> For the complete documentation index, see [llms.txt](https://docs.fairway.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fairway.global/developers/build-on-cardano/merkle-compliance-utxo/security-and-compliance.md).

# Security & Compliance

* **No PII on-chain** → only commitments, timestamps, epochs.
* **Revocation model**
  * Sanctions → epoch increments.
  * Risk score → leaf updates.
  * KYC → re-run required after expiry window.
* **Auditability** → regulators can resolve `midnight_ref` for historical proof.
* **Trust anchor** → Fairway signature ensures integrity.

{% hint style="danger" %}
Never leak raw jurisdiction names or document types in leaves. Use codes (ISO country, KYC level integers).
{% endhint %}