Sign inGet started

Underwriting packet

Merchant information.

For payment-processor underwriting and risk-team review. The checklist below mirrors the documents most adult-payment processors require, in the order they typically ask for them. For anything not covered here email [email protected] and we’ll respond within 1 business day.

Business identification

Trade name

Nyhilism

Legal entity

Nyhilism, Inc.

Jurisdiction

Delaware, United States

Year founded

2026

Primary contact

[email protected]

Domain

nyhilism.com

Business model

Two-sided advertising marketplace serving the adult-content vertical. Publishers (adult-site operators) register zones on their domains and embed our HTML tag. Advertisers (adult brands, dating apps, AV studios, toy retailers) deposit funds and run auction-based banner campaigns against that inventory. We earn a 30% margin on served impressions.

Money flow: advertiser deposits funds via CCBill / Epoch / Segpay (auction) or Escrow.com (direct bookings). Spend deducts from the advertiser balance per valid impression. Publisher earnings accrue at 70% of spend and clear via Paxum / USDT / bank wire on a rolling schedule past a $50 minimum.

Payment-processing controls

  • Statement descriptors. CCBILL.COM*NYHILISM / EPOCH.COM*NYHILISM / SEGPAY*NYHILISM. Email confirmation sent on every deposit referencing the descriptor.
  • 3-D Secure. Required on every transaction over $200 USD on rails that support it.
  • Velocity limits. First-7-day new-account cap of 3 deposits/day, $500/day max ticket.
  • OFAC + sanctions. Sanctions list screening at signup. Geoblocking on countries in OFAC Tier 1.
  • Refund + chargeback policies. Documented at /refunds and /chargebacks.
  • Customer support. SLA: 1 business day acknowledgment, 5 business days resolution. Inboxes: billing@, abuse@, risk@, security@, privacy@, legal@.

Content compliance

  • PhotoDNA. Integration planned before GA. Today, every creative is hashed locally and passed through a human moderation queue before serving; PhotoDNA enrollment lands before the platform opens to live spend.
  • 2257 statement. Published at /2257 with the records custodian contact.
  • DMCA. Designated agent on file at /dmca. Repeat-infringer policy + notice-and-takedown workflow documented.
  • Acceptable Use Policy. Published at /acceptable-use with categorical bans (CSAM, non-consensual, 2257 violations, trafficking, malware), enforcement ladder, and SLAs.
  • Human creative review. Every creative is reviewed by a moderator before first serve. 24-hour SLA.
  • SiteScan. Compliance scan of every publisher domain on signup and on demand — 18+ gate, DMCA footer, disallowed scripts. Recurring scheduled rescans are on the roadmap. Public scoring at /methodology.

Privacy + data security

  • GDPR + CCPA-compliant. EU-hosted infrastructure (Hetzner, Falkenstein DC). EU representative engagement in progress.
  • Password storage: Argon2id. Session tokens: SHA-256 hashed server-side.
  • TLS 1.3 in transit, encrypted backups at rest.
  • Cookie consent banner. Auto-decline on Do-Not-Track + GPC. First-party analytics (PostHog EU) gated on explicit accept.
  • Public privacy policy at /privacy with the full data inventory, retention windows, and subprocessor list.

Infrastructure + uptime

  • Dedicated hardware in Hetzner Falkenstein. Cloudflare in front for DDoS + edge caching.
  • Public status page at /status showing real-time uptime per component.
  • Public changelog at /changelog listing every release.
  • Database backups: encrypted hourly to off-site storage, 48-hour point-in-time recovery, 30-day retention.
  • Security disclosures: [email protected] · responsible-disclosure window 90 days.

Linked policies