// KNOW.MORE  ·  by OCN.ai

Privacy Notice, Terms of Service & Acceptable Use

Version 2.7 · Effective 15 June 2026 · Operated by OCN.ai ("OCN", "we", "us", "our")

Each time you sign in you confirm that you have read this notice and these terms and agree to them for that session. Your acceptance is recorded (account, timestamp, IP address, notice version) in the platform audit trail. If you do not agree, do not sign in and do not use the platform.

Key terms at a glance

These are the terms most important for you to understand before you agree. They are summarized here in plain language and stated in full below. Reading this box does not replace the full text, but nothing important is hidden from it.

Contents

1. What this platform does 1A. Availability, access & human review 2. Data we collect about you 3. Lawful bases for processing 4. Report-subject data: roles 4A. Notice to report subjects 5. Cookies & session technologies 6. Acceptable use 7. Prohibited uses 8. Who we share data with 9. Sub-processors 10. International transfers 11. Retention 12. Security 13. Disclaimers & no warranty 14. Limitation of liability 15. Indemnity 16. Dispute resolution & arbitration 17. Your privacy rights (GDPR/UK/CCPA) 18. Subject rights, correction & takedown 19. Suspension & termination 20. Intellectual property 21. Changes to these terms 22. Governing law & general 23. How to contact us 24. Data processing terms (roles) 25. Security & breach notification 26. Sub-processors 27. Subject accuracy & takedown

1. What this platform does

KNOW.MORE produces due-diligence intelligence reports on individuals and organizations ("report subjects") from publicly available and licensed sources, including sanctions and watchlist screening (sourced from OpenSanctions), litigation and court records, regulatory actions, corporate registries, beneficial-ownership data, and politically-exposed-person and political-connection analysis. KNOW.MORE reports factual records from official and licensed sources. They do not include adverse-media coverage or unproven criminal allegations. Reports are decision-support material for compliance, KYC/AML, counterparty, and research due-diligence purposes. They are not legal, financial, investigative, or professional advice, and they are not findings of fact.

1A. Availability, access, and required human review

Controlled access. KNOW.MORE is made available on an approved-access basis to vetted business and professional users only. There is no open or self-serve consumer registration; access requires an application and approval, and OCN may decline or revoke access at its discretion. The platform is intended solely for organizations conducting lawful compliance, KYC/AML, counterparty, and due-diligence work.

Decision-support, not a decision. Reports, risk scores, and recommendations are investigative leads and decision-support only. They are produced by automated analysis of public and licensed sources, are not verified findings of fact, and may contain errors inherent to those sources. You must independently verify any material item and apply meaningful human review before acting. A report is a starting point for your own diligence, not a substitute for it, and not a conclusion about any person. OCN does not make, and the platform is not intended to make, any decision producing legal or similarly significant effects on a person without human overview.

Nothing in this section limits a right the law gives a report subject; it describes how the service is offered and how it is intended to be used.

2. Data we collect about you (the user)

3. Why we process it (lawful bases)

4. Report-subject data: roles and responsibilities

When you request a report on a person or organization, the platform gathers and analyzes information about that subject from public and licensed sources.

Allocation of data-protection roles. OCN has an independent controller-to-controller relationship with its customers. OCN and the customer act as separate and independent controllers, each for its own processing, and each party is responsible for ensuring its own compliance with applicable law. They are not joint controllers, and neither is the other's processor for this data.

Each party is responsible for its own compliance and its own processing; this is not a joint or shared-liability arrangement. Where, separately, a customer instructs OCN to process the customer's own uploaded or proprietary data, OCN acts as a processor for that stream only, under the data processing terms in §24.

Reports may contain inaccuracies inherent to public sources, including stale, mismatched, or wrongly attributed records. They are advisory inputs only. You must apply meaningful human review and must not make any decision producing legal or similarly significant effects on a person based solely on a report, risk score, or automated recommendation.

4A. Notice to report subjects (transparency)

Because OCN processes information about people who are not its users, the following notice is provided to those report subjects in fulfilment of Articles 14 of the GDPR and UK GDPR and comparable transparency duties:

Why this is a general notice rather than a direct message to you. OCN does not collect report-subject data from the subject and, in most cases, holds no means of contacting the subject. OCN relies on the exemptions from the duty of direct notification in Articles 14(5)(b) and 14(5)(c) of the GDPR and UK GDPR: providing individual notice to every person in the screening database would involve disproportionate effort and is, in the screening context, liable to render impossible or seriously impair the anti-money-laundering, sanctions, and fraud-prevention purposes of the processing (for example by alerting a person who is the subject of an investigation). The data is also obtained from sources that are, or derive from, records laid down by law or otherwise publicly available. In place of direct notice OCN provides this public notice and the on-request access, correction, and erasure routes in §18 and §27, and documents the basis for relying on these exemptions in its internal assessments.

5. Cookies and session technologies

We use strictly necessary cookies and equivalent storage to keep you signed in, to record your acceptance of these terms, and to protect the platform against abuse. We do not use advertising or cross-site tracking cookies. Because these technologies are strictly necessary to deliver a service you have requested, they operate without a separate consent banner; disabling them will prevent the platform from functioning.

6. Acceptable use (binding each session)

By signing in you agree, for that session, that you will:

7. Prohibited uses

You must not use the platform to:

We may suspend or terminate accounts that breach these terms. All activity is logged.

8. Who we share data with

We do not sell your personal data. We disclose data when required by law.

9. Sub-processors

We engage the following categories of sub-processor to deliver the service. Each is bound by contractual data-protection obligations. The current list is available on request to privacy@ocn.ai.

10. International transfers

Some service providers process data outside the UK/EEA, including in the United States. Where they do, we rely on appropriate safeguards consistent with applicable data-protection law, such as the UK and EU Standard Contractual Clauses and, where relevant, adequacy mechanisms. You may request information about the safeguards in place by contacting privacy@ocn.ai.

11. Retention

12. Security

We apply appropriate technical and organizational measures, including encryption in transit, role-based access control, tenant isolation, audit logging, and lockouts on repeated failed sign-ins. No system is perfectly secure; you are responsible for safeguarding your credentials and for the security of your own devices and networks.

13. Disclaimers and no warranty

The platform and all reports, scores, and output are provided "as is" and "as available," without warranty of any kind, whether express, implied, or statutory, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, completeness, title, or non-infringement.

OCN does not warrant that reports are accurate, complete, current, or free of error. Source data originates with third parties and public records and may be wrong, stale, incomplete, or wrongly attributed. Reports are decision-support inputs only and are not advice, not findings of fact, and not a substitute for your own independent verification and professional judgment. Some jurisdictions do not allow the exclusion of certain warranties, so parts of this section may not apply to you.

KNOW.MORE aggregates and summarizes information from public records and licensed third-party sources and, where a report reflects such a source, it reports that source accurately rather than asserting the underlying matter as OCN's own finding of fact. Each adverse item is presented with its source and, where relevant, the status of the matter (for example pending, dismissed, or settled) and an indication of identity-match confidence. OCN does not control and is not responsible for the accuracy of the underlying public or third-party sources; your remedy for a disputed item is the correction and takedown process in §18 and §27.

14. Limitation of liability

To the maximum extent permitted by law, OCN and its officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost data, lost goodwill, or business interruption, arising out of or relating to the platform or these terms, even if advised of the possibility of such damages.

OCN's total aggregate liability for all claims arising out of or relating to the platform or these terms will not exceed the greater of (a) the total fees you paid to OCN for the service in the twelve months before the event giving rise to the claim, or (b) one hundred U.S. dollars ($100).

Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, for fraud, or for any other liability that applicable law does not permit to be limited. Where law limits the effect of this section, this section applies to the maximum extent permitted.

15. Indemnity

You will defend, indemnify, and hold harmless OCN and its officers, employees, and suppliers from and against any claim, loss, liability, or expense (including reasonable legal fees) arising out of or relating to: (a) your use of the platform; (b) your breach of these terms or of acceptable use; (c) your processing of report-subject data without a lawful basis or purpose; or (d) your violation of any law or of the rights of any third party. We will notify you of any such claim and you will cooperate in its defense.

16. Dispute resolution and binding arbitration

Please read this section carefully. It affects how disputes between you and OCN are resolved and limits how you can seek relief.

Except for claims that may be brought in small-claims court, any dispute arising out of or relating to the platform or these terms will be resolved by binding individual arbitration rather than in court, administered under the rules of the American Arbitration Association (AAA) under its Commercial Arbitration Rules, seated in the State of Delaware, USA and conducted in English, as further set out in §22.

You and OCN waive the right to a jury trial and the right to participate in a class, collective, or representative action. Claims must be brought in an individual capacity.

30-day opt-out. You may opt out of this arbitration agreement by sending written notice to legal@ocn.ai within 30 days of first accepting these terms, stating your name, account email, and intent to opt out. Opting out does not affect any other part of these terms.

Scope. This arbitration agreement applies between OCN and account-holders and users who accept these terms. It does not apply to, limit, or waive any statutory data-protection right of a report subject, including any right under the GDPR, UK GDPR, or applicable U.S. state privacy law, or any right that the law does not permit to be waived; those rights are exercised as set out in §18 and §27 and remain governed by the law applicable to that individual.

17. Your privacy rights

Where GDPR or UK GDPR applies, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to portability, and the right to withdraw consent where processing is based on consent, without affecting prior processing. You have the right to complain to your supervisory authority. We honor these rights and are continuing to mature our data-protection program; if any control is still being rolled out, that does not limit a right the law gives you, and you may always raise it with us.

Automated processing and profiling. Risk scores and recommendations are produced by automated analysis and constitute profiling. They are decision-support only; we do not intend them to be the sole basis of a decision with legal or similarly significant effect, and these terms require human review (§4, §6). Where the law gives you rights in relation to automated decision-making, you may exercise them as described in this section and in §18.

Where the California Consumer Privacy Act (as amended) applies, you have the right to know what personal information we collect and how we use and disclose it, the right to access and delete it, the right to correct it, and the right not to be discriminated against for exercising these rights. We do not sell or "share" personal information as those terms are defined under California law.

To exercise any right, contact privacy@ocn.ai. We will verify your request and respond within the period required by applicable law. You may use an authorized agent where the law permits.

18. Report-subject rights, correction, and takedown

If you believe you are the subject of a report, you may exercise your rights directly against OCN as a controller (see §4), and you do not need to have an account or to have accepted these terms to do so. Contact privacy@ocn.ai with enough detail to identify the data at issue.

What you can ask for. Access to the data we hold about you; correction of inaccurate or out-of-date data; restriction or objection to processing; and erasure where the law requires it. Where another controller (a commissioning customer) is also involved, we will, where permitted, tell you and coordinate the response.

Correction and takedown process. When you dispute the accuracy of information in a report:

  1. We acknowledge your request promptly and within the period required by applicable law.
  2. We re-examine the disputed item against its underlying source and, while we do so, we flag the item as disputed and may restrict its further use.
  3. If the item is inaccurate, mismatched, wrongly attributed, or no longer supported by its source, we correct or remove it and, where feasible, notify recipients of the correction.
  4. If we maintain the item, we tell you why and record your statement of dispute alongside it.

You also have the right to complain to your data-protection supervisory authority at any time.

19. Suspension and termination

We may suspend or terminate your access immediately if you breach these terms, if required by law, or to protect the platform or other users. You may stop using the platform at any time. On termination, your right to use the platform ends; sections that by their nature should survive (including §§13–16, 20, 22) survive termination.

20. Intellectual property

The platform, its software, interfaces, report templates, scoring methodology, and all related intellectual property are owned by OCN or its licensors. We grant you a limited, non-exclusive, non-transferable, revocable right to use the platform and the reports you commission for your internal due-diligence purposes only. You may not copy, resell, sublicense, scrape, reverse engineer, or use platform output to build a competing product or dataset. "KNOW.MORE" and "OCN.ai" are trademarks of OCN.

21. Changes to these terms

We may update this notice and these terms. The version and effective date appear at the top. When we make a material change we increment the version; because acceptance is required each session, signing in after a change constitutes acceptance of the current version for that session. If you do not agree to a new version, do not sign in.

22. Governing law and general

OCN.ai is operated by Ocean Currency Network, a Delaware corporation. These terms, and any dispute between OCN and a user or customer, are governed by the laws of the State of Delaware, USA, without regard to conflict-of-laws rules, with disputes resolved as described in §16.

Report subjects. The data-protection rights of a report subject are governed by the law applicable to that individual (for example the GDPR or UK GDPR for individuals in the UK/EEA, or applicable U.S. state privacy law), not by the governing-law clause above, and OCN honors those rights regardless of its place of incorporation, as set out in §17, §18, and §27.

If any provision is held unenforceable, the rest remains in effect and the unenforceable provision is limited to the minimum extent necessary. Our failure to enforce a provision is not a waiver. These terms are the entire agreement between you and OCN regarding the platform and supersede prior understandings. You may not assign your rights without our consent; we may assign ours in connection with a reorganization, financing, or sale.

23. How to contact us

Privacy questions and rights requests: privacy@ocn.ai. Legal notices and arbitration opt-outs: legal@ocn.ai.


Part II — Data-processing terms, security commitments, and subject protections. The sections below set out the data-processing terms OCN offers to customers, our security and breach-notification commitments, the sub-processors we use, and the process by which any person who is the subject of a report can have inaccurate information corrected or removed. Items shown in [square brackets] are commitments OCN is finalizing; where a specific contract is required (for example a signed Data Processing Agreement), these terms state what OCN offers and a separately executed agreement governs.

24. Data processing terms (controller and processor roles)

Two kinds of processing happen on the platform, and OCN's role differs for each:

Under the DPA OCN commits to: process only on documented instructions; impose confidentiality on authorized personnel; apply the security measures in §25; engage sub-processors only under §26; assist the customer with data-subject requests, breach notification, and impact assessments; and return or delete data within [30] days of termination unless law requires retention. A copy of the current DPA is available from legal@ocn.ai.

25. Security measures and breach notification

Technical and organizational measures. OCN maintains: encryption in transit and at rest; role-based access control on a least-privilege basis; server-side tenant isolation; audit logging of reports requested, records viewed, exports, and consent; failed-login lockouts; and contractual confidentiality for personnel. OCN reviews these measures periodically. Measures still being rolled out are marked as planned in our customer security materials and are not represented as already in place.

Breach notification. On becoming aware of a personal-data breach affecting a customer's data, OCN notifies the affected customer's designated contact without undue delay and within [72] hours, and within [24] hours for incidents OCN assesses as high severity, with the information available at the time and supplements as the investigation progresses. A notice is not an admission of liability.

26. Sub-processors

OCN engages the sub-processors below, each bound by contractual data-protection obligations. OCN gives customers [30] days' advance notice of any new or replacement sub-processor, and customers may object on reasonable data-protection grounds as set out in the DPA.

International transfers rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, as described in §10.

27. If you are the subject of a report: accuracy and takedown

This section restates and operationalizes the rights in §18. If you are the subject of a report, you may contact privacy@ocn.ai at any time, with no account and without having accepted these terms, to dispute information about you. OCN commits to the following process:

  1. Acknowledge your request within the period the law requires.
  2. Re-examine the disputed item against its underlying source, and flag it as disputed and restrict its further use while we do so.
  3. Correct or remove any item that is inaccurate, mismatched, wrongly attributed, stale, or no longer supported by its source, and, where feasible, notify recipients of the correction.
  4. If we retain an item, we explain why and record your statement of dispute alongside it.

You may also exercise your rights of access, restriction, objection, and erasure, and you may complain to your data-protection supervisory authority at any time. OCN sources adverse information from cited public and licensed records, records identity-match confidence, and frames allegations as allegations with their status; reports are decision-support and require human review and are not findings of fact.

KNOW.MORE™ is a trademarked product of OCN.ai · Privacy Notice, Terms of Service & Acceptable Use, version 2.7 · Return to sign in