Skip to content

BIZ-LEGAL.md — alaivOS Business · Legal & Compliance

Version: 0.1 (stub) · Date: April 2026 · Owner: Citerius Holdings LLC Audience: J, attorney-of-record, Omicron, Sigma Status: STUB — J + attorney to populate (Omicron drafts infrastructure sections)

All legal and compliance obligations for the alaivOS Business track. Covers corporate structure (SA de CV), AML policy, LFPDPPP compliance, platform Terms of Service, CNSF insurance referral framework, DMCA, warrant canary, tax posture.

Priority: P0. SA de CV incorporation is the hard blocker for all MX contracts (Conekta escrow, PAC agreements, CNSF insurance referral). Mirrors: Personal's ops/LEGAL_AND_PRIVACY.md but for Business-specific obligations.

§01 — Corporate Structure (Business Track)

TODO: Citerius Holdings LLC (WY, USA) as IP owner. TBD SA de CV (Jalisco, MX) as MX operator. A³ Synergy Group as Tractus commercial partnership. DBAs per brand (Tractus, Construx).

§02 — SA de CV Incorporation — HARD BLOCKER

TODO: formation timeline, notario selection, capital stock, officers, RFC registration, FIEL (e.signature), bank account opening. ETA and owner.

§03 — AML Policy (Mode B Marketplace)

TODO: Citerius's obligations as marketplace operator holding AML policy. KYC verification contract (entity-verification capsule), transaction monitoring thresholds, SAR (suspicious activity report) filing procedure with CNBV.

§04 — LFPDPPP Compliance (Mexican Privacy Law)

TODO: privacy notice (aviso de privacidad), data subject rights, ARCO mechanism (access/rectification/cancellation/opposition), consent capture for biometric data (identity-lock capsule), retention periods, cross-border data transfers.

§05 — Platform Terms of Service

TODO: per-role ToS (client, provider, driver, subcontractor, inspector). Acceptable use, liability limits, dispute resolution (Firestore append-only + Polygon anchor as evidence), ToS amendment process.

§06 — CNSF Insurance Referral Framework

TODO: coverage-referral capsule legal requirements. CNSF registration status for referral revenue. Fee disclosure to user. White-label partner contracts (Genda, Mutuus).

§07 — Carta Porte / CFDI Obligations

TODO: PAC agreements (Finkok, SW Sapien). SAT registration status. Fiscal representation in MX. Retention obligations (5 years for CFDIs).

§08 — Tax Posture (Cross-Border)

TODO: WY LLC tax treatment, MX operations via SA de CV, transfer pricing between entities, VAT handling on platform fees, 1099-K thresholds for US-facing flows. Escalate to cross-border tax counsel.

§09 — DMCA Designated Agent

TODO: US DMCA registration ($6 fee), designated agent contact, takedown procedure. Mirrors Personal track but separate filing.

§10 — Warrant Canary

TODO: Business-track warrant canary, signing schedule, signing key custody. Coordinate with Personal's canary (April 19 next due).

§11 — Employment & Contractor Compliance

TODO: MX labor law obligations for contractor-driver model (lastmile), false-autonomy risk (subordinación mitigation), HR policy for hr-agent workflows.

§12 — Data Breach & Incident Response

TODO: breach notification timeline (LFPDPPP 72h), INAI reporting, customer notification template, blockchain-anchored incident log.

TODO: Polygon-anchored records as court-admissible evidence (MX civil code + US precedent). Gas fee treatment (operational expense). KYT (know-your-transaction) if any fiat on/off ramp.

§14 — Intellectual Property

TODO: IP assignment from contractors to Citerius Holdings LLC. Open-source licenses in the stack (Odoo GPL, n8n, Flutter). Capsule marketplace IP terms (developer retains copyright, grants platform distribution license).

§15 — Pending Actions (Prioritized)

TODO: table with action, priority, owner, ETA, blocker status.

Maintained jointly by J, attorney-of-record, and Omicron. Do not include privileged attorney-client communication in the published version. Push sanitized version to biz KV key biz-legal. Full privileged version stays in J's secure storage.