COMPLIANCE
Compliance status · what is in place, what is pending
4 MIN · UPDATED 2026-05-09
Engineering posture · in place
| Item | Status | Where |
|---|---|---|
| ETA §9 e-signature consent | ✓ in code | ToS §3, signing flow |
| AMLA attestation flow | ✓ in code | ToS §4, contract sign |
| Milestone-protected escrow architecture | ✓ in code | lib/escrow.ts, ToS §5, ToS §15.1 |
| 90-day audit retention (Computer Crime Act §26) | ✓ in code | lib/auditRetention.ts, /api/health, migration v49 |
| Hash-chain integrity (NOT a digital asset) | ✓ in code | lib/escrowHashChain.ts, ToS §15.7 |
| Customs broker disclaimer (Customs Act §101) | ✓ in code | components/legal/CustomsDisclaimer, ToS §15.6 |
| Wallet UI as ledger statement (not e-money) | ✓ in code | /wallet, ToS §15.2 |
| PDPA §28 cross-border (SCC framework) | ✓ in code | Privacy Policy §5, ToS §15.5 |
| TAI Bangkok arbitration clause | ✓ in code | ToS §8 |
| Liability cap + warranty disclaimer | ✓ in code | ToS §9 (full rewrite 2026-05-09) |
Counsel-led · pending
| Item | Owner | Notes |
|---|---|---|
| ETDA notification under Royal Decree B.E. 2565 | Compliance ops + counsel | Required before public launch · short-form initially, full-form once revenue >฿50M/yr or >5K monthly TH users |
| BOT consultation on payment-architecture classification | Counsel | Determines if Designated Payment Service License is required vs registration only |
| SEC written determination (hash-chain ≠ digital asset) | Counsel | Defensive · prevents later challenge |
| PDPA SCCs signed with Supabase | Counsel + engineering | Documented, not yet executed |
| Bank partner contract for escrow agency | BD + counsel | Critical-path · escrow can't go live without |
| Foreign Business posture decision | Counsel | Thai-majority cap table OR FBL OR BOI Activity 5.10 |
| Provisional patent (procurement OS scope) | Counsel | Hash-chain sigs + spec-revision-bound contracts + dispute ladder + ledger |
Source documents
- Terms of Service — full liability + regulatory architecture
- Privacy Policy — PDPA mapping + processor list
- /privacy/my-data — PDPA §30–§35 self-service
- Internal:
docs/legal/thai-regulatory-report.md— 11-statute card deck
What this means for you as a user
- You can sign contracts today. They are admissible under ETA §9.
- You cannot fund escrow today *through MPBxChange* — escrow goes live when the bank-partner contract is signed. Until then, contracts settle through your existing bank rails (per /pricing).
- Take-rate (1.5% Starter · 1.0% Trader · 0.4–0.8% Anchor) only applies once escrow settles releases. Free until then.
- Cross-border deals: you (the buyer) are importer of record. We help with workflow but are not your customs broker.