Legal, compliance & information governance
The applicable perimeter is determined by the parties, goods, jurisdictions, route, banks, payment chain, vessels, data and activity involved. This page describes Bethar's control architecture; it is not legal advice, a certification, a licence or a representation of regulatory approval.
Five risk pillars
Commodity transactions can fail through invalid authority, corruption exposure, sanctions, product restrictions, weak chain-of-custody evidence, market misconduct, compromised data or loss of commercially sensitive information.
Public-official touchpoints, agents, intermediaries, beneficial ownership, services, fees and payment instructions require risk-based review. The FCPA and UK Bribery Act are assessed by reference to their actual jurisdictional tests; use of US dollars alone is not presented as automatic FCPA jurisdiction.
The control perimeter may include parties, ownership and control, banks, vessels, goods, origin, destination, end use, end user, route and payment chain. Applicable EU measures and domestically implemented UN sanctions form the baseline; US, UK, Swiss or other regimes are added where a relevant nexus exists.
Product and operator status determine the applicable requirements. Relevant regimes may include EUDR, the amended CSDDD, the US UFLPA, the EU Conflict Minerals Regulation and product-specific human-rights, environmental or chain-of-custody rules.
Physical-market information, hedging activity and derivative positions must be managed against the applicable market-abuse, position-limit, reporting and anti-manipulation rules. The perimeter depends on the instrument, venue, entity, jurisdiction and conduct concerned.
Counterparty and beneficial-ownership information is handled under an identified lawful basis, purpose limitation, data minimisation, retention and security controls. KYC/KYB is applied as a transaction-risk control and where required by law or regulated counterparties; it is not described as a universal statutory duty for every commodity trader.
Large and medium operators: 30 December 2026. Most micro and small operators: 30 June 2027. Applicability also depends on the commodity, derived product, customs code and operator role.
Following Directive (EU) 2026/470, the principal due-diligence application date is 26 July 2029. The amended scope and thresholds must be tested at company or group level; the maximum pecuniary-penalty cap is 3% of net worldwide turnover.
The UFLPA creates a rebuttable presumption for goods mined, produced or manufactured wholly or partly in Xinjiang, or by listed entities, when imported into the United States.
A non-financial physical trader is not automatically an AML obliged entity merely because it performs commodity transactions. Entity type, activity, payment method and applicable national or EU rules must be tested; banks and other regulated counterparties may impose additional KYC requirements.
Certification may support institutional due diligence, but it is not a trading licence or a substitute for transaction controls. This website does not state that Bethar holds an ISO 37001 certification.
Institutional review may examine governance, third-party due diligence, sanctions and export-control screening, transaction approvals, audit trails, beneficial-ownership evidence, segregation of duties, incident escalation, data security, contractual allocation of risk and the availability of transaction-specific insurance. Certification and insurance are assessed as evidence within a wider control environment, not as substitutes for legal compliance or executable contracts.
Primary legal sources
Links are provided for institutional reference. Applicability must be confirmed against the facts and the law in force at the relevant transaction date.
Business enquiries
Product, specification, volume, origin or destination, delivery window, Incoterm and proposed payment instrument. We will confirm whether the mandate is within scope.
Discuss a mandate ↗