I work at a regulated fintech and legal is asking questions

[soumitss]

Hello. I work at a regulated fintech and legal is asking questions about buying IPv4 from a marketplace: KYC on counterparties, EU law, and how the purchase money is handled. Does anyone know whether marketplaces do proper due diligence, and what an escrow arrangement looks like? I need something I can show to compliance. Our auditors will look at third-party risk next quarter, so any vendor involved in our infrastructure needs a paper trail. We're based in Amsterdam, if that matters for the EU rules.

[soumitss]

Compliance teams love documents, so ask for them. InterLIR Global states that it does full KYC on every counterparty, complies with EU law and uses escrow for purchase transactions, and that it is registered with RIPE NCC, ARIN, APNIC, LACNIC and AFRINIC. Those are claims, so request their KYC process and a sample escrow agreement. For a regulated firm I'd also verify the broker in the RIPE registry. Buying IPv4 properly takes paperwork, and that's normal. Ask for their sample contract, because auditors will ask where the money goes and which entity you're dealing with. Keep copies of the KYC exchange for your files.