Answer

Bridge uses a tiered KYC framework implemented through Persona for wallet creation. The process requires collecting and verifying customer information (including ID verification and watchlist screening), with three levels of due diligence: Simplified, Standard, and Enhanced. No wallets can be created without completing KYC verification. The process includes identity verification against government databases, sanctions screening, and PEP checks, with records retained for 5 years.

Bridge has a tiered geographic restriction system: Prohibited countries (e.g., Cuba, Iran, Myanmar, North Korea, Syria) where services are not allowed, Controlled countries where services are only allowed through special programs, and Restricted countries where services are permitted with additional monitoring. Bridge blocks users via IP geofencing in prohibited/controlled jurisdictions. For Wallets, certain jurisdictions like Australia, Canada, Japan, Singapore have additional restrictions. Additionally, Bridge will be able to offer wallets to NY users pending NY Trust.

Bridge operates under MSB and MTL licenses in 48 US states, plus a VASP license in Europe and pending EMI license (see licensing here). This licensing infrastructure allows developers to serve their customers without needing their own money transmission licenses, as Bridge directly handles the money movement and compliance requirements. Customers become Bridge clients by accepting Bridge's terms and completing KYC, while developers maintain the customer interface.

Bridge primarily uses Persona for sanctions, PEP and watchlist screening, and TRM Labs for blockchain analytics and crypto wallet screening. The screening includes OFAC, UN, and EU sanctions lists, with IP blocking for sanctioned jurisdictions. For high-risk territories, Bridge conducts enhanced due diligence (EDD) and additional monitoring. Screening occurs at onboarding, on scheduled re-screens, during periodic reviews, and for certain transactions.