Frequently Asked Questions

Exanteon is an umbrella governance ecosystem providing voluntary, ex-ante protocols and standards designed to make organisational behaviour observable before contractual, legal or regulatory escalation.

Ex-ante governance structures intent, commitments and behavioural visibility upstream of contracts, disputes or sanctions, with the objective of reducing risk before it materialises.

Exanteon enables organisations to make intent, commitment and behaviour observable ex-ante, reducing uncertainty and friction without moralisation, sanctions or institutional overreach.

No. Exanteon is not a regulator, supervisory body, rating agency or enforcement authority. It operates entirely outside public law enforcement and regulatory supervision.

No. Exanteon does not replace contracts, legislation or regulatory frameworks. Its protocols are designed to complement existing legal structures by reinforcing clarity and coherence upstream.

No. Exanteon protocols have no autonomous legal force. They do not create legal obligations, sanctions or rights. Any binding effects arise exclusively from the underlying contracts governed by applicable law.

Membership is open exclusively to legally constituted organisations holding a valid Legal Entity Identifier (LEI).

Yes. Access to Exanteon protocols and standards is limited to registered members, ensuring a controlled, coherent and legally identifiable governance environment.

No. Membership does not constitute certification, endorsement, accreditation or approval of an entity's behaviour, ethics or compliance status.

Yes. Membership may be suspended or terminated according to Exanteon's internal rules, without legal qualification, sanction or public judgement.

Exanteon operates exclusively with verifiable legal entities. The LEI provides a neutral, globally recognised identification anchor, ensuring that ex-ante governance commitments are attributable to an existing legal entity rather than to profiles, claims or individuals.

No. Exanteon does not modify, extend or interfere with the LEI system. The LEI is used solely as a neutral legal identification reference.

No. Exanteon has no affiliation, endorsement or partnership with the Global Legal Entity Identifier Foundation or any LEI issuer.

No. The LEI requirement is purely an identification condition. All Exanteon protocols remain voluntary and non-regulatory.

Exanteon is designed primarily for governance information concerning legal entities, not the evaluation of individual consumers. Personal data processing is minimised and limited to what is strictly necessary for operational purposes. Limited personal data may nevertheless be necessary for account administration, institutional representation, authentication or communications.

Exanteon is designed to operate in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws. Compliance depends on the processing activity, legal basis, safeguards, contractual arrangements and operational procedures.

Data protection responsibilities are clearly allocated between Exanteon and its members, depending on the nature of the data and processing activities, in line with GDPR roles (controller / processor). Responsibility depends on the purposes and means of each processing activity. Exanteon and participating institutions may have distinct responsibilities as controllers, processors or joint controllers.

Exanteon relies on privacy-by-design and data minimisation principles. Data governance, compliance audits and operational safeguards are supported by its specialised partner heyData.

Exanteon's governance model is based on defined access permissions, confidentiality requirements, data minimisation and appropriate technical and organisational safeguards.

Participation and authorised disclosure are governed by applicable protocols, agreements and legal requirements. Withdrawal, correction, access and retention conditions must be distinguished.

No. Exanteon does not engage in automated decision-making, predictive profiling or behavioural scoring with legal or significant effects under GDPR. Exanteon is not designed to profile individual consumers or make automated decisions determining their legal rights or similarly significant personal outcomes.

No. Exanteon does not sanction, penalise or judge behaviour. Its protocols are limited to making certain commitments or events observable, without normative qualification.

No. Exanteon does not arbitrate disputes and does not replace judicial or arbitral mechanisms.

No. Exanteon is not a blacklist, watchlist or reputational database. It does not issue public warnings, ratings or condemnations. Exanteon is not designed to independently classify institutions as acceptable or unacceptable, issue condemnations or determine their eligibility. Certain protocols may record attributable positive and negative events under defined access conditions. Exanteon does not independently verify events, adjudicate reports or assign moral judgments.

Exanteon does not transmit data to regulators or public authorities on its own initiative and does not operate as an autonomous regulatory reporting or supervisory mechanism. Information may be disclosed to competent authorities only when legally required or otherwise lawfully authorised under applicable law and access arrangements.

Yes. Exanteon is designed to be interoperable with existing governance, compliance and risk frameworks, while remaining strictly non-regulatory.

Exanteon is designed exclusively for: Business-to-Business (B2B) relationships, Business-to-Government (B2G) interactions, and Business-to-Non-Profit (B2N) or institutional non-profit contexts. These environments involve identifiable legal entities, structured governance frameworks and comparable obligations. Participation requires legal-entity identification, membership eligibility and protocol compliance.

Exanteon deliberately excludes B2C use cases for structural and legal reasons: Consumer relationships involve individuals rather than legal entities. GDPR rules applicable to natural persons are significantly stricter, heterogeneous and unevenly applied across jurisdictions. Ex-ante behavioural observability at consumer level would create disproportionate legal, ethical and regulatory risks. The exclusion is a deliberate architectural and institutional choice. Exanteon is designed to preserve governance continuity between identifiable legal entities, not to observe individual consumers or develop personal behavioural profiles.

The exclusion of B2C use cases is a foundational design choice, not a temporary restriction. Exanteon is designed for organisational governance between identifiable legal entities. It targets environments where governance, accountability and institutional trust are structurally relevant, which includes the vast majority of high-risk economic and public interactions.