> For the complete documentation index, see [llms.txt](https://docs.redacted.money/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.redacted.money/protocol/compliance.md).

# Compliance

Redacted is permissionless and puts privacy first. Anyone with a wallet can use it, with no sign-up, no KYC and no identity checks, and withdrawals are always open. Every deposit is approved by the node network, and each node chooses what it checks before it approves. Independent operators following public rules make those choices, and nobody is asked who they are.

New money waits about two hours before it can be used privately, so a deposit can't be matched to what you do with it a few minutes later. While it waits, the nodes can send back money they decide not to accept, which keeps the crowd you blend in with clean.

Only independent nodes decide whether a deposit is sent back, and it only ever goes back to its sender. The core contributors, the DAO and Bōheki can't turn away or send back anyone's money, and no vote or switch applies to withdrawals. Bōheki (once, for about 3 days at most) and node votes can pause all new deposits, but a pause applies to everyone at once and never singles anyone out.

**Privacy for everyone. A hiding place for no one.**

A private bank account is normal in traditional finance and coexists with regulation everywhere, and Redacted brings the same balance on-chain.

{% hint style="info" %}
**Coming soon.** Node approvals for deposits, the wait and the node decisions go live with the node network in an upcoming update.
{% endhint %}

## What nodes can check

With the node network, the contract accepts a deposit only with a signed approval from a node, and what a node checks before it signs is up to that node. The node software can check addresses against public data such as sanctions lists and known hacks, and the nodes vote on how strict to be. Your anonymity set is your crowd, and a clean crowd is a better crowd to hide in.

Ozone is the reference screener for THORChain and Rujira, built by Redacted's core contributors. It works only from public data, namely official sanctions lists, stablecoin issuer blacklists and known hacks and exploits, and it is published as open source with the launch. Every entry carries its source, and delistings are honoured.

Once Ozone is published with the launch, anyone can run it, and each node chooses which Ozone instance it trusts. The node network can decide to use or add other sources. The public instance at [ozone.redacted.gg](https://ozone.redacted.gg) also follows funds through THORChain itself, so an address that received value from a listed source through a THORChain swap can appear on it too, and anyone can appeal an entry they think is wrong. A node also decides whether to use the optional online checks, and it can run its own instance.

A private self-check is coming soon to the Ozone page. You will be able to check your own address with the check running fully in your browser and, if you choose, create a disclosure report to share with an exchange (see the [Roadmap](/project/roadmap.md#next-up)).

Nodes can check in three places.

* Before it signs a deposit approval, a node can check the sending address.
* Before it carries a payout, a node can check where the value goes, including withdrawal recipients and the addresses an action pays. It can decline an address tied to a known hack or sanctions list, or one it can't check.
* Your Spending account can receive coins from anyone, so a node can keep coins tied to known hacks or sanctions lists out of the Reserve when you return funds. Those coins stay in the Spending account and can still leave publicly, and a few coins from a bad source never stop anyone from using their own funds.

A node that uses an Ozone instance gets signed answers from it, and it can keep a signed copy of the lists as a backup.

## The wait

New money waits about two hours before it can be used privately. That breaks the timing link between a deposit and what you do with it (see [Why new money waits](/using-redacted/privacy.md#why-new-money-waits)), and it gives the nodes time to send back money they decide not to accept. Money that is sent back goes to where it came from, so it never mixes with yours.

Your own money coming back from your Spending account is back at once. That covers what came from your Reserve, every gain your positions make in the share you put in, and payments straight from another Redacted user's Reserve. Money someone else sends to your Spending account waits like a deposit, and a mixed return is split so that your own part is back at once. Nodes confirm this, as described in [Returns from Spending](/node-network/node-network.md#returns-from-spending).

## The nodes decide

Independent node operators decide what to check, and no company does. Node votes set how strict they are, so two thirds of the active nodes, and at least three, can switch on strict screening, pause deposits or start incident mode. Sending a deposit back takes the votes of at least two nodes, or a third of the active nodes once more than six are active, and it goes back only to the address it came from. No single node can send a deposit back alone, and no node has to follow any one Ozone instance.

Bōheki can pause new deposits once, for about 3 days at most, and two thirds of the active nodes, and at least three, can pause them until they vote to lift it. Either way the pause applies to everyone at once and never touches a withdrawal.

After the token relaunch, token holders can set the screening policy. The details are in [How the node network works](/node-network/node-network.md) and [Who decides what](/protocol/system-overview.md#who-decides-what).

## Proof of Innocence

Proof of Innocence is coming soon. It will let you prove a defined property about your funds, for example that they don't come from known hacks or sanctions lists, without disclosing your history to anyone. It is zero-knowledge, so you answer the question that was asked and nothing more.

## Selective disclosure

A dedicated read-only key, also coming soon, will let you give view access to your account history to an auditor, a tax advisor or a court without giving them any spending power. You choose who sees what. The read-only key is the one to share, because your recovery backup gives full control and should stay with you.

## Withdrawals

Withdrawals are authorized by your private account's keys and bound to the public wallet you confirm, and no vote, pause or delay applies to them. Together with [backup restore through any supported wallet](/using-redacted/backup-and-recovery.md), that means access to your own funds doesn't depend on one device or one provider. See [The same for everyone](/protocol/system-overview.md#the-same-for-everyone).

| Area                        | How it works                                                                                                                                                                                             | Status                                                     |
| --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- |
| Access                      | No sign-up, no KYC, no identity checks, and anyone with a wallet can use it                                                                                                                              | live                                                       |
| Address checks              | Up to the nodes. Deposits need a node's signed approval, and the node software can check addresses against public data such as sanctions lists and known hacks                                           | with the node network                                      |
| Deposit window              | New money waits about two hours, which removes the quick deposit-then-act link and gives nodes time to send back money they decide not to accept. Your own money returning from Spending is back at once | with the node network                                      |
| Who can turn a deposit away | Independent nodes, by vote, and not the core contributors, the DAO or Bōheki                                                                                                                             | with the node network                                      |
| Screening policy            | Token holders after the relaunch and the DAO until then. Ozone is the reference screener, and each node chooses which instance it trusts                                                                 | with the node network and token holders after the relaunch |
| Ownership                   | Cryptographic notes and proof-authorized spending                                                                                                                                                        | live                                                       |
| Disclosure                  | Proof of Innocence and read-only keys, controlled by the user                                                                                                                                            | coming soon                                                |
| Self-check                  | A private check of your own address on the Ozone page, fully in your browser, with an optional disclosure report for exchanges                                                                           | coming soon                                                |
| Withdrawals                 | The public wallet is bound into your authorization, and no vote applies to them                                                                                                                          | live                                                       |