":{"value":"5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904"},"ultimateOwner":{"value":"Aleksander Jarmoszuk","citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904/persons-with-significant-control"},"officers":{"value":["Aleksander Jarmoszuk (Director)"],"citation":"https://find-and-update.company-information.service.gov.uk/company/SC769904/officers"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/crypton-sh","canonical_score":47,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":10},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 10 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://crypton.sh/","https://crypton.sh/terms-and-conditions","https://crypton.sh/privacy","https://crypton.sh/security/ack"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://crypton.sh/","https://crypton.sh/terms-and-conditions","https://crypton.sh/privacy","https://crypton.sh/security/ack"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://crypton.sh/","https://crypton.sh/terms-and-conditions","https://crypton.sh/privacy","https://crypton.sh/security/ack"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"GB","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Comms","primary_bucket":"Comms","corporate_identity":{"entity_type":"company","entity_type_note":"Terms and privacy state the service is operated by Rinzler Labs (SC769904), confirmed on Companies House and rinzler.ch as operator of Crypton.sh.","governance_model":null,"repository_url":null,"legal_entity":"RINZLER LABS LIMITED","registration_number":"SC769904","registry_url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","incorporation_jurisdiction":"Scotland, United Kingdom","incorporation_date":"2023-05-18","registered_address":"5 South Charlotte Street, Edinburgh, Scotland, EH2 4AN","parent_entity":null,"ultimate_owner":"Aleksander Jarmoszuk","prior_entities":[],"officers":[{"name":"Aleksander Jarmoszuk (Director)","role":null}],"citations":{"legalEntity":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","note":null,"agent_verified":false},"registrationNumber":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","note":null,"agent_verified":false},"incorporationDate":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","note":null,"agent_verified":false},"registeredAddress":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904/persons-with-significant-control","note":null,"agent_verified":false},"officers":{"url":"https://find-and-update.company-information.service.gov.uk/company/SC769904/officers","note":null,"agent_verified":false},"entityType":{"url":"https://crypton.sh/terms-and-conditions","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":8,"self-reported":2},"total_sources":10},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: GB (Five Eyes context)"}],"evidence_confidence":87,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 108 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"GB","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-06-24","lastReviewed":"2026-06-22","kycLastChecked":"2026-06-22"}},{"slug":"cryptorefills","name":"CryptoRefills","domain":"cryptorefills.com","url":"https://www.cryptorefills.com/","kyc":"light","kycLevel":1,"kycNote":"Homepage advertises no KYC for standard purchases. Terms allow Tier 3/full KYC with photo ID and live image for suspicious/risk patterns; accounts use legal name/email, travel requires passenger/identity data, and open-loop payment processors apply separate terms.","fee":"No fixed platform fee published; final total is shown at checkout and blockchain network fees vary","categories":["Gift Cards"],"countries":["US","EU","UK","AU","IN","ZA","NG","KE","BR","AR","MX"],"features":["Flights & Hotels","eSIMs","Mobile Top-Ups","6,600+ products","100+ cryptocurrencies","AI-agent purchasing (MCP/x402)","eSIM data-balance tracking"],"status":"ok","updatedAt":"2026-08-25","description":"Gift cards, eSIMs, mobile top-ups, flights and stays across 6,600+ products in 180+ countries, payable with 100+ cryptocurrencies; risk and travel cases can trigger identity data.","cardSummary":"Gift cards, top-ups and travel bought with crypto.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"inferred","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"NL","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"No-KYC marketing is limit/risk-dependent; privacy policy covers passenger/guest data for travel bookings plus fraud, legal and traffic-data processing.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://www.cryptorefills.com/en/terms-of-service","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Big Dream Ventures B.V.","citation":"https://www.cryptorefills.com/en/terms-of-service"},"registrationNumber":{"value":"63338149","citation":"https://www.cryptorefills.com/en/terms-of-service"},"registryUrl":{"value":"https://www.kvk.nl/","citation":"https://www.cryptorefills.com/en/terms-of-service"},"incorporationJurisdiction":{"value":"The Netherlands","citation":"https://www.cryptorefills.com/en/terms-of-service"},"registeredAddress":{"value":"Keizersgracht 482, 1017 EG Amsterdam, The Netherlands","citation":"https://play.google.com/store/apps/details?id=com.cryptorefills"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/cryptorefills","telegram":"https://t.me/cryptorefillsofficial","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":215,"productName":"CryptoRefills gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":null,"load":null,"spend":null,"fx":null,"monthly":null},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":null,"supportedRegions":null,"expiry":null,"kycThreshold":null,"sources":[{"label":"CryptoRefills terms","url":"https://www.cryptorefills.com/en/terms-and-conditions","reviewedAt":"2026-08-09"}],"note":"The reviewed provider material did not record a complete reusable fee schedule."}],"details_url":"https://cunicula.com/en/provider/cryptorefills","canonical_score":33,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://www.cryptorefills.com/","https://www.cryptorefills.com/en/terms-of-service","https://www.cryptorefills.com/en/help/payments","https://x.com/Cryptorefills/status/2087890693838766345"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://www.cryptorefills.com/","https://www.cryptorefills.com/en/terms-of-service","https://www.cryptorefills.com/en/help/payments","https://x.com/Cryptorefills/status/2087890693838766345"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://www.cryptorefills.com/","https://www.cryptorefills.com/en/terms-of-service","https://www.cryptorefills.com/en/help/payments","https://x.com/Cryptorefills/status/2087890693838766345"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"NL","jurisdiction_confidence":"inferred","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Big Dream Ventures B.V.","registration_number":"63338149","registry_url":"https://www.kvk.nl/","incorporation_jurisdiction":"The Netherlands","incorporation_date":null,"registered_address":"Keizersgracht 482, 1017 EG Amsterdam, The Netherlands","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://www.cryptorefills.com/en/terms-of-service","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.cryptorefills.com/en/terms-of-service","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.cryptorefills.com/en/terms-of-service","note":null,"agent_verified":false},"registeredAddress":{"url":"https://play.google.com/store/apps/details?id=com.cryptorefills","note":null,"agent_verified":false},"entityType":{"url":"https://www.cryptorefills.com/en/terms-of-service","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":5},"total_sources":6},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; inferred jurisdiction: NL"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"NL","jurisdictionConfidence":"inferred","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"cryptostorm","name":"Cryptostorm","domain":"cryptostorm.is","url":"https://cryptostorm.is/","kyc":"none","kycLevel":0,"kycNote":"No account KYC for token use; XMR and NOWPayments options avoid email according to official privacy policy. Card/CCBill paths retain payment processor transaction IDs.","fee":"$1.86/week; $6/month; $16/three months; $28/six months; $52/year; $94/two years; simultaneous-device limits vary by duration.","limit":null,"categories":["VPN"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["Token-based","No accounts","No email for XMR/NOWPayments","Tor and I2P access","OpenVPN","WireGuard","Multihop","Open-source tooling"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Token-based VPN with no account or email on the XMR purchase path, plus Tor and I2P site access and multihop.","cardSummary":"Token-based VPN reachable over Tor and I2P.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://cryptostorm.is/privacy","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Cryptostorm says VPN nodes do not retain per-session activity logs, but its website logs IP, user agent, referrer, request and time for up to two weeks. Applicable payment flows retain email, delivered token and a processor transaction ID; XMR and NOWPayments do not request email. These are operator claims, not an independent audit.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://cryptostorm.is/","note":"Commercial paid VPN service; site footer names Cryptostorm LLC and ToS/FAQ repeatedly refer to the company and its business entities."},"repositoryUrl":{"value":"https://github.com/cryptostorm","citation":"https://github.com/cryptostorm"},"legalEntity":{"value":"Cryptostorm LLC","citation":"https://cryptostorm.is/"},"incorporationJurisdiction":{"value":"Delaware, United States","citation":"https://cryptostorm.is/"},"registeredAddress":{"value":"Dover, DE, US","citation":"https://cryptostorm.is/"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cryptostorm","canonical_score":59,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":21,"control":7,"transparency":8,"security":17,"accountability":6},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 21 of 25 points.","control: 7 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"limited","controlModel":"hosted-account","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"limited","sourceUrls":["https://cryptostorm.is/privacy"],"reviewedAt":"2026-08-27","note":"short-lived web logs, token/payment references and processor-specific data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://cryptostorm.is/privacy"],"reviewedAt":"2026-08-27","note":"operator-hosted-vpn"},"sourceModel":{"value":"partial","sourceUrls":["https://cryptostorm.is/privacy"],"reviewedAt":"2026-08-27","note":"partial-open-source-clients-configs"}},"audit":{"scoreEligible":false,"reason":"No current independent audit citation/date/scope."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"VPN","primary_bucket":"VPN","corporate_identity":{"entity_type":"company","entity_type_note":"Commercial paid VPN service; site footer names Cryptostorm LLC and ToS/FAQ repeatedly refer to the company and its business entities.","governance_model":null,"repository_url":"https://github.com/cryptostorm","legal_entity":"Cryptostorm LLC","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Delaware, United States","incorporation_date":null,"registered_address":"Dover, DE, US","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://cryptostorm.is/","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://cryptostorm.is/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://cryptostorm.is/","note":null,"agent_verified":false},"entityType":{"url":"https://cryptostorm.is/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":4},"total_sources":5},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.238Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"cyphergoat","name":"CypherGoat","domain":"cyphergoat.com","url":"https://cyphergoat.com/","kyc":"light","kycLevel":1,"kycNote":"No CypherGoat account/KYC, but official terms say partnered exchanges may rarely require KYC for AML; privacy policy says some partners may require IP logging.","fee":"No added CypherGoat fee; partner exchange and network fees apply","limit":null,"categories":["Swap","Aggregator"],"countries":["GLOBAL"],"bestFor":["Privacy"],"features":["CypherGoat does not perform KYC; partners may","Rate comparison","No accounts","Non-custodial","Open source web client","SafeRoute split routing"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","changedAt":null,"description":"Open-source Monero-native swap aggregator comparing partner exchanges over non-custodial routing.","cardSummary":"Monero-native open-source swap aggregator.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://cyphergoat.com/","jurisdictionConfidence":"unknown","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"CypherGoat may use affiliate-tracking cookies; for specified compliance-requiring partners it logs IP address, user agent and language, anonymizes destination-address/amount transaction data after 14 days, and may retain partner-required IP logs longer. Partner exchanges have separate policies and may require KYC.","auditedBy":[],"corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://4rkal.com/posts/launching-cyphergoat/","note":"Individual developer 4rkal built and operates the open-source aggregator; Terms, Privacy, About, and Shield pages name only 'CypherGoat' with no registered legal entity, and no company registry records were found."},"governanceModel":{"value":"individual","citation":"https://github.com/4rkal"},"repositoryUrl":{"value":"https://github.com/CypherGoat/web","citation":"https://github.com/CypherGoat/web"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/cyphergoat","canonical_score":60,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":14,"control":15,"transparency":8,"security":17,"accountability":6},"applied_caps":[{"key":"partially-reviewable-critical-core","maximum":79,"reason":"A partially reviewable critical core without current audit evidence limits the score to 79."}],"score_rationale":["privacy: 14 of 25 points.","control: 15 of 20 points.","transparency: 8 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points.","A partially reviewable critical core without current audit evidence limits the score to 79."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"noncustodial-hosted","sourceModel":"partial"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://cyphergoat.com/about"],"reviewedAt":"2026-08-27","note":"wallet/transaction, IP/device and partner exchange data"},"controlModel":{"value":"noncustodial-hosted","sourceUrls":["https://cyphergoat.com/about"],"reviewedAt":"2026-08-27","note":"open-source-hosted-aggregator"},"sourceModel":{"value":"partial","sourceUrls":["https://github.com/CypherGoat/web"],"reviewedAt":"2026-08-27","note":"open-source-web-ui"}},"audit":{"scoreEligible":false,"reason":"Shield/audit claims lack a dated scoped report."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Individual developer 4rkal built and operates the open-source aggregator; Terms, Privacy, About, and Shield pages name only 'CypherGoat' with no registered legal entity, and no company registry records were found.","governance_model":"individual","repository_url":"https://github.com/CypherGoat/web","legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://4rkal.com/posts/launching-cyphergoat/","note":null,"agent_verified":false},"governanceModel":{"url":"https://github.com/4rkal","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":0},"total_sources":3},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"divestos","name":"DivestOS","domain":"divested.dev","url":"https://divested.dev/pages/software","kyc":"none","kycLevel":0,"kycNote":"No account, payment rail or identity KYC; the project is discontinued software, not an active hosted service.","fee":"Free","categories":["Privacy OS"],"countries":["GLOBAL"],"status":"down","updatedAt":"2026-06-22","description":"Discontinued Android and LineageOS privacy fork whose development ended in December 2024 without further updates.","cardSummary":"Discontinued hardened Android fork.","networks":["FOSS"],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"inferred","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":"US","noOperatorData":true,"evidenceStatus":"verified","riskLevel":"danger","privacyWarning":"PROJECT DISCONTINUED December 2024 - no current OS/app/security updates. Treat as historical reference only; use maintained Android privacy OS projects for live devices.","corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://divested.dev/pages/donate","note":"Site describes Divested Computing Group as an umbrella for full-time passion projects by individual Tavi who operates independently of any organization or company; developer explicitly confirmed no legal entity exists and 'Divested Computing Group' is just a professional name."},"governanceModel":{"value":"individual","citation":"https://divested.dev/pages/donate"},"repositoryUrl":{"value":"https://codeberg.org/divested-mobile","citation":"https://codeberg.org/divested-mobile"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"agentUsability":{"status":"hard-blocked","evidence":"The current provider listing is marked down, so this dataset treats agent payment as hard-blocked.","derivedFrom":["status"]},"details_url":"https://cunicula.com/en/provider/divestos","canonical_score":68,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":25,"control":20,"transparency":12,"security":5,"accountability":6},"applied_caps":[],"score_rationale":["privacy: 25 of 25 points.","control: 20 of 20 points.","transparency: 12 of 20 points.","security: 5 of 25 points.","accountability: 6 of 10 points."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"none","controlModel":"local-self-custody","sourceModel":"open"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"none","sourceUrls":["https://divested.dev/pages/software"],"reviewedAt":"2026-08-27","note":"No operator service data path for local archived builds; website logs governed separately."},"controlModel":{"value":"local-self-custody","sourceUrls":["https://divested.dev/pages/software"],"reviewedAt":"2026-08-27","note":"local-user-controlled-archived-software"},"sourceModel":{"value":"open","sourceUrls":["https://codeberg.org/divested-mobile"],"reviewedAt":"2026-08-27","note":"open-source-archived"}},"audit":{"scoreEligible":false,"reason":"No audit points claimed or needed for historical/discontinued classification."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":false,"jurisdiction":"US","jurisdiction_confidence":"inferred","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Privacy OS","primary_bucket":"Privacy Tools","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Site describes Divested Computing Group as an umbrella for full-time passion projects by individual Tavi who operates independently of any organization or company; developer explicitly confirmed no legal entity exists and 'Divested Computing Group' is just a professional name.","governance_model":"individual","repository_url":"https://codeberg.org/divested-mobile","legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://divested.dev/pages/donate","note":null,"agent_verified":false},"governanceModel":{"url":"https://divested.dev/pages/donate","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":2},"total_sources":3},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Local software or protocol with no hosted operator data"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":0,"noOperatorData":true,"jurisdiction":"US","jurisdictionConfidence":"inferred","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"egifter","name":"eGifter","domain":"egifter.com","url":"https://www.egifter.com/crypto","kyc":"light","kycLevel":2,"kycNote":"Terms require an account/email for purchases and say additional measures may be necessary to ensure transaction and payment authenticity; no public no-KYC promise found.","fee":null,"limit":"USD 10,000 across all gift cards; USD 2,000 per brand","categories":["Gift Cards"],"countries":["US"],"features":["US gift cards","Crypto accepted","eGifter Rewards","Instant delivery"],"status":"ok","updatedAt":"2026-09-05","description":"US e-gift marketplace with Visa and brand cards on crypto checkout, subject to account and payment-authenticity checks.","cardSummary":"US e-gift cards with crypto checkout.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://www.egifter.com/en-us/terms","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"eGifter requires an account and collects identity, contact, payment, gift-card order, recipient, device and network data. It uses payment and fraud providers and may request additional information when an order is flagged. Gift-card sales are generally final.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://tsccap.egifter.com/terms","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"GroupGifting.com, Inc.","citation":"https://tsccap.egifter.com/terms"},"incorporationJurisdiction":{"value":"Delaware","citation":"https://tsccap.egifter.com/terms"},"registeredAddress":{"value":"315 Main St., 2nd Fl., Huntington, New York 11743","citation":"https://egifter.pissedconsumer.com/customer-service.html"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"cardFees":[{"serviceId":218,"productName":"eGifter gift-card catalogue","kind":"gift-card","baseCurrency":"USD","fees":{"creation":{"percentage":0,"fixed":0,"currency":"USD"},"load":{"percentage":0,"fixed":0,"currency":"USD"},"spend":{"percentage":0,"fixed":0,"currency":"USD"},"fx":null,"monthly":{"percentage":0,"fixed":0,"currency":"USD"}},"limits":{"minLoad":null,"maxLoad":null,"minTransaction":null,"maxTransaction":null},"supportedCurrencies":["USD"],"supportedRegions":["US"],"expiry":null,"kycThreshold":null,"sources":[{"label":"eGifter gift-card catalogue","url":"https://www.egifter.com/giftcards","reviewedAt":"2026-08-09"}],"note":"No purchase fee is recorded. Product limits and the identity threshold were not recorded."}],"details_url":"https://cunicula.com/en/provider/egifter","canonical_score":39,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":7,"transparency":1,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://tsccap.egifter.com/terms"],"reviewedAt":"2026-08-27","note":"account, identity/contact, order, payment, device/IP and fraud data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://tsccap.egifter.com/terms"],"reviewedAt":"2026-08-27","note":"operator-gift-card-marketplace"},"sourceModel":{"value":"closed","sourceUrls":["https://tsccap.egifter.com/terms"],"reviewedAt":"2026-08-27","note":"closed-service"}},"audit":{"scoreEligible":false,"reason":"No current independent audit evidence."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Gift Cards","primary_bucket":"Gift Cards","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"GroupGifting.com, Inc.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Delaware","incorporation_date":null,"registered_address":"315 Main St., 2nd Fl., Huntington, New York 11743","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://tsccap.egifter.com/terms","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://tsccap.egifter.com/terms","note":null,"agent_verified":false},"registeredAddress":{"url":"https://egifter.pissedconsumer.com/customer-service.html","note":null,"agent_verified":false},"entityType":{"url":"https://tsccap.egifter.com/terms","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":3},"total_sources":4},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"eigenwallet","name":"eigenwallet","domain":"eigenwallet.org","url":"https://eigenwallet.org/","kyc":"none","kycLevel":0,"kycNote":"The official site describes no-account BTC-to-XMR atomic swaps without KYC. EUR/SEPA purchases are a separate path whose identity requirements remain unresolved.","fee":"Varies by maker offer","limit":"Varies by live liquidity","categories":["P2P","Wallet","Swap"],"countries":["GLOBAL"],"bestFor":["BTC to XMR swaps","No-account Monero acquisition","Tor-routed self-custody"],"features":["BTC to XMR atomic swaps","No account","Non-custodial Monero wallet","Built-in Tor","Open source","Onion site"],"tagline":"BTC to XMR atomic swaps with no account, no custodian, and no KYC.","status":"ok","updatedAt":"2026-09-28","description":"Open-source Monero wallet and BTC to XMR atomic swap DEX, formerly UnstoppableSwap, with built-in Tor.","cardSummary":"Monero wallet with BTC to XMR atomic swaps.","networks":["BTC","XMR"],"checkedAt":"2026-06-24","lastReviewed":"2026-06-22","reviewSource":"https://raw.githubusercontent.com/eigenwallet/core/master/CHANGELOG.md","jurisdictionConfidence":"unknown","kycLastChecked":"2026-06-22","jurisdiction":null,"evidenceStatus":"partial","riskLevel":"standard","privacyWarning":"Pricing and liquidity depend on swap makers. Primary sources do not confirm the earlier incident's exact loss, recovery or resolution. EUR/SEPA purchases are separate from Bitcoin-to-Monero swaps; their identity requirements remain unclear.","corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/eigenwallet","canonical_score":40,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 3 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://eigenwallet.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://eigenwallet.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://eigenwallet.org/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"P2P","primary_bucket":"P2P","corporate_identity":null,"evidence_provenance":{"strongest_tier":null,"tiers":[],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":0},"total_sources":0},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":59,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 108 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"partial","checkedAt":"2026-06-24","lastReviewed":"2026-06-22","kycLastChecked":"2026-06-22"}},{"slug":"electrum","name":"Electrum","domain":"electrum.org","url":"https://electrum.org/","kyc":"none","kycLevel":0,"kycNote":"No account, no signup, and no identity check. The software is downloaded and run locally, so there is no operator holding a customer record. The site states the wallet is distributed under the MIT licence by Electrum Technologies GmbH and that it does not store user account data.","fee":"Free","categories":["Wallet"],"countries":["GLOBAL"],"bestFor":["Bitcoin self-custody","Cold storage and multisig","Running against your own node"],"features":["Bitcoin only","No account and no signup","Keys stay on the device","Seed phrase recovery","Reproducible builds","Multisig wallets","Cold storage and watch-only","Hardware wallet support","Tor and custom server support"],"tagline":"Long-running Bitcoin wallet with no account and locally held keys.","status":"warning","updatedAt":"2026-08-07","description":"Bitcoin desktop and Android wallet running since 2011. No account, keys stay local, and releases are reproducible and signed.","cardSummary":"Bitcoin wallet, no account, reproducible builds.","networks":[],"checkedAt":"2026-08-07","lastReviewed":"2026-08-07","reviewSource":"official_electrum_site_faq_repo_intake_2026-08-07","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-07","trending":false,"jurisdiction":"DE","noOperatorData":true,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Electrum is a light client. Its own FAQ states the client subscribes its addresses to one main server, so that server can reasonably guess the addresses belong to the same entity, and all connected servers see the client IP address unless a proxy, VPN, or Tor is used. Confirmed transactions are checked with SPV, but the server is trusted for unconfirmed transactions and can lie by omission. Running your own server or connecting over Tor removes most of that exposure. The site also warns to download only from electrum.org and verify GPG signatures. Electrum 4.8.1 says it contains important security fixes whose details will be disclosed later, so the unresolved disclosure should be monitored.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://electrum.org/","note":"Official website Impressum and Privacy Policy state that Electrum Technologies GmbH hosts the site, built and provides the Electrum Wallet app/service, and distributes the software under MIT license."},"governanceModel":{"value":"company-sponsored","citation":"https://electrum.org/"},"repositoryUrl":{"value":"https://github.com/spesmilo/electrum","citation":"https://github.com/spesmilo/electrum"},"legalEntity":{"value":"Electrum Technologies GmbH","citation":"https://electrum.org/"},"registrationNumber":{"value":"HRB 164636 B","citation":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin)%20HRB%20164636%20B"},"registryUrl":{"value":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin)%20HRB%20164636%20B","citation":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin)%20HRB%20164636%20B"},"incorporationJurisdiction":{"value":"Germany","citation":"https://lei.bloomberg.com/leis/view/984500AFC0FB96E0CB95"},"incorporationDate":{"value":"2015-02-03","citation":"https://lei.bloomberg.com/leis/view/984500AFC0FB96E0CB95"},"registeredAddress":{"value":"Paul-Lincke-Ufer 8 D, 10999 Berlin, Germany","citation":"https://electrum.org/"},"parentEntity":{"value":"Voegtlin Holding GmbH","citation":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin)%20HRB%20164636%20B"},"officers":{"value":["Thomas Voegtlin (Geschäftsführer)"],"citation":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin)%20HRB%20164636%20B"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"publicClaims":{"followTheMoney":{"value":"Electrum\n────────────────────────\nCreated by: Thomas Voegtlin, November 2011\nPublisher: Electrum Technologies GmbH, Berlin (founded 2013)\nModel: free MIT-licensed software\nReleases: reproducible, signed by several builders","reviewedAt":"2026-08-07","sources":[{"label":"Electrum - About and Impressum","href":"https://electrum.org/#about","type":"official"},{"label":"Electrum source repository (MIT licence)","href":"https://github.com/spesmilo/electrum","type":"official"}]}},"followTheMoney":"Electrum\n────────────────────────\nCreated by: Thomas Voegtlin, November 2011\nPublisher: Electrum Technologies GmbH, Berlin (founded 2013)\nModel: free MIT-licensed software\nReleases: reproducible, signed by several builders","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/electrum","canonical_score":36,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":17,"accountability":7},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 7 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://electrum.org/","https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES","https://github.com/spesmilo/electrum/security/advisories/GHSA-vw94-r84p-66qf","https://github.com/spesmilo/electrum","https://github.com/spesmilo/electrum/security/advisories/GHSA-q7m2-785w-r585"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://electrum.org/","https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES","https://github.com/spesmilo/electrum/security/advisories/GHSA-vw94-r84p-66qf","https://github.com/spesmilo/electrum","https://github.com/spesmilo/electrum/security/advisories/GHSA-q7m2-785w-r585"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://electrum.org/","https://github.com/spesmilo/electrum/blob/master/RELEASE-NOTES","https://github.com/spesmilo/electrum/security/advisories/GHSA-vw94-r84p-66qf","https://github.com/spesmilo/electrum","https://github.com/spesmilo/electrum/security/advisories/GHSA-q7m2-785w-r585"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":false,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Wallet","primary_bucket":"Wallet","corporate_identity":{"entity_type":"company","entity_type_note":"Official website Impressum and Privacy Policy state that Electrum Technologies GmbH hosts the site, built and provides the Electrum Wallet app/service, and distributes the software under MIT license.","governance_model":"company-sponsored","repository_url":"https://github.com/spesmilo/electrum","legal_entity":"Electrum Technologies GmbH","registration_number":"HRB 164636 B","registry_url":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin","incorporation_jurisdiction":"Germany","incorporation_date":"2015-02-03","registered_address":"Paul-Lincke-Ufer 8 D, 10999 Berlin, Germany","parent_entity":"Voegtlin Holding GmbH","ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Thomas Voegtlin (Geschäftsführer)","role":null}],"citations":{"legalEntity":{"url":"https://electrum.org/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin","note":")%20HRB%20164636%20B","agent_verified":false},"incorporationJurisdiction":{"url":"https://lei.bloomberg.com/leis/view/984500AFC0FB96E0CB95","note":null,"agent_verified":false},"incorporationDate":{"url":"https://lei.bloomberg.com/leis/view/984500AFC0FB96E0CB95","note":null,"agent_verified":false},"registeredAddress":{"url":"https://electrum.org/","note":null,"agent_verified":false},"parentEntity":{"url":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin","note":")%20HRB%20164636%20B","agent_verified":false},"officers":{"url":"https://www.northdata.com/Electrum%20Technologies%20GmbH,%20Berlin/Amtsgericht%20Charlottenburg%20(Berlin","note":")%20HRB%20164636%20B","agent_verified":false},"entityType":{"url":"https://electrum.org/","note":null,"agent_verified":false},"governanceModel":{"url":"https://electrum.org/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":8,"self-reported":6},"total_sources":14},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Local software or protocol with no hosted operator data"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 62 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":0,"noOperatorData":true,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-07","lastReviewed":"2026-08-07","kycLastChecked":"2026-08-07"}},{"slug":"encryptsim","name":"encryptSIM","domain":"encryptsim.com","url":"https://encryptsim.com","kyc":"light","kycLevel":1,"kycNote":"Account email and payment data are collected. Identity checks can apply for fraud review, legal requirements, voice or numbering services.","fee":"Shown at checkout","categories":["Comms"],"countries":["GLOBAL"],"bestFor":["Anonymous travel data","Global eSIM without identity","Crypto-paid mobile data"],"features":["Global eSIM","Account email generally required","Cryptocurrency payments","Data, voice and SMS services","Instant digital delivery"],"tagline":null,"status":"ok","updatedAt":"2026-09-05","description":"Global data eSIM for 200+ destinations whose terms state no account registration or personal data collection.","cardSummary":"Global eSIM across 200+ destinations.","networks":["Crypto"],"checkedAt":"2026-08-27","lastReviewed":"2026-09-05","reviewSource":"https://encryptsim.com/","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"US","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"Standard eSIM purchases generally require an account email and payment information. Government ID is not ordinarily required, but encryptSIM may request it for legal, fraud, voice or numbering, abuse, sanctions or dispute checks. Lumific Labs Inc. processes account, order, payment, wallet, telecom, support, IP, device, location, cookie and analytics data through globally distributed providers.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://encryptsim.com/privacy-policy","note":"The current privacy policy identifies Lumific Labs Inc. as operator. The reviewed current legal pages do not state a registration number or incorporation jurisdiction."},"legalEntity":{"value":"Lumific Labs Inc.","citation":"https://encryptsim.com/privacy-policy"},"source":"Official primary source review 2026-09-05","reviewedAt":"2026-09-05"},"twitter":null,"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/encryptsim","canonical_score":42,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":7,"transparency":1,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"extensive","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"extensive","sourceUrls":["https://encryptsim.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"email, credentials, wallet/blockchain, activation, voice/SMS, support, IP/device, location, analytics and compliance data"},"controlModel":{"value":"hosted-account","sourceUrls":["https://encryptsim.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"operator-and-carrier-managed-connectivity"},"sourceModel":{"value":"closed","sourceUrls":["https://encryptsim.com/privacy-policy"],"reviewedAt":"2026-08-27","note":"closed-service"}},"audit":{"scoreEligible":false,"reason":"Stored SOC 2 Type II claim lacks a public report/citation/date/scope; no points."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Comms","primary_bucket":"Comms","corporate_identity":{"entity_type":"company","entity_type_note":"The current privacy policy identifies Lumific Labs Inc. as operator. The reviewed current legal pages do not state a registration number or incorporation jurisdiction.","governance_model":null,"repository_url":null,"legal_entity":"Lumific Labs Inc.","registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://encryptsim.com/privacy-policy","note":null,"agent_verified":false},"entityType":{"url":"https://encryptsim.com/privacy-policy","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"Official primary source review 2026-09-05","reviewed_at":"2026-09-05"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":2},"total_sources":2},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":66,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"partial","checkedAt":"2026-08-27","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}},{"slug":"ente","name":"Ente","domain":"ente.com","url":"https://ente.com/","kyc":"none","kycLevel":1,"kycNote":"No document identity check. The help centre lists payment methods as credit cards via Stripe and PayPal, with card details held by Stripe rather than Ente. There is no cryptocurrency rail, so any paid plan carries a card or PayPal identity trail. The 10GB free tier and self-hosting avoid payment data entirely.","fee":"10GB free, $2.49/mo 50GB, $4.99/mo 200GB, $9.99/mo 1TB","categories":["Cloud Storage"],"countries":["GLOBAL"],"bestFor":["Encrypted photo backup","Self-hosted storage","Leaving Google Photos"],"features":["End-to-end encrypted photo backup","Open source clients and server","Self-hostable","Stored in 3 locations","On-device face recognition","Family plan sharing","Public links","Independently audited","10GB free tier"],"tagline":"End-to-end encrypted photo storage with a free tier and a self-hostable server.","status":"ok","updatedAt":"2026-08-25","description":"End-to-end encrypted photo storage with a 10GB free tier. Paid plans run through Stripe or PayPal, with no crypto option.","cardSummary":"E2EE photo storage, self-hostable, card only.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"Paid plans cannot be bought privately: Stripe and PayPal are the only rails and both link a real identity to the account. The terms name Ente Technologies, Inc. and set Delaware governing law with venue in Santa Clara County, so US legal process reaches account metadata even though file contents are end-to-end encrypted.","auditedBy":["Symbolic Software"],"corporate":{"entityType":{"value":"company","citation":"https://ente.com/privacy/","note":"The Privacy Policy and Terms of Service explicitly name Ente Technologies, Inc. as the operating entity providing the services."},"repositoryUrl":{"value":"https://github.com/ente/ente","citation":"https://github.com/ente/ente"},"legalEntity":{"value":"Ente Technologies, Inc.","citation":"https://ente.com/privacy/"},"registrationNumber":{"value":"6668754","citation":"https://discuss.privacyguides.net/t/should-ente-auth-really-be-recommended-particularly-the-e2ee/20242"},"registryUrl":{"value":"https://icis.corp.delaware.gov/Ecorp/EntitySearch/NameSearch.aspx","citation":"https://discuss.privacyguides.net/t/should-ente-auth-really-be-recommended-particularly-the-e2ee/20242"},"incorporationJurisdiction":{"value":"Delaware, United States","citation":"https://ente.com/privacy/"},"registeredAddress":{"value":"1111B S Governors Ave #6032, Dover, DE 19904","citation":"https://ente.com/privacy/"},"officers":{"value":["Manav Rathi (Data Protection Officer)"],"citation":"https://ente.com/privacy/"},"priorEntities":{"value":["DRIZZLE TECHNOLOGIES PRIVATE LIMITED (CIN U72900KA2020PTC133651)","ENTEIO TECHNOLOGIES PRIVATE LIMITED (CIN U72900KA2022FTC162419)"],"citation":"https://tracxn.com/d/companies/ente/__C-WQjshq6TQzDPYVFj0rV6sIcwCHPP3LRoj9gHAT030"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/enteio","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/ente","canonical_score":42,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://ente.com/","https://ente.com/#pricing","https://ente.com/privacy/","https://x.com/enteio/status/2091888746496917975"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://ente.com/","https://ente.com/#pricing","https://ente.com/privacy/","https://x.com/enteio/status/2091888746496917975"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://ente.com/","https://ente.com/#pricing","https://ente.com/privacy/","https://x.com/enteio/status/2091888746496917975"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Cloud Storage","primary_bucket":"Cloud Storage","corporate_identity":{"entity_type":"company","entity_type_note":"The Privacy Policy and Terms of Service explicitly name Ente Technologies, Inc. as the operating entity providing the services.","governance_model":null,"repository_url":"https://github.com/ente/ente","legal_entity":"Ente Technologies, Inc.","registration_number":"6668754","registry_url":"https://icis.corp.delaware.gov/Ecorp/EntitySearch/NameSearch.aspx","incorporation_jurisdiction":"Delaware, United States","incorporation_date":null,"registered_address":"1111B S Governors Ave #6032, Dover, DE 19904","parent_entity":null,"ultimate_owner":null,"prior_entities":[{"name":"DRIZZLE TECHNOLOGIES PRIVATE LIMITED","detail":"CIN U72900KA2020PTC133651"},{"name":"ENTEIO TECHNOLOGIES PRIVATE LIMITED","detail":"CIN U72900KA2022FTC162419"}],"officers":[{"name":"Manav Rathi (Data Protection Officer)","role":null}],"citations":{"legalEntity":{"url":"https://ente.com/privacy/","note":null,"agent_verified":false},"registrationNumber":{"url":"https://discuss.privacyguides.net/t/should-ente-auth-really-be-recommended-particularly-the-e2ee/20242","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://ente.com/privacy/","note":null,"agent_verified":false},"registeredAddress":{"url":"https://ente.com/privacy/","note":null,"agent_verified":false},"priorEntities":{"url":"https://tracxn.com/d/companies/ente/__C-WQjshq6TQzDPYVFj0rV6sIcwCHPP3LRoj9gHAT030","note":null,"agent_verified":false},"officers":{"url":"https://ente.com/privacy/","note":null,"agent_verified":false},"entityType":{"url":"https://ente.com/privacy/","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"independent-audit","tiers":["independent-audit","third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":1,"third-party-reported":4,"self-reported":5},"total_sources":10},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"exolix","name":"Exolix","domain":"exolix.com","url":"https://exolix.com/","kyc":"light","kycLevel":1,"kycNote":"No account required for standard swaps; AML/KYC policy can trigger identity checks on risk events.","fee":"No separate Exolix fee shown; costs are included in the displayed rate and network overhead","categories":["Swap"],"countries":["GLOBAL"],"bestFor":["XMR swaps","In-wallet exchanges","Quick conversions"],"features":["No registration","Thousands of tokens","200+ blockchains","Fixed and floating rates","Risk-based AML/KYC","XMR support","API available"],"tagline":"Instant swaps. XMR friendly. Monerujo integrated. No account.","status":"ok","updatedAt":"2026-08-25","description":"Cross-chain swap aggregator routing thousands of tokens across 200+ blockchains, with fixed/floating rates and risk-based AML/KYC.","cardSummary":"Cross-chain swap aggregator across 200+ blockchains.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"primary_source_rereview_2026-08-25","jurisdictionConfidence":"unknown","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Operator and jurisdiction remain unresolved. Exolix routes swaps through independent providers and applies a risk-based AML/KYC policy that can require checks; its anonymity marketing is not a never-KYC guarantee.","auditedBy":[],"corporate":{"entityType":{"value":"unresolved","citation":"unknown","note":"Pass 1 researched this service but established no registry facts."},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/ExolixCom","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/exolix","canonical_score":29,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":9,"control":0,"transparency":0,"security":17,"accountability":3},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 9 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 3 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://exolix.com/","https://exolix.com/faq","https://exolix.com/aml-kyc","https://exolix.com/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://exolix.com/","https://exolix.com/faq","https://exolix.com/aml-kyc","https://exolix.com/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://exolix.com/","https://exolix.com/faq","https://exolix.com/aml-kyc","https://exolix.com/terms"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":1,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":null,"evidence_provenance":{"strongest_tier":null,"tiers":[],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":0},"total_sources":0},"privacy_score":80,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-20,"detail":"Basic account or payment metadata recorded (level 1 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.239Z","score_inputs":{"kycLevel":1,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"feather-wallet","name":"Feather Wallet","domain":"featherwallet.org","url":"https://featherwallet.org/","kyc":"none","kycLevel":0,"kycNote":"Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.","fee":"Free","categories":["Wallet"],"countries":["GLOBAL"],"features":["XMR only","Electrum-like","Tor built-in","Tails OS support","Coin control"],"status":"ok","updatedAt":"2026-08-27","changedAt":"2026-08-27","description":"A free, open-source Monero wallet for desktop. Connects via Tor by default, heavily optimized for privacy and power users.","cardSummary":"Monero desktop wallet that connects over Tor.","networks":[],"checkedAt":"2026-08-27","lastReviewed":"2026-08-27","reviewSource":"Primary-source review 2026-08-27","jurisdictionConfidence":"unknown","kycLastChecked":"2026-08-27","trending":false,"jurisdiction":null,"evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Feather bundles Tor, but by default routes all network traffic over Tor except wallet synchronization. Synchronization contacts a node, while websocket features fetch fiat price, CCS and block-height data and the updater contacts featherwallet.org; users with stronger threat models should configure always-over-Tor or a local node.","auditedBy":[],"corporate":{"entityType":{"value":"project-no-legal-entity","citation":"https://docs.featherwallet.org/guides/about","note":"Official docs state Feather Wallet was created by individuals dsc, tobtoht, and contributors as free open-source software funded solely via Monero CCS and donations, with no company or legal entity referenced on the site, GitHub, or license."},"governanceModel":{"value":"maintainer-group","citation":"https://docs.featherwallet.org/guides/about"},"repositoryUrl":{"value":"https://github.com/feather-wallet/feather","citation":"https://github.com/feather-wallet/feather"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":null,"telegram":"https://t.me/featherwallet","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/feather-wallet","canonical_score":76,"score_status":"rated","score_evidence":"reviewed","score_version":"4.0","score_breakdown":{"privacy":21,"control":20,"transparency":12,"security":17,"accountability":6},"applied_caps":[],"score_rationale":["privacy: 21 of 25 points.","control: 20 of 20 points.","transparency: 12 of 20 points.","security: 17 of 25 points.","accountability: 6 of 10 points."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"limited","controlModel":"local-self-custody","sourceModel":"open"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"limited","sourceUrls":["https://docs.featherwallet.org/guides/network-traffic","https://docs.featherwallet.org/guides/tor-support"],"reviewedAt":"2026-08-27","note":"The local wallet does not require an operator account, but remote-node synchronization and optional direct-clearnet traffic expose limited network metadata."},"controlModel":{"value":"local-self-custody","sourceUrls":["https://docs.featherwallet.org/guides/about","https://github.com/feather-wallet/feather"],"reviewedAt":"2026-08-27","note":"Seeds and signing remain on the user device; the user controls the wallet and can connect a local node."},"sourceModel":{"value":"open","sourceUrls":["https://docs.featherwallet.org/guides/about","https://github.com/feather-wallet/feather"],"reviewedAt":"2026-08-27","note":"The official documentation identifies the BSD-3 repository; no reproducible-build evidence was located."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped independent audit of the score-critical core was evidenced in the reopened first-party source family."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":null,"jurisdiction_confidence":"unknown","jurisdiction_context":"unknown"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"unknown","primary_category":"Wallet","primary_bucket":"Wallet","corporate_identity":{"entity_type":"project-no-legal-entity","entity_type_note":"Official docs state Feather Wallet was created by individuals dsc, tobtoht, and contributors as free open-source software funded solely via Monero CCS and donations, with no company or legal entity referenced on the site, GitHub, or license.","governance_model":"maintainer-group","repository_url":"https://github.com/feather-wallet/feather","legal_entity":null,"registration_number":null,"registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"entityType":{"url":"https://docs.featherwallet.org/guides/about","note":null,"agent_verified":false},"governanceModel":{"url":"https://docs.featherwallet.org/guides/about","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":1,"self-reported":2},"total_sources":3},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator with unknown jurisdiction"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 42 days old"}],"score_computed_at":"2026-10-08T04:04:39.240Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":null,"jurisdictionConfidence":"unknown","evidenceStatus":"verified","checkedAt":"2026-08-27","lastReviewed":"2026-08-27","kycLastChecked":"2026-08-27"}},{"slug":"filen","name":"Filen","domain":"filen.io","url":"https://filen.io","kyc":"none","kycLevel":0,"kycNote":"No document KYC found. Paid accounts use conventional payment rails such as major cards and PayPal; free and lifetime accounts have inactivity rules tied to account login.","fee":"Free 10GB / from €0.99/mo","categories":["Cloud Storage"],"countries":["GLOBAL"],"features":["End-to-end encrypted","Zero-knowledge","German jurisdiction","Open source","Major cards + PayPal","Desktop + mobile apps","GDPR compliant"],"status":"ok","updatedAt":"2026-06-22","description":"German zero-knowledge cloud storage with end-to-end encrypted files, chats and collaboration tools.","cardSummary":"German zero-knowledge encrypted cloud storage.","networks":[],"checkedAt":"2026-06-24","lastReviewed":"2026-06-22","reviewSource":"official_site_batch_7_2026-06-22","jurisdictionConfidence":"verified","kycLastChecked":"2026-06-22","trending":false,"jurisdiction":"DE","evidenceStatus":"verified","riskLevel":"standard","privacyWarning":"German hosted cloud account with payment, support and account-activity metadata. No current official crypto-payment route was source-verified in this pass.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://filen.io/imprint","note":"Official Imprint and Terms name the operating entity as Filen Cloud Dienste UG (haftungsbeschränkt), a German limited-liability company registered under HRB 8896."},"repositoryUrl":{"value":"https://github.com/FilenCloudDienste","citation":"https://github.com/FilenCloudDienste"},"legalEntity":{"value":"Filen Cloud Dienste UG (haftungsbeschränkt)","citation":"https://filen.io/imprint"},"registrationNumber":{"value":"HRB 8896","citation":"https://filen.io/imprint"},"registryUrl":{"value":"https://www.northdata.com/Filen%20Cloud%20Dienste%20UG,%20Recklinghausen/HRB%208896","citation":"https://www.northdata.com/Filen%20Cloud%20Dienste%20UG,%20Recklinghausen/HRB%208896"},"incorporationJurisdiction":{"value":"Germany (Amtsgericht Recklinghausen)","citation":"https://filen.io/imprint"},"incorporationDate":{"value":"2021-06-29","citation":"https://www.northdata.de/?id=6613973733"},"registeredAddress":{"value":"Breite Straße 27, 45657 Recklinghausen, Germany","citation":"https://filen.io/imprint"},"officers":{"value":[{"name":"Jan Lenczyk","role":"Geschäftsführer (Managing Director)"}],"citation":"https://filen.io/imprint"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/filen_io","publicClaims":{"followTheMoney":{"value":"Filen\n────────────────────────\nOperator: Filen Cloud Dienste UG\nBase: Recklinghausen, Germany\nRepresentative: Jan Lenczyk\nRegistration: HRB 8896","reviewedAt":"2026-07-15","sources":[{"label":"Filen - Imprint","href":"https://filen.io/imprint","type":"official"}]}},"followTheMoney":"Filen\n────────────────────────\nOperator: Filen Cloud Dienste UG\nBase: Recklinghausen, Germany\nRepresentative: Jan Lenczyk\nRegistration: HRB 8896","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/filen","canonical_score":45,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":12,"control":0,"transparency":0,"security":25,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 12 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 25 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://filen.io/pricing","https://filen.io/privacy","https://github.com/FilenCloudDienste","https://filen.io"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://filen.io/pricing","https://filen.io/privacy","https://github.com/FilenCloudDienste","https://filen.io"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://filen.io/pricing","https://filen.io/privacy","https://github.com/FilenCloudDienste","https://filen.io"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"DE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Cloud Storage","primary_bucket":"Cloud Storage","corporate_identity":{"entity_type":"company","entity_type_note":"Official Imprint and Terms name the operating entity as Filen Cloud Dienste UG (haftungsbeschränkt), a German limited-liability company registered under HRB 8896.","governance_model":null,"repository_url":"https://github.com/FilenCloudDienste","legal_entity":"Filen Cloud Dienste UG (haftungsbeschränkt)","registration_number":"HRB 8896","registry_url":"https://www.northdata.com/Filen%20Cloud%20Dienste%20UG,%20Recklinghausen/HRB%208896","incorporation_jurisdiction":"Germany (Amtsgericht Recklinghausen)","incorporation_date":"2021-06-29","registered_address":"Breite Straße 27, 45657 Recklinghausen, Germany","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[{"name":"Jan Lenczyk","role":"Geschäftsführer (Managing Director)"}],"citations":{"legalEntity":{"url":"https://filen.io/imprint","note":null,"agent_verified":false},"registrationNumber":{"url":"https://filen.io/imprint","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://filen.io/imprint","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.northdata.de/?id=6613973733","note":null,"agent_verified":false},"registeredAddress":{"url":"https://filen.io/imprint","note":null,"agent_verified":false},"officers":{"url":"https://filen.io/imprint","note":null,"agent_verified":false},"entityType":{"url":"https://filen.io/imprint","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":8},"total_sources":11},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: DE"}],"evidence_confidence":87,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 108 days old"}],"score_computed_at":"2026-10-08T04:04:39.241Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"DE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-06-24","lastReviewed":"2026-06-22","kycLastChecked":"2026-06-22"}},{"slug":"fixedfloat","name":"FixedFloat","domain":"ff.io","url":"https://ff.io/","kyc":"light","kycLevel":3,"kycNote":"No account is required for an ordinary exchange, but current AML rules permit order suspension and requests for source-of-funds details or identity verification when risk controls trigger.","fee":"0.5–1%","categories":["Swap"],"countries":["GLOBAL"],"features":["Fixed rate","Variable rate","No account","Instant","Refund address"],"status":"ok","updatedAt":"2026-08-25","description":"Fixed and floating rate crypto swaps with no account required, supporting Lightning Network and major assets.","cardSummary":"Fixed and floating swaps, no account needed.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://ff.io/terms-of-service","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":false,"jurisdiction":"GE","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"Two thefts were reported in 2024: $26.1M on February 16 and $2.8M on April 1. The service attributed the incidents to infrastructure vulnerabilities involving third-party providers. The operating team is not named.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://ff.io/en/terms-of-service","note":"Registry-sourced corporate record established in pass 1 via incorporationJurisdiction."},"legalEntity":{"value":"FFGX Group LLC","citation":"https://ff.io/terms-of-service"},"incorporationJurisdiction":{"value":"Georgia","citation":"https://ff.io/en/terms-of-service"},"registeredAddress":{"value":"88 Avtomshenebeli Street, Kutaisi 4600, Georgia","citation":"https://ff.io/en/terms-of-service"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"current official Terms reviewed 2026-08-25; prior Georgian registry evidence retained","reviewedAt":"2026-08-25"},"twitter":"https://x.com/fixedfloat","telegram":"https://t.me/fixedfloat","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/fixedfloat","canonical_score":28,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":3,"control":0,"transparency":0,"security":17,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 3 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 17 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://ff.io/terms-of-service","https://ff.io/blog/news/weekly-2026-08-22","https://ff.io/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://ff.io/terms-of-service","https://ff.io/blog/news/weekly-2026-08-22","https://ff.io/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://ff.io/terms-of-service","https://ff.io/blog/news/weekly-2026-08-22","https://ff.io/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":3,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"GE","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Swap","primary_bucket":"Swap","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via incorporationJurisdiction.","governance_model":null,"repository_url":null,"legal_entity":"FFGX Group LLC","registration_number":null,"registry_url":null,"incorporation_jurisdiction":"Georgia","incorporation_date":null,"registered_address":"88 Avtomshenebeli Street, Kutaisi 4600, Georgia","parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://ff.io/terms-of-service","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://ff.io/en/terms-of-service","note":null,"agent_verified":false},"registeredAddress":{"url":"https://ff.io/en/terms-of-service","note":null,"agent_verified":false},"entityType":{"url":"https://ff.io/en/terms-of-service","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"current official Terms reviewed 2026-08-25; prior Georgian registry evidence retained","reviewed_at":"2026-08-25"},"evidence_provenance":{"strongest_tier":"self-reported","tiers":["self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":0,"self-reported":4},"total_sources":4},"privacy_score":40,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-60,"detail":"Conditional identity verification recorded (level 3 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: GE"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.242Z","score_inputs":{"kycLevel":3,"noOperatorData":false,"jurisdiction":"GE","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"flexa","name":"Flexa","domain":"flexa.co","url":"https://flexa.co/","kyc":"light","kycLevel":2,"kycNote":"Official terms authorize identity inquiries and say Flexa may close, suspend or limit access if required identity information cannot be obtained.","fee":"No end-user transaction fee; merchant/provider pricing is not publicly stated","categories":["Merchants"],"countries":["US","EU"],"features":["ZEC at major retailers","XMR supported","BTC supported","Works via Zashi","Chipotle","GameStop","Sheetz","Instant settlement","Money-movement platform in 37 SEPA countries/territories"],"status":"ok","updatedAt":"2026-08-25","description":"Licensed crypto payment and money-movement network for merchants and wallets, tying each account to a verifiable identity and operating in the US and 37 SEPA countries/territories.","cardSummary":"Licensed crypto payment network for merchants.","networks":[],"checkedAt":"2026-08-25","lastReviewed":"2026-08-25","reviewSource":"https://flexa.co/legal/licenses","jurisdictionConfidence":"verified","kycLastChecked":"2026-08-25","trending":true,"jurisdiction":"US","evidenceStatus":"verified","riskLevel":"caution","privacyWarning":"US/Five Eyes payment network; privacy policy says Flexa may collect name, email and identity-verification information directly or through third parties.","auditedBy":null,"corporate":{"entityType":{"value":"company","citation":"https://flexa.co/legal/privacy","note":"Registry-sourced corporate record established in pass 1 via legalEntity."},"legalEntity":{"value":"Flexa Inc.","citation":"https://flexa.co/legal/privacy"},"registrationNumber":{"value":"31000325761492","citation":"https://flexa.co/legal/licenses"},"officers":{"value":[],"citation":"unknown"},"priorEntities":{"value":[],"citation":"unknown"},"source":"registry research 2026-08-08, task t_047dfd90","reviewedAt":"2026-08-08"},"twitter":"https://x.com/flexahq","incidents":[{"title":"SPEDN consumer app shutdown","status":"resolved","severity":"medium","startedAt":"2026-03-31","resolvedAt":"2026-03-31","summary":"Flexa shut down the SPEDN proof-of-concept consumer app. The broader Flexa payment/money-movement infrastructure continued, changed leadership in June, and announced availability across 37 SEPA countries and territories in July.","directUserHarm":false,"customerDataOrAssetsCompromised":false,"disclosure":"proactive","remediation":"complete","sources":[{"label":"Flexa SPEDN shutdown","href":"https://x.com/FlexaHQ/status/2039055571790557413"},{"label":"Flexa leadership change","href":"https://x.com/FlexaHQ/status/2067612295287484716"},{"label":"Flexa SEPA expansion","href":"https://x.com/FlexaHQ/status/2074880812018016287"}]}],"agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/flexa","canonical_score":30,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":6,"control":0,"transparency":0,"security":16,"accountability":8},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 6 of 25 points.","control: 0 of 20 points.","transparency: 0 of 20 points.","security: 16 of 25 points.","accountability: 8 of 10 points.","Limited evidence: operatorDataExposure, controlModel, sourceModel scored zero.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"unknown","controlModel":"unknown","sourceModel":"unknown"},"score_review":{"outcome":"PASS","checkedAt":"2026-08-25","inputs":{"operatorDataExposure":{"value":"unknown","sourceUrls":["https://flexa.co/legal/licenses","https://x.com/FlexaHQ/status/2039055571790557413","https://x.com/FlexaHQ/status/2067612295287484716","https://x.com/FlexaHQ/status/2074880812018016287","https://flexa.co/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"controlModel":{"value":"unknown","sourceUrls":["https://flexa.co/legal/licenses","https://x.com/FlexaHQ/status/2039055571790557413","https://x.com/FlexaHQ/status/2067612295287484716","https://x.com/FlexaHQ/status/2074880812018016287","https://flexa.co/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."},"sourceModel":{"value":"unknown","sourceUrls":["https://flexa.co/legal/licenses","https://x.com/FlexaHQ/status/2039055571790557413","https://x.com/FlexaHQ/status/2067612295287484716","https://x.com/FlexaHQ/status/2074880812018016287","https://flexa.co/"],"reviewedAt":"2026-08-25","note":"The reviewed packet did not map this normalized Score 4.0 input to a field-level source; unknown is preserved until that mapping is completed."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped, current audit citation was normalized in the reviewed packet; legacy auditedBy labels receive no score credit."}},"privacy_observations":{"identity_exposure_level":2,"identity_requirement":"light","hosted_operator_data":null,"jurisdiction":"US","jurisdiction_confidence":"verified","jurisdiction_context":"five_eyes"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"five_eyes","primary_category":"Merchants","primary_bucket":"Merchants","corporate_identity":{"entity_type":"company","entity_type_note":"Registry-sourced corporate record established in pass 1 via legalEntity.","governance_model":null,"repository_url":null,"legal_entity":"Flexa Inc.","registration_number":"31000325761492","registry_url":null,"incorporation_jurisdiction":null,"incorporation_date":null,"registered_address":null,"parent_entity":null,"ultimate_owner":null,"prior_entities":[],"officers":[],"citations":{"legalEntity":{"url":"https://flexa.co/legal/privacy","note":null,"agent_verified":false},"registrationNumber":{"url":"https://flexa.co/legal/licenses","note":null,"agent_verified":false},"entityType":{"url":"https://flexa.co/legal/privacy","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"registry research 2026-08-08, task t_047dfd90","reviewed_at":"2026-08-08"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":3,"self-reported":3},"total_sources":6},"privacy_score":60,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":-40,"detail":"Persistent contact, billing, or delivery data recorded (level 2 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: US (Five Eyes context)"}],"evidence_confidence":94,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":70,"detail":"Material claims checked against current sources"},{"key":"freshness","label":"Review age","value":24,"detail":"Oldest recorded check is 44 days old"}],"score_computed_at":"2026-10-08T04:04:39.242Z","score_inputs":{"kycLevel":2,"noOperatorData":false,"jurisdiction":"US","jurisdictionConfidence":"verified","evidenceStatus":"verified","checkedAt":"2026-08-25","lastReviewed":"2026-08-25","kycLastChecked":"2026-08-25"}},{"slug":"flokinet","name":"FlokiNET","domain":"flokinet.is","url":"https://flokinet.is/","kyc":"none","kycLevel":0,"kycNote":"Advertises No-KYC, but strictly adhere to OPSEC rules. Access via Tor, pay with XMR.","fee":"From €7.99/mo","categories":["Hosting"],"countries":["GLOBAL"],"features":["Hosting in Iceland, Romania, Finland and the Netherlands","XMR accepted","ZEC accepted","BTC accepted","No government ID required","Email required","VPS","Dedicated servers","Shared hosting","Tor and onion hosting support"],"status":"ok","updatedAt":"2026-09-05","description":"Offshore VPS and dedicated servers in Iceland, Romania and Finland, accepting XMR, ZEC and BTC.","cardSummary":"Offshore VPS in Iceland, Romania and Finland.","networks":[],"checkedAt":"2026-06-24","lastReviewed":"2026-09-05","reviewSource":"https://flokinet.is/privacy-policy","jurisdictionConfidence":"verified","kycLastChecked":"2026-09-05","trending":false,"jurisdiction":"IS","evidenceStatus":"partial","riskLevel":"caution","privacyWarning":"The privacy policy says FlokiNET logs IP address and visit metadata, may collect full name, billing and contact data for customer accounts, may retain network access logs for any period at its discretion, and may retain personal information indefinitely in specified cases.","auditedBy":[],"corporate":{"entityType":{"value":"company","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":"Official Icelandic Register of Enterprises lists FlokiNET ehf. as an active private limited company (einkahlutafélag); site TOS/AUP and contact pages name FlokiNET ehf as the operating entity."},"legalEntity":{"value":"FlokiNET ehf.","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"registrationNumber":{"value":"4308120920","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"registryUrl":{"value":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"incorporationJurisdiction":{"value":"Iceland","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"incorporationDate":{"value":"2012-08-01","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"registeredAddress":{"value":"Skólavörðustíg 12, 101 Reykjavík, Iceland","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"ultimateOwner":{"value":"Kolja Finn Weber (100% direct ownership)","citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"officers":{"value":["Kolja Finn Weber (stjórnarmaður / board member)"],"citation":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920"},"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewedAt":"2026-08-09"},"twitter":"https://x.com/flokinetehf","publicClaims":{"followTheMoney":{"value":"FlokiNET\n────────────────────────\nFounded: Iceland, 2012\nOperations: Iceland, Romania, Finland,\nand the Netherlands\nRevenue model: prepaid hosting services","reviewedAt":"2026-07-15","sources":[{"label":"FlokiNET - About","href":"https://flokinet.is/about/","type":"official"},{"label":"FlokiNET - Hosting and payment model","href":"https://flokinet.is/","type":"official"}]}},"followTheMoney":"FlokiNET\n────────────────────────\nFounded: Iceland, 2012\nOperations: Iceland, Romania, Finland,\nand the Netherlands\nRevenue model: prepaid hosting services","agentUsability":{"status":"hard-blocked","evidence":"No reviewed programmatic agent-payment profile is recorded; this dataset treats the service as hard-blocked until a control surface is documented.","derivedFrom":["agentMoney.compatible"]},"details_url":"https://cunicula.com/en/provider/flokinet","canonical_score":52,"score_status":"rated","score_evidence":"limited","score_version":"4.0","score_breakdown":{"privacy":17,"control":7,"transparency":1,"security":17,"accountability":10},"applied_caps":[{"key":"closed-critical-core-without-audit","maximum":69,"reason":"A closed or unknown critical core without current audit evidence limits the score to 69."}],"score_rationale":["privacy: 17 of 25 points.","control: 7 of 20 points.","transparency: 1 of 20 points.","security: 17 of 25 points.","accountability: 10 of 10 points.","A closed or unknown critical core without current audit evidence limits the score to 69."],"last_scored":"2026-09-05","not_rated_reasons":[],"score_assessment":{"operatorDataExposure":"moderate","controlModel":"hosted-account","sourceModel":"closed"},"score_review":{"outcome":"HOLD","checkedAt":"2026-08-27","inputs":{"operatorDataExposure":{"value":"moderate","sourceUrls":["https://flokinet.is/privacy-policy/","https://flokinet.is/vps/"],"reviewedAt":"2026-08-27","note":"The hosted account, billing/contact records, service telemetry and infrastructure traffic context give the operator moderate exposure despite privacy-preserving payment options."},"controlModel":{"value":"hosted-account","sourceUrls":["https://flokinet.is/vps/"],"reviewedAt":"2026-08-27","note":"FlokiNET provisions and controls hosted VPS/server infrastructure through customer accounts."},"sourceModel":{"value":"closed","sourceUrls":["https://flokinet.is/about/","https://flokinet.is/terms-of-service/"],"reviewedAt":"2026-08-27","note":"No official score-critical hosting implementation repository or reproducible-build claim was located; the legal/source scope could not be fully reopened."}},"audit":{"scoreEligible":false,"reason":"No dated, scoped independent audit of the score-critical core was evidenced in the reopened first-party source family."}},"privacy_observations":{"identity_exposure_level":0,"identity_requirement":"none","hosted_operator_data":null,"jurisdiction":"IS","jurisdiction_confidence":"verified","jurisdiction_context":"other"},"scoring_source_url":"https://cunicula.com/methodology#cunicula-score","jurisdiction_exposure":"other","primary_category":"Hosting","primary_bucket":"Hosting","corporate_identity":{"entity_type":"company","entity_type_note":"Official Icelandic Register of Enterprises lists FlokiNET ehf. as an active private limited company (einkahlutafélag); site TOS/AUP and contact pages name FlokiNET ehf as the operating entity.","governance_model":null,"repository_url":null,"legal_entity":"FlokiNET ehf.","registration_number":"4308120920","registry_url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","incorporation_jurisdiction":"Iceland","incorporation_date":"2012-08-01","registered_address":"Skólavörðustíg 12, 101 Reykjavík, Iceland","parent_entity":null,"ultimate_owner":"Kolja Finn Weber (100% direct ownership)","prior_entities":[],"officers":[{"name":"Kolja Finn Weber (stjórnarmaður / board member)","role":null}],"citations":{"legalEntity":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"registrationNumber":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"incorporationJurisdiction":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"incorporationDate":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"registeredAddress":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"ultimateOwner":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"officers":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false},"entityType":{"url":"https://www.skatturinn.is/fyrirtaekjaskra/leit/kennitala/4308120920","note":null,"agent_verified":false}},"basis":"registry-sourced, not audited","agent_verified":false,"source":"corporate identity pass 2 (t_d7269d23), cited web research via grok web search","reviewed_at":"2026-08-09"},"evidence_provenance":{"strongest_tier":"third-party-reported","tiers":["third-party-reported","self-reported"],"counts":{"directly-tested":0,"independent-audit":0,"third-party-reported":9,"self-reported":2},"total_sources":11},"privacy_score":100,"privacy_score_version":"3.1","privacy_factors":[{"key":"baseline","label":"Baseline","value":100,"detail":"Starting privacy exposure score"},{"key":"identity","label":"Identity exposure","value":0,"detail":"No required account or identity data recorded (level 0 of 4)"},{"key":"operator-context","label":"Operator context","value":0,"detail":"Hosted operator; recorded jurisdiction: IS"}],"evidence_confidence":59,"evidence_confidence_status":"deprecated","evidence_confidence_sunset_on":"2027-02-26","evidence_score_version":"3.1","evidence_factors":[{"key":"source-coverage","label":"Source coverage","value":42,"detail":"Some material claims still need confirmation"},{"key":"freshness","label":"Review age","value":17,"detail":"Oldest recorded check is 106 days old"}],"score_computed_at":"2026-10-08T04:04:39.242Z","score_inputs":{"kycLevel":0,"noOperatorData":false,"jurisdiction":"IS","jurisdictionConfidence":"verified","evidenceStatus":"partial","checkedAt":"2026-06-24","lastReviewed":"2026-09-05","kycLastChecked":"2026-09-05"}}],"meta":{"total":177,"api_version":"1.3","powered_by":"cunicula.com","documentation_url":"https://cunicula.com/en/api-docs","machine_index_url":"https://cunicula.com/llms.txt","license":"LicenseRef-Cunicula-Attribution-1.0","license_url":"https://cunicula.com/en/cite","attribution":"Cunicula, \"{name}\", cunicula.com, reviewed {reviewed}, retrieved {retrieved}, {url}","cite_guide_url":"https://cunicula.com/en/cite","dataset_url":"https://cunicula.com/api/v1/dataset","schema_version":"1.1.0","page":1,"pages":4,"limit":50,"offset":0,"sort":"name","order":"asc","filters":{}}}