Privacy Policy

Last Updated: April 2026

TraceLayer Inc. (“TraceLayer,” “we,” “our”) is committed to protecting institutional and operational data. This Privacy Policy explains how we collect, process, and safeguard information in connection with the TRACE Agent platform.

Information We Collect

We may collect:

  • Account Information (name, business email, organization)
  • Wallet addresses submitted for investigation
  • Transaction metadata processed by TRACE Agent
  • Investigation reports and case notes
  • System logs and audit trails
  • Usage analytics

TraceLayer does not custody digital assets and does not collect private keys.

How We Use Information

Information is processed for:

  • Risk assessment and blockchain forensic analysis
  • Generating compliance reports
  • SAR preparation support
  • Platform security monitoring
  • Service improvement

We do not sell customer data.

Data Retention

Customer investigation data is retained according to:

  • Contractual retention policies
  • Regulatory obligations
  • Customer configuration settings

Customers may request deletion subject to legal constraints.

Security Practices

TraceLayer employs:

  • Encryption in transit and at rest
  • Role-based access controls
  • Multi-factor authentication
  • SOC 2-aligned security controls
  • Audit logging and monitoring

Regulatory Compliance

TRACE Agent supports compliance with:

  • Bank Secrecy Act (BSA)
  • AML/CTF frameworks
  • FinCEN reporting
  • FATF guidelines
  • MiCA (where applicable)

TraceLayer operates as a compliance technology provider and does not act as a financial institution.

International Transfers

Data may be processed in secure cloud environments located in compliant jurisdictions. Appropriate safeguards are implemented for cross-border transfers.

Your Rights

Depending on jurisdiction, users may request:

  • Access to personal data
  • Correction of inaccurate information
  • Deletion requests
  • Restriction of processing

Requests can be submitted to privacy@tracelayer.ai.

Cookies & Tracking

We use minimal analytics cookies for platform performance and security. No behavioral advertising cookies are deployed.

Third-Party Services

TraceLayer integrates with:

  • Cloud infrastructure providers
  • Security monitoring vendors
  • Analytics tools

All vendors are contractually obligated to protect data.

Updates

This policy may be updated periodically. Material changes will be communicated via platform notice.

Contact

TraceLayer Inc.
Compliance & Privacy Office
privacy@tracelayer.ai