OAIFI GROUP GOVERNANCE & COMPLIANCE
Group governance & compliance boundaries
Structure before returns. Segregation before scale. These boundaries apply to every entity and website.
Important note on regulatory frameworks · Regulator names describe frameworks typically relevant to an activity in a jurisdiction. They do not imply that any fictional entity holds a licence, permission or regulatory approval. This website provides no claim of licensing or regulatory approval, investment advice, insurance sales, return promises or offer of services.
Three layers of risk segregation
- Separate legal entities, books & audits
- Separate client data permissions for client-facing and technology entities
- Group headquarters neither guarantees client transactions nor assumes client positions
Three lines of defence
- 1. Business lines & front office: own-risk management
- 2. Group risk & compliance: limits, monitoring & model validation
- 3. Internal audit: independent review, reporting directly to ARC
NEGATIVE SCOPE
Activities excluded across the group
- Public retail fundraising or investment products
Avoid triggering public offering and investor suitability obligations - Capital protection, minimum return or performance guarantees
Compliance boundaries - Holding client fiat currency or digital wallet private keys
Independent custody of client assets; group role limited to architecture & instructions - Guaranteeing client transactions using group credit
Legal entity risk segregation - Collecting client identity, bank account or insurance documents
This static website does not handle sensitive data
REGULATORY FRAMEWORKS
Relevant regulatory frameworks by jurisdiction
| Jurisdiction / region | Relevant frameworks (no claim of licensing) |
|---|---|
| Singapore headquarters / SG digital assets | Companies Act and ACRA; Payment Services Act digital payment token service framework; MAS digital asset and professional investor suitability guidance |
| Hong Kong SAR, China | Companies Ordinance; SFC regulated activity frameworks; TCSP licensing framework; IA insurance brokerage framework; PDPO |
| United Kingdom | Companies House; FCA / PRA frameworks; London insurance and reinsurance market practices; UK GDPR; AML and sanctions screening |
| Oregon, United States | State corporate registration, group controls and security audits; internal technology services may not directly trigger financial licensing |
| California, United States | CA DOI / CDI insurance brokerage framework; SEC / state RIA framework; DFPI, FinCEN / BSA, CCPA; FATCA / CRS |
Hong Kong is a Special Administrative Region of China and is referred to as Hong Kong SAR, China. This table lists jurisdictions / regions rather than separate countries.
DATA
Data retention & cross-border transfers
Local retention
Client identity documents remain in Hong Kong SAR, China, the UK or California, subject to PDPO, UK GDPR or CCPA.
Least privilege
Technology receives only de-identified, aggregated data; cross-border transfers require TDEC approval.
Quarterly review
Quarterly asset segregation and control reviews, with internal audit reporting directly to ARC.
Naming & trademarks · Open AI Fintech Investment Ltd. is an illustrative name, with no affiliation to OpenAI OpCo, L.L.C. or its affiliates. Trademark research and a naming review are required before real use. Terms such as Investment, Trust and Insurance may be regulated locally and require local legal review.