platform architecture & regulatory scope
Dubstrata is a next-generation Alternative Data & Causal Knowledge Graph Intelligence Platform. It ingests, verifies, indexes, and synthesizes multi-source empirical data—including decentralized prediction market orderbooks (Polymarket CLOB), sovereign regulatory filings (SEC EDGAR, Federal Register), institutional news wires, and macroeconomic indicators—into structured, point-in-time quantitative data feeds and causal reasoning graphs.
Operates exclusively as a software and alternative data provider. Does NOT provide discretionary investment management, broker-dealer execution, market-making, or custody of client funds.
All proprietary metrics (CSI, ICI, Clean HHI, FinVIC, Kelly sizing) are objective mathematical expressions of empirical data, not personalized financial advice.
Ingested data carries RFC 3161 timestamps, zkTLS validation, and SHA-256 citation signatures to ensure zero lookahead bias and auditability.
1. Financial Services Regulation & Licensing (FSCA & FAIS Act)
1.1 Financial Advisory and Intermediary Services Act, 37 of 2002 (FAIS Act)
The primary statute governing financial advice and intermediary operations in South Africa is the FAIS Act, administered by the Financial Sector Conduct Authority (FSCA).
A. Analysis of "Financial Advice" under Section 1(1) of FAIS
- Factual & Generic Information Exclusion: Board Notice 80 of 2003 and established FSCA guidance clarify that the provision of purely factual information, statistical calculations, mathematical indicators, general economic commentary, and objective market data does not constitute financial advice, provided it is not tailored to the specific financial needs, objectives, or circumstances of an individual client.
- Dubstrata's Operational Position: Dubstrata's quantitative indicators (Pmarket, CSI, ICI, FinVIC, Kelly sizing) are computed universally across markets without knowledge of or reference to any client's balance sheet, risk tolerance, or tax position.
- Institutional Exemption & Client Persona: Dubstrata serves institutional hedge funds, asset managers, and corporate treasuries. Products are delivered via raw API, Kafka streaming topics, and database materialized views for internal backtesting and algorithmic ingestion.
| FAIS Operational Dimension | Dubstrata Operational Status |
|---|---|
| Personalized Financial Advice | NO - Purely objective quantitative data |
| Discretionary Investment Mgmt | NO - Non-custodial, no execution mandate |
| Broker / Intermediary Order Fill | NO - Does not place or route trade orders |
| Financial Services Provider (FSP) | EXEMPT as pure software & data provider |
"Dubstrata provides quantitative data feeds, mathematical models, and causal knowledge graph indexing for analytical and research purposes only. Dubstrata is not a licensed Financial Services Provider (FSP) under the FAIS Act (Act 37 of 2002). No data point, conviction index, or signal constitutes personalized financial, investment, legal, or tax advice."
1.2 Financial Markets Act, 19 of 2012 (FMA)
The Financial Markets Act regulates South African financial markets, market infrastructures, securities exchanges, and market abuse prohibitions.
Dubstrata strictly scrapes publicly accessible information (SEC EDGAR, Federal Register, Reuters, on-chain ledgers). Ingested documents are stamped with RFC 3161 cryptographic timestamps to establish verifiable proof that no non-public leaks were utilized.
Dubstrata actively identifies and filters market abuse in prediction markets via Sybil cluster merging (sybil_detector.py), Clean HHI whale filtering, and sub-$200k sweep spoofing alerts (orderbook_verifier.py).
2. Prediction Market Data & Gaming Law (National Gambling Act)
A key question for institutional risk officers is the classification of binary prediction market telemetry (e.g., Polymarket):
Regulates gambling activities and bets in South Africa. Interactive gambling is restricted within the borders of South Africa. However, binary event contracts linked to economic indicators fall under financial contracts/derivatives rather than recreational gambling.
Dubstrata does not operate a betting exchange, bookmaker, or wagering platform. Dubstrata acts strictly as an external observer and analytical indexer of public on-chain orderbook density, identical to how a Bloomberg terminal displays international commodity quotes.
3. Anti-Money Laundering & Sanctions Compliance (FIC Act)
FICA sets out South Africa's regulatory framework for combating money laundering, terrorist financing, and proliferation financing (Financial Intelligence Centre Act, 38 of 2001).
Payments settle immediately on-chain to Dubstrata's merchant treasury wallet. Dubstrata holds zero client balances in custody, eliminating custodial risk. Originating wallet addresses are screened automatically against OFAC, UN, and FIC sanctions lists.
4. Data Protection, Privacy & Cybersecurity (POPIA & Cybercrimes Act)
POPIA regulates the processing of personal information in South Africa (Act 4 of 2013), enforced by the Information Regulator.
POPIA 8 Lawful Processing Conditions & Architectural Implementation
| POPIA Condition | Dubstrata Implementation | Compliance Status |
|---|---|---|
| 1. Accountability | Information Officer appointed & registered with Information Regulator. | Full Compliance |
| 2. Processing Limitation | Ingests only publicly published corporate & macroeconomic data. | Full Compliance |
| 3. Purpose Specification | Processed solely for quantitative market sentiment analysis. | Full Compliance |
| 4. Further Processing | No secondary monetization or sale of client query telemetry. | Full Compliance |
| 5. Information Quality | Multi-source referee validation & factuality scoring. | Full Compliance |
| 6. Openness | Complete transparent schema published in production Data Dictionary. | Full Compliance |
| 7. Security Safeguards | AES-256 at rest, TLS 1.3 in transit, mTLS API verification. | Full Compliance |
| 8. Data Subject Access | Mechanism for entities to challenge claims via consensus referee. | Full Compliance |
Dubstrata stores no off-chain identity mappings (no real names, email addresses, phone numbers, or IP addresses linked to wallet nodes). Public wallet hashes are processed purely as pseudonymous mathematical capital clusters.
Automated crawlers (worker.py) operate strictly on public web endpoints, enforcing SSRF filters (is_ssrf_safe_url) to prevent querying internal or private networks while respecting robots.txt.
5. South African Exchange Control Regulations (SARB FinSurv)
The Financial Surveillance Department (FinSurv) of the South African Reserve Bank (SARB) regulates capital outflows and cross-border payments under the Currency and Exchanges Act, 9 of 1933.
- Enterprise SaaS Subscription Licensing: South African institutional clients paying for Dubstrata services via corporate foreign currency allowances or authorized dealer invoicing represent standard B2B software service payments.
- Crypto / Stablecoin Settlement (USDC via x402): Corporate entities utilizing USDC to pay for offshore digital services must ensure compliance with their Single Discretionary Allowance (SDA) or Foreign Capital Allowance (FCA) authorizations.
- Intellectual Property Protection: Access provided to clients is structured as non-exclusive, revocable software-as-a-service access, which does not constitute an export of intellectual property under Exchange Control Regulation 10(1)(c).
6. Intellectual Property & Text/Data Mining (Copyright Act)
Under South African copyright jurisprudence (Copyright Act 98 of 1978) and international treaties (Berne Convention, TRIPS), copyright protects the original expression of ideas, not underlying objective facts, prices, or numbers.
extract_engine.py)Dubstrata's extraction engine distills raw articles into atomic factual triplets (percentage changes, dates, corporate names, asset tickers). Quotes are stored strictly as short factual citations (citation_span) for attribution, grounding, and verification proof within fair dealing doctrines.
7. Consumer Protection Act & Institutional Terms (CPA)
The Consumer Protection Act (Act 68 of 2008) does notapply to transactions where the consumer is a juristic person whose asset value or annual turnover equals or exceeds R2,000,000 (two million ZAR). As Dubstrata's clients are institutional hedge funds, asset managers, banks, and enterprise trading desks exceeding this threshold, the CPA provisions are statutorily exempt, permitting institutional freedom of contract.
- Limitation of Liability: Disclaims liability for third-party API outages or market trading losses.
- No Fiduciary Mandate: Expressly establishes that no fiduciary or broker-client relationship is created.
- Warranty of Sophistication: Clients warrant that they are sophisticated institutional investors.
8. Institutional Client Due Diligence Checklist
For institutional risk, compliance, and legal teams conducting vendor due diligence on Dubstrata:
| # | Compliance & Due Diligence Item | Status |
|---|---|---|
| 1 | FAIS Act Non-Advisory / Software Provider Exemption | VERIFIED |
| 2 | Public Domain Ingestion / MNPI Immunity Invariant | VERIFIED |
| 3 | POPIA Compliance & Registration of Information Officer | VERIFIED |
| 4 | Multi-Tenant Isolation & Zero Cross-Tenant Data Leaks | VERIFIED |
| 5 | Non-Custodial Payment Protocol Architecture (x402) | VERIFIED |
| 6 | Automated Anti-Manipulation & Sybil Distortion Filtering | VERIFIED |
| 7 | RFC 3161 Cryptographic Timestamping & Citation Verification | VERIFIED |
| 8 | Enterprise SLA & 99.5% Time-Series Delivery Guarantee | VERIFIED |
| 9 | B2B Institutional Contract Exemption under CPA | VERIFIED |
| 10 | SSRF Network Security & Ethical Ingestion Crawler Policies | VERIFIED |
conclusion & institutional legal sign-off
Dubstrata is architected from the ground up to comply with the legal and regulatory framework of the Republic of South Africa while satisfying global institutional requirements for alternative data ingestion, algorithmic backtesting, and quantitative signal generation.
For institutional legal inquiries, data protection agreements (DPAs), or regulatory consultations, please contact:
legal@dubstrata.io