Legal & Accessibility

Conformance target

We measure NOSHASHI against WCAG 2.2 Level AA and the Department of Justice's web accessibility guidance under the Americans with Disabilities Act. We consider the console partially conformant: most of the standard is met, and the known gaps below are tracked as defects rather than accepted behaviour.

What the software does today

These are implemented and verifiable in the current build:

• Every interactive control is reachable and operable by keyboard alone, in a logical order.
• Focus is shown with a visible ring on keyboard navigation and suppressed on mouse click, so the focus position is never ambiguous.
• The interface honours the operating system's reduce-motion setting, and adds an in-app motion control so ambient animation can be stopped without changing an OS preference.
• A high-contrast mode raises text and rule contrast and removes ambient texture entirely.
• An interface scale control enlarges type, rules, icons and hit targets together, up to 140%, without an OS-wide zoom.
• An inverted light theme is available alongside the default dark theme, and both follow the system setting when asked to.
• A skip link is the first item in the tab order, moving keyboard and screen reader users past the navigation rail in one keystroke.
• Live regions announce link degradation and critical portfolio alerts to assistive technology, throttled so a fast ledger cannot flood speech.
• Body text is rendered near-white on pure black, exceeding the 4.5:1 contrast minimum; status colours are never the only signal — every GO / HOLD / NO-GO state also carries a text label.
• Icon-only controls carry accessible names, and charts expose a text alternative describing what they plot.
• Data tables use real table semantics with header cells, so a screen reader can announce row and column context.
• The command palette (Cmd+K) provides a keyboard route to every scene and action without traversing the sidebar.

Known gaps

We would rather name these than let you discover them:

• The console is designed for a desktop viewport and has not been tested above 200% screen magnification combined with the 140% interface scale.
• The live ledger stream and the status ticker are not announced continuously; only link state and critical alerts are. This is deliberate — announcing every validated transaction would make the console unusable with a screen reader — but it means stream detail must be read on demand.
• Streaming agent responses are not yet chunked into announceable units, so a screen reader reads the reply once it settles rather than as it arrives.
• Charts expose a text alternative describing what they plot, but not the underlying series as a data table.

Feedback and enforcement

If you encounter a barrier, email support@noshashi.app with the scene, what you were trying to do, and the assistive technology you were using. We aim to acknowledge accessibility reports within 1 business day and will tell you the remediation timeline or offer an alternative way to complete the task.

Reference: WCAG 2.2 quick reference (https://www.w3.org/WAI/WCAG22/quickref/) and ADA web guidance (https://www.ada.gov/resources/web-guidance/).

What we do not collect

NOSHASHI Labs operates no analytics, no telemetry, no crash reporting and no advertising identifiers. We do not profile you and we do not sell or share data with advertisers.

Using the console without an account

Signing in is optional. Without an account, the console reads public ledger data and stores your preferences locally, and no request identifying you reaches any server we operate. This is the default and it is fully functional.

What an account stores

Creating an account means we hold data about you. Specifically:

• Your email address and, if you supply one, a display name and organisation.
• A password, stored only as a salted bcrypt hash by our authentication provider. We never see, log, or transmit the password itself, and we cannot recover it.
• If you enable two-factor authentication, the shared secret for your authenticator, held by the same provider.
• Your subscription state, mirrored from Stripe: plan, status, seat count and renewal date. We never receive or store your card number — that stays with Stripe.
• Any wallet addresses you add to a portfolio, and any labels you give them. These are public ledger addresses, but the association between them and your account is private to your account.
• Verification records written by the Compliance API: a timestamp, the domain, the verdict and the receipt digest.
• API keys, stored only as a SHA-256 digest. A stolen database yields no working key, and we cannot show you a key again after it is issued.
• If you belong to an organization: each time you sign in, a record in that organization's audit log of when, the IP address, the browser or app identifier (first 200 characters) and whether a second factor was used. It is readable by the organization's owners, admins, compliance, risk, reviewer and auditor members and any examiner seat, so the organization can account for access. Like the rest of that audit log it cannot be edited, and it is kept for the life of the organization.

Who processes it

Account data is held in Postgres at Supabase (United States region) behind row level security, so a row is only reachable by the account that owns it. Payments are processed by Stripe, which is the controller of your payment instrument — we never receive it. The website and its contact form run on Vercel, and messages you send us through the contact form or a support ticket are delivered by email through Resend. No other processor is involved.

What stays on your device

The following never leaves the machine you are running on:

• Your preferences — watched wallet address, notification and automation settings — written to an application data file managed by the desktop runtime.
• API secrets, held in the operating system keyring (macOS Keychain). The value is written and cleared from the interface but is never read back into the application window.
• Compliance receipts and session evaluation logs, which exist only in memory for the current session unless you export them or an account is signed in.
• Everything you type to the compliance agent, provided the agent is pointed at a local runtime — which is the default. If you deliberately select a remote model provider, your prompts go to that provider under their terms, and the interface says so on the screen where you choose it.

What the software connects to

Outbound connections are limited to:

• Public XRP Ledger nodes over WebSocket, to read validated ledger data. These requests contain the public account addresses you ask about — which are already public on the ledger — and no other information about you.
• Google Fonts, to load the typefaces used in the interface.
• A local model runtime on 127.0.0.1 port 11434, if you have one installed. This connection does not leave your machine.

Public ledger data

The XRP Ledger is a public record. Any address you load, and every transaction associated with it, is already visible to anyone. Loading an address into this console does not make it more public, but nothing this software does can make ledger data private after the fact.

Retention and deletion

Account data is kept while the account exists. Ask us to delete it at privacy@noshashi.app and we will remove the account, its portfolios, its API keys and its verification records. Billing records are retained by Stripe for as long as tax and accounting law requires, which is outside our control.

Sign-in records in an organization's audit log belong to that organization and stay when your account is deleted, because that log cannot be edited: your name is removed from them, but their time, IP address and browser or app identifier remain.

To remove local data, clear the application's data directory and delete any stored secret from Settings.

Your rights and contact

Depending on where you live you may have rights to access, correct, export or delete your data, and to object to processing. Exercise any of them at privacy@noshashi.app and we will respond within 1 business day. If we ever cannot honour a request, we will tell you why.

What this software is

NOSHASHI is a read-only compliance console for the XRP Ledger. It reads public ledger state, evaluates it against a configurable policy rule set, and returns an explainable verdict with a cryptographic receipt. It does not custody assets, hold keys, or sign or broadcast transactions.

Not advice

Nothing produced by this software — verdicts, receipts, agent responses, or the commercial plan shown in the console — is legal advice, regulatory advice, tax advice, or investment advice.

A GO verdict means the configured rules passed. It is not a representation that a transaction is lawful in your jurisdiction, and it does not discharge any obligation you owe to a regulator. A NO-GO verdict is not a determination that anyone has done anything wrong.

Compliance determinations that carry legal consequence must be reviewed by qualified counsel and the responsible compliance officer.

Experimental features and human review

The XRPL Edge Lab and its downloadable Edge Pack are experimental research features. They may be incomplete, change without notice, or return an unknown result when public ledger data is unavailable. They do not establish ownership, title, solvency, liquidity, recoverability, sanctions status, legality or regulatory status.

You remain responsible for independently verifying inputs and outputs, applying the laws and policies that govern your activity, protecting personal data, and obtaining review from qualified legal, tax, compliance and technical professionals before acting.

The rule set is yours

The domain registry and policy rules shipped with this build are reference definitions for demonstration. Before operational use you are responsible for configuring rules that reflect the obligations that actually apply to you, and for keeping them current as those obligations change.

Availability and accuracy

The console reads from public XRP Ledger infrastructure operated by third parties. We do not control that infrastructure and do not warrant its availability, latency, or the accuracy of data it returns. Ledger state shown may be stale during a network partition.

The software is provided as-is, without warranty of any kind. To the maximum extent permitted by law, no liability is accepted for loss arising from reliance on it.

Acceptable use

You agree not to:

• Use the console to evade sanctions screening, conceal the origin of funds, or defeat a compliance obligation.
• Represent a verdict from this software as an official determination by a regulator or a licensed institution.
• Present the compliance agent's output as professional advice from a licensed adviser.

Fees, renewal and cancellation

Paid plans are subscriptions that renew automatically at the interval and price shown at checkout, charged to your payment method until you cancel. Verification credit packs are one-time purchases and do not renew.

You may cancel at any time from Account → Manage Billing, which opens Stripe's billing portal. Cancellation takes effect at the end of the period you have already paid for; access continues until then. Cancelling is a self-service action and never requires contacting us.

We will email you a receipt for every charge. If we change the price of a plan you are on, we will give you at least 30 days' notice before the change takes effect, and you may cancel before it does.

Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, even if advised such damages were possible.

Our total aggregate liability arising out of or relating to these terms is limited to the greater of (a) the fees you paid us in the twelve months before the event giving rise to the claim, or (b) one hundred US dollars.

These limits do not apply to liability that cannot be limited by law, including in some jurisdictions liability for fraud, gross negligence, wilful misconduct, or death or personal injury caused by negligence.

Indemnity

You agree to indemnify and hold harmless NOSHASHI Labs from third-party claims arising out of your use of the software in breach of these terms, your configuration of the policy rule set, or your representation of a verdict as something it is not.

Dispute resolution

We would rather fix a problem than litigate one. Contact legal@noshashi.app first; most disputes end there.

If a dispute cannot be resolved informally within 60 days, it will be settled by binding individual arbitration administered under the rules of a recognised arbitral body in United States, rather than in court, except that either party may bring an individual claim in small-claims court or seek injunctive relief to protect intellectual property.

TO THE EXTENT PERMITTED BY LAW, DISPUTES WILL BE BROUGHT INDIVIDUALLY AND NOT AS A CLASS, COLLECTIVE OR REPRESENTATIVE ACTION, AND EACH PARTY WAIVES ANY RIGHT TO A JURY TRIAL. Where this waiver is unenforceable — including for many consumers in the EU, UK and certain US states — it does not apply to you, and nothing here removes a right you cannot waive under your local law.

Changes to these terms

We may update these terms. For material changes we will give notice in the application or by email at least 30 days before they take effect. Continuing to use the software after that date means you accept the updated terms; if you do not, cancel before then and we will refund any unused prepaid period.

Governing terms

These terms are governed by the laws of United States, without regard to conflict-of-law rules. If any provision is held unenforceable, the rest remains in force. Questions: legal@noshashi.app.

What recurs

Before you are charged anything, you see all of this at checkout:

• Desk is $749 per seat per month and renews every month until cancelled.
• Institution is $4,000 per month and renews every month until cancelled.
• Verification credit packs are one-time purchases. They do not renew and they do not expire.
• The Free plan is free and never asks for a payment method.

How to cancel

Account → Manage Billing opens Stripe's billing portal, where cancelling takes two clicks. You do not have to email anyone, call anyone, or explain yourself, and there is no retention flow designed to slow you down.

Cancelling stops the next charge. You keep access until the end of the period you already paid for, and the plan then reverts to the free Operator tier rather than locking you out of your own data.

Refunds

If you cancel within 14 days of a first subscription charge and have not used a paid capability in that period, email support@noshashi.app and we will refund it in full.

Verification credits are refundable pro rata for the unused balance within 30 days of purchase.

If a verification fails because of a fault on our side, the credit it consumed is restored — tell us and we will do it without argument.

Where local consumer law gives you a stronger right of withdrawal — such as the 14-day right in the EU and UK — that right applies in addition to this policy, not instead of it.

Failed payments and taxes

If a renewal payment fails, the plan moves to past-due and paid capabilities pause; your data is retained. We do not add late fees.

Prices are exclusive of tax unless stated. Where we are required to collect VAT, GST or sales tax, it is calculated and shown by Stripe at checkout.

Roles

For account data — your email, subscription state, portfolios and verification records — NOSHASHI Labs is the controller. For data you put into the product about other people, you are the controller and we act as processor on your instructions.

If you need a signed Data Processing Agreement with standard contractual clauses, email legal@noshashi.app and we will execute one.

Subprocessors

We use these, and only these, to run the service:

• Supabase (United States) — authentication, Postgres database, serverless functions.
• Stripe (United States) — payment processing, subscription management and invoicing. Stripe is an independent controller of your payment instrument.
• Vercel (United States) — hosts the website and runs its functions, including the contact form, which receives the name, email address and message you send.
• Resend (United States) — delivers transactional email: contact-form messages and support-ticket notifications. It receives the message and the addresses it is sent from and to.
• Public XRP Ledger nodes — read-only queries of public ledger state. These receive the public addresses you look up and nothing about you.
• That is the complete list. There is no analytics vendor, no session-replay tool, no advertising network, and no AI vendor. We send no marketing email.

Lawful basis and transfers

We process account data to perform our contract with you, and to meet legal obligations such as tax record-keeping. We do not rely on legitimate interests to profile you, because we do not profile you.

Data is stored in the United States. For transfers out of the EEA, UK or Switzerland we rely on standard contractual clauses with our subprocessors.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent. California residents additionally have the right to know, delete, correct, and to opt out of sale or sharing — we do not sell or share personal information, so there is nothing to opt out of.

Exercise any right by emailing privacy@noshashi.app. We respond within 1 business day and will not discriminate against you for asking.

Breach notification

If we suffer a personal data breach affecting you, we will notify you and the relevant supervisory authority without undue delay and within 72 hours of becoming aware, describing what happened, what data was involved, and what we are doing about it.

Sanctions

You may not use this software if you are located in, ordinarily resident in, or organised under the laws of a jurisdiction subject to comprehensive sanctions, or if you appear on a restricted-party list including the US Treasury's SDN list, the UK sanctions list, or the EU consolidated list.

You confirm you are not acting on behalf of any such person. We will suspend an account immediately on credible information to the contrary, and we will report where we are legally required to.

Export control

This software contains cryptographic functionality and may be subject to export regulations, including the US Export Administration Regulations. You are responsible for complying with the export and import laws that apply where you are.

Prohibited uses

You may not use the software to:

• Evade a sanctions, anti-money-laundering, know-your-customer or reporting obligation, or help anyone else do so.
• Conceal the origin, ownership or destination of funds.
• Represent a verdict as a determination by a regulator, an auditor, or a licensed institution.
• Present the compliance agent's output as advice from a licensed professional.
• Attack the service — scraping beyond rate limits, credential stuffing, or probing other accounts' data.
• Resell access, or share an API key outside your organisation.

Enforcement

We may suspend or terminate access for a breach of this policy. Where the breach is inadvertent and fixable we will tell you first. Where it is not, we will not.

Report abuse to security@noshashi.app.

Not a regulated financial institution

NOSHASHI Labs is not a bank, a broker-dealer, a money services business, a money transmitter, a qualified custodian, or a registered investment adviser. It does not hold client assets or client funds at any point.

Not a sanctions screening provider of record

The sanctions-related rules in this console evaluate credentials asserted on-ledger by third-party issuers. They are not a substitute for screening against an authoritative sanctions list by a provider of record, and they do not discharge any screening obligation you hold.

Credential issuers are third parties

A credential is only as reliable as the issuer that signed it. This software verifies that a credential exists on the ledger, is accepted by its subject, and has not been revoked. It cannot verify that the issuer performed adequate diligence before issuing it.

Fees and licensing

Any fee charged for compliance verification may attract licensing obligations depending on jurisdiction and on how the service is characterised. This has not yet been assessed by counsel and must be before any fee is charged in production.

Reporting a problem

Security vulnerabilities: security@noshashi.app. We ask for coordinated disclosure and will acknowledge within 1 business day. Regulatory or legal correspondence: legal@noshashi.app.

Runtime and framework

All permissively licensed; none impose copyleft obligations on this application:

• React and React DOM — MIT
• Tauri, and the Rust crates it depends on — MIT / Apache-2.0
• Vite and Rollup — MIT
• Tailwind CSS — MIT
• Radix UI primitives — MIT
• Framer Motion — MIT
• supabase-js — MIT
• keyring (Rust) — MIT / Apache-2.0

Typefaces

Inter, Orbitron, Rajdhani and JetBrains Mono are licensed under the SIL Open Font License 1.1 and are bundled with the application rather than fetched from a font CDN.

No copyleft dependencies

The dependency tree is audited to contain no GPL, AGPL or SSPL components, so shipping this application as a closed binary creates no source-disclosure obligation. If that ever changes, this page changes with it.

Trademarks

XRP, XRP Ledger and XRPL are marks of their respective owners. Stripe and Supabase are marks of their respective owners. Use of these names describes interoperability and does not imply endorsement, sponsorship or affiliation.

Institution names shown in the reference domain registry are fictional examples. They do not refer to, and do not imply any relationship with, any real firm.