Security and compliance, by design
AhoraCrypto operates under a strict regulatory framework and applies technical, operational and organisational controls built to protect your funds, your data and your experience.
Authorized by the CNMV under MiCA
AhoraCrypto, S.L. is authorized by the Spanish National Securities Market Commission (CNMV) as a crypto-asset service provider (CASP) under Regulation (EU) 2023/1114 (MiCA).
This authorization places us under the supervision of the CNMV and binds us to conduct, disclosure, safeguarding and prudential obligations, alongside our anti-money-laundering and counter-terrorism-financing duties. We also align our operations with internationally recognised standards for information security, risk management and operational resilience.
- Regulation (EU) 2023/1114 (MiCA)
- Supervised by the CNMV
How we protect you
Defence in depth, from your wallet to our infrastructure.
Non-custodial by design
We never store your private keys. Crypto goes straight from our platform to your own wallet. Before the first transfer to an external address, we verify ownership of the destination wallet.
Encryption in transit and at rest
All sensitive data is transmitted and stored with industry-standard encryption. Browser-to-server communications run over modern TLS.
Two-factor authentication
Adds a second layer on every login and operation. Internally, least-privilege access and multi-factor on critical systems.
Continuous monitoring
The platform is monitored around the clock to detect anomalous activity. Formal incident management and response procedures in place.
Regular security testing
We carry out audits and security tests regularly, including independent exercises that probe our systems against real-world threats.
Verifiable on-chain
All crypto operations are confirmed on the corresponding blockchain. Transparent, traceable and immutable.
Business continuity, tested
We maintain business continuity and disaster recovery plans, tested regularly to minimise service impact in exceptional scenarios.
Anti-money laundering & know your customer
We comply with Spanish and European regulations on the prevention of money laundering and terrorism financing.
- Identity verification (KYC)Document and biometric check with proof of life, before any operation is enabled.
- Sanctions and PEP screeningAgainst international sanctions lists (UN, EU, OFAC) and politically exposed persons.
- Continuous transaction monitoringPattern detection for anomalous and potentially suspicious operations.
- Travel Rule complianceReporting obligations on crypto transfers under applicable European regulation.
Your data, your rights
We comply with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). Lawful, fair and transparent processing, only what is needed to provide the service and meet our legal obligations.
Governance and internal control
Independent compliance functions and periodic reviews, supervised by the board of directors, which holds ultimate responsibility for risk and compliance.
Customer support and complaints
Formal procedure for handling complaints, with defined timeframes and an auditable record.