Legal
What a verdict is
A verdict from this API is a set of findings. Each finding names what was observed, which source it came from, and a link to that source. A risk score is derived from those findings under a named, versioned ruleset — it is never the primary artifact, and it is never bought from a vendor and resold as our own.
Every verdict is pinned to the ruleset version, the label snapshot and the chain height it was computed against, so the same verdict can be re-derived later and produce the same findings. You are meant to check our work, not to trust it.
What a verdict is not
A verdict is an input to your risk decision. It is not the decision.
- It is not a legal, financial or compliance determination, and it does not replace your own policy, your own obligations or a licensed advisor.
- It is not a statement that a person is guilty of anything. A label records that a source published an association with an address, with a date and a citation.
- It is not exhaustive. A verdict reflects the sources wired at the time it ran. When a source is unavailable the verdict is returned explicitly marked partial, never silently downgraded to a clean result.
You decide what to do with an address or a transaction. We tell you what we found and where it came from.
Your query data
When you check an address, the answer our label providers return about that address is recorded in our own label database and used in later checks — yours and other customers’.
What we record is the provider’s statement about the address: its category, the entity name the provider gives, the provider’s public page for it and the time of the answer. Your account, your identity and your check are never recorded with it.
We do not sell or share your query history, and we do not use your traffic to build a product that competes with your business. Your queries are retained only as the metering and audit records needed to bill you and to answer a dispute about a specific check.
Data sources and attribution
Our label layer is built from public sanctions data and openly licensed community datasets, and from the answers commercial label providers return for addresses checked through our service, each recorded with the provider and its public source. Some of them require attribution as a condition of redistribution, and this section is where that obligation is discharged.
- OFAC SDN (advanced XML) — United States federal government work, no copyright asserted.
- UN Security Council Consolidated List, EU Financial Sanctions Files — public sanctions data published by the issuing body.
- Japan MOF/METI asset-freeze list — Japan Public Data License 1.0 (PDL1.0).
- Israel NBCTF seizure orders — government legal orders published by the issuing body.
- 0xB10C OFAC parity check — used as a cross-check on our own OFAC ingest, not as a label source.
- Ransomwhere — CC BY 4.0. Cable, Jack. (2024). Ransomwhere: A Crowdsourced Ransomware Payment Dataset (1.1.0) [Data set]. Zenodo. https://doi.org/10.5281/zenodo.6512122
- BitcoinHeist Ransomware Address Dataset — CC BY 4.0. Bitcoin Heist Ransomware Address [Dataset]. (2020). UCI Machine Learning Repository. https://doi.org/10.24432/C5BG8V
- DeFiHackLabs — Apache License 2.0. SunWeb3Sec/DeFiHackLabs.
Where a commercial data provider contributes to a verdict, we present findings derived from that provider’s data under the terms they granted us. We do not resell API access to any provider, and we do not redistribute any provider’s raw responses.
Provenance and corrections
Every label carries a dereferenceable source link, the provider that published it and the date it was observed. Labels are append-only: a label that is later contradicted is superseded and the earlier one remains readable, so a past verdict stays explainable. Nothing is deleted quietly.
If you believe a label about an address is wrong, tell us which address, which finding and why. We correct our own attribution by superseding it. We cannot correct a third party’s published designation — for those, the source link in the finding is where to go.
Availability and limits
Screening depends on chain data and on third-party sources, both of which can fail. When they do, you get a partial verdict that says so. Nothing in this document is a warranty that the service is available, complete or fit for a particular purpose, beyond what your contract with us says.