Provider Verification and KYC Policy

a) This Policy explains the checks BridgeX may perform before or during a Service Provider’s participation in the marketplace, how verification badges are interpreted, when reverification may occur and when a status may be restricted or withdrawn. b) This Policy is intended to reduce impersonation, false credentials and marketplace abuse. It does not replace a User’s reasonable assessment of the Service Provider or any regulator’s licensing function.

a) b) c) d) e) f) g) h) i) j)

full legal name, date of birth or age confirmation and contact information; government-issued identity details or an identity-verification result; CAC registration details, business name, company number, directors or beneficial ownership information where relevant; professional qualifications, practising certificates, permits and sector licences; bank or payout account details necessary for settlement; tax identification or invoicing information where required; proof of address, business location or service coverage where relevant; insurance certificates for categories requiring professional indemnity, public liability, motor or other cover; references, work history or portfolio evidence for categories where BridgeX has adopted that check; and additional information reasonably required by a regulator, payment processor, insurer or BridgeX safety process.

a) BridgeX may compare provider-supplied information with official registers, professional bodies, identity providers, business registries, insurer confirmations, references or other reliable sources.

b) BridgeX may ask for additional information where documents are unclear, expired, inconsistent or raise a reasonable concern. BridgeX may pause onboarding while a material inconsistency is investigated. c) Verification records should identify the check, source, date, result, reviewer and next reverification date, without retaining unnecessary copies of high-risk identity documents.

a) Verification is not necessarily permanent. BridgeX may require reverification periodically, on licence expiry, when material profile details change, after a serious complaint, where fraud is suspected, or when a regulator or reliable source indicates a change in status.

b) Service Providers must promptly notify BridgeX if a licence expires, is suspended, restricted or revoked, if the business registration changes, or if any verified information becomes materially inaccurate.

a) BridgeX may suspend or remove a verification badge where the underlying information cannot be confirmed, expires, is materially inconsistent, appears forged, or creates a safety or legal risk. b) Where appropriate, BridgeX will notify the Service Provider of the reason and provide a route to submit corrected evidence or request review. BridgeX may act immediately where continued display of the badge would materially mislead Users or create a safety, fraud or regulatory risk.

a) BridgeX may use reputable identity, business, licence or background-check vendors. Vendors should be subject to appropriate confidentiality, data protection, security, incident, retention and subprocessor requirements.

b) Where a vendor uses biometric or facial comparison technology, BridgeX will assess the lawful basis, accuracy, bias, retention and security implications before deployment and provide appropriate notice.

a)

b) c) d) e)

BridgeX does not guarantee that a verified provider will perform every service competently or safely; BridgeX does not guarantee that information will remain accurate after the date checked; BridgeX does not provide professional certification unless BridgeX is legally authorised to do so and expressly says so; BridgeX does not guarantee the provider’s financial standing, honesty, availability or suitability for a specific user; and Users should ask for additional evidence proportionate to the risk and value of the service.

Submitting forged, altered, stolen or materially misleading verification information is prohibited and may result in immediate suspension, permanent removal, preservation of evidence and referral to a regulator or law enforcement authority where appropriate.

Verification information is processed under the BridgeX Privacy Notice and the Nigeria Data Protection Act 2023. BridgeX will maintain a documented retention schedule and should avoid indefinite retention of identity documents merely because storage is technically available.

Questions about verification or a request to correct or review a verification decision may be submitted through the Platform or to info@bridgexng.com.