Kriptomat Code of Conduct

Our Mission

Kriptomat’s mission is to make investing in crypto accessible, secure, and fair for everyone — especially in Central and Eastern Europe. Our Code of Conduct reflects our commitment to operating with integrity, transparency, and customer focus, while ensuring full compliance with applicable lawsincluding the EU Markets in Crypto-Assets Regulation (MiCAR)  and best practices.

Core Principles

Trust & Security

We are ISO-certified (including ISO/IEC 27001, ISO 37301, ISO 37001, ISO 9001) and committed to the highest standards of information security, anti-bribery, and compliance management. Security and reliability are embedded in our technology and business conduct.

Accessibility

Crypto should be for everyone. We design our services to be easy to use, compliant with AML/CTF rules, and accessible in multiple languages and markets.

Customer Happiness

We aim to deliver exceptional customer experience with fast, friendly, and helpful support. Your feedback helps us grow.

Our Team

We foster a supportive, respectful, and high-performing culture. Teamwork, continuous learning, and well-being are key to our success.

Our Values

• Customer Obsessed: We build with user needs at the core.
• Accountable: We own our actions and support our team.
• Best: We aim for excellence in everything we do.
• Curious: We never stop learning.
• Direct: We communicate openly and honestly.
• Speedy: We act fast and improve daily.
• Integrity We act ethically, responsibly, and in line with our commitments.

Ethical Business Conduct

External Conduct

• Conflicts of Interest & Gifts: We manage external relationships with integrity and follow strict internal guidelines.
• Anti-Bribery & Corruption: Zero tolerance for corruption, in line with ISO 37001 and legal requirements.
• AML/CTF and Sanctions Compliance: We strictly follow EU and Estonian laws and screen all clients and partners.
• Insider Trading & Market Conduct: We do not tolerate insider trading or market manipulation.
• Marketing & Social Media: We promote our services truthfully and transparently.
  

Internal Conduct

• Data Protection: We comply with GDPR and protect personal data with diligence and care.
• Information Security: Our infrastructure is resilient and aligned with DORA and ISO 27001:2022.
• Confidentiality & IP: We safeguard confidential information, intellectual property, and business know-how.
• Asset Use: Company resources are used responsibly and only for business purposes.
  

Working with Others

We build fair, long-term and transparent partnerships and screen all business relationships with a focusbased on risk and integrity.

Raising Concerns

We encourage reporting of any ethical violations through our Whistleblower Policy. All reports are confidential, protected, and investigated independently to ensure fair outcometaken seriously.

Oversight & Governance

Kriptomat follows a Three Lines of Defence modelrisk framework (Operations, Compliance, and Internal Audit) and conducts regular reviews of its ethical practices and policies.

A Message to Our Stakeholders

We believe that responsible conduct is key to building a sustainable crypto economy. This Code of Conduct is our public commitment to doing things right — not just legally, but ethically. It applies to all Kriptomat employees, contractors, and business partners, and it demonstrates our ongoing commitment to doing business the right way.