> ## Documentation Index
> Fetch the complete documentation index at: https://docs.swipelux.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Governance and Roles

> Liability and responsibility matrix for Swipelux and sub-merchants.

## Governance and Roles

### Liability Matrix

| Responsibility          | Swipelux (VASP)                  | Sub-Merchant                  |
| ----------------------- | -------------------------------- | ----------------------------- |
| Crypto Custody          | Responsible                      | Not permitted                 |
| Blockchain Execution    | Responsible                      | Not permitted                 |
| User Verification (KYC) | Responsible (Direct or Reliance) | Responsible for UX Handoff    |
| Sanctions Screening     | Responsible (All Users)          | Responsible for own staff     |
| Geoblocking             | Enforces via IP/KYC              | Must implement at UI level    |
| Licensing               | VASP License only                | Sector License (e.g., Gaming) |

### Responsibility Matrix

* **Swipelux:** custody, blockchain execution, KYC/KYB, monitoring, Travel Rule, sanctions
* **Sub-merchant:** user journey design, geoblocking, vertical licensing, marketing compliance, prevention of unsolicited US targeting

Swipelux is the regulated crypto custodian in the flow. Sub-merchants never hold, control, or access user assets or private keys.

Related API workflows: [individual onboarding](/integration/onboarding/customers#individual-customers) and [business onboarding](/integration/onboarding/customers#business-customers).

## Auditability & Retention

Swipelux retains user identity and transactional data for 5 years, as required under EU AML laws and Estonia's MLTFPA.

Data subject deletion requests do not apply to AML-mandated records.

Swipelux stores all data within compliant EU infrastructure aligned with GDPR.


## Related topics

- [Overview](/knowledge-base/compliance/overview.md)
- [Shareholders, UBOs, and control persons](/knowledge-base/business-onboarding/shareholders-ubos-and-control-persons.md)
- [Business onboarding overview](/knowledge-base/business-onboarding/overview.md)
- [Business document requirements](/knowledge-base/business-onboarding/document-requirements.md)
- [Business onboarding FAQ](/knowledge-base/business-onboarding/faq.md)