AML & Compliance Notice

This AML & Compliance Notice is published by izzytap Portal ("izzytap", "we", "us" or "our"), a Software-as-a-Service provider based in Dubai, United Arab Emirates. It explains, in plain terms, what our software does and — just as importantly — what it does not do in relation to anti-money-laundering (AML), counter-terrorist-financing, sanctions screening, know-your-customer (KYC) and wider regulatory compliance.

This Notice applies to every organisation that subscribes to izzytap (the "Firm", "Subscriber" or "you") — typically a corporate service provider or business-setup consultancy — and forms part of, and should be read together with, our Terms of Service, Acceptable Use Policy, Privacy Policy and Data Processing Addendum.

izzytap supplies software tools only. Our platform helps the Firm organise, record and streamline its own compliance workflows — for example capturing End-Client information, storing documents, running screening checks against third-party data sources, flagging items for review and maintaining an audit trail.

These are administrative and record-keeping tools. izzytap is not a compliance bureau, screening agency, or regulated service, and providing the software does not make izzytap a party to the Firm's client relationships or regulatory filings.

The Firm remains fully and solely responsible for its own regulatory obligations. This includes, without limitation, appointing and maintaining a competent MLRO where required, designing and operating an adequate AML/CFT programme, conducting customer due diligence and enhanced due diligence, assessing risk, keeping records for the periods the law requires, and making any suspicious-activity or suspicious-transaction reports to the relevant authorities.

Using izzytap does not transfer, reduce or discharge any of these duties. Where our tools produce a result, a flag or a report, it is the Firm — not izzytap — that must review it, interpret it and decide what action to take.

Where the software checks names or entities against sanctions lists, politically-exposed-person (PEP) data, adverse-media feeds or similar sources, those results come from third-party providers and public datasets. Such data may be incomplete, out of date, mismatched, duplicated or subject to false positives and false negatives, and coverage varies between jurisdictions and lists.

Any screening result is indicative only and is a starting point for the Firm's own review — never a final determination. The Firm must apply its own judgement, resolve matches and mismatches, and carry out any further enquiry that its risk assessment and applicable law require. A list of the third parties we rely on is set out in our Subprocessors page.

izzytap does not warrant or guarantee that using the software will make the Firm compliant with any law, regulation, licensing condition or regulator expectation, nor that it will detect or prevent money laundering, fraud, sanctions breaches or other financial crime. Compliance is an outcome of the Firm's own programme, people and decisions — not of any single tool.

The Firm must maintain its own written policies, controls and procedures, and must apply independent professional judgement to every matter. izzytap's templates, checklists, default settings, workflows and prompts are conveniences that the Firm should review, adapt and, where appropriate, override to fit its own risk appetite and the requirements of its regulator.

You should not treat any feature, default or output of the software as a substitute for a properly designed and supervised compliance framework. Please use the software only as permitted by our Acceptable Use Policy.

When izzytap processes the personal data of the Firm's End Clients through the platform, it does so on the Firm's instructions and on its behalf: the Firm is the controller and izzytap is the processor. izzytap acts as controller only for its own account, billing and platform-administration data.

These roles, and the safeguards that apply to End-Client data, are governed by our Data Processing Addendum and explained further in our Privacy Policy.

This Notice is provided for general information about how izzytap works. It is not legal, regulatory, tax or compliance advice, and it does not create any advisory or professional relationship between izzytap and the Firm or its End Clients. The Firm should obtain its own qualified professional advice on its specific obligations and circumstances. Further AML-related terms may appear in our Terms of Service.

We may update this Notice from time to time to reflect changes in our software, our third-party sources or applicable law. When we do, we will revise the "last updated" date below and, where the change is material, take reasonable steps to bring it to the Firm's attention. Continued use of izzytap after an update means the Firm accepts the revised Notice.

If you have any questions about this Notice, please contact us at hello@izzytap.com. This Notice is governed by the laws of the United Arab Emirates, and the competent courts of the United Arab Emirates have jurisdiction over any dispute relating to it. Last updated: 25 July 2026.