DPO Radio

Jurisdiction-based access rules are increasingly common, but most residency checks still rely on IP detection, VPN heuristics, or centralized country databases. These methods are unreliable and introduce privacy risks for organizations. IP-based systems generate location logs that reveal where and when residency checks occur, and those logs can be linked across services over time. This quietly turns jurisdiction enforcement into location tracking and increases compliance exposure under data protection laws.
Zero-knowledge proofs alone do not solve this problem. While they limit what the verifier learns, they do not prevent issuer backchannels, wallet telemetry, SDK calls, or network metadata from exposing verification contexts. The real risk is not just the country attribute, but the system surrounding the proof.
AesirX CMP Residency Check addresses this by separating proof privacy from system privacy. Using Concordium ID, the residency predicate is proven locally inside the wallet. The website interacts only with AesirX CMP as a first-party component and receives a simple yes or no. No IP data, location logs, or identifiers are collected. Each result is bound to a domain-specific pseudonym, preventing cross-site linkability by design and allowing organizations to enforce jurisdiction rules without building surveillance infrastructure.
Built for organizations where data protection meets performance

Jurisdiction checks without handling location data.

Geo-restricted sales without IP tracking.

Country eligibility without residency databases.

Regional content access without location profiling.

Jurisdiction controls without central logs.

Region-specific access without IP collection.

Country-based rules without traceable checks.

Residency validation without location tracking.
Configured in the CMP, country eligibility is verified through wallet proofs without IP tracking.




Residency Check is configured in the CMP by enabling the feature, selecting allowed or disallowed countries, and reviewing the preview message. When triggered, the CMP requests a wallet-based country proof. A zero-knowledge proof returns only yes or no.




TIP: Concordium ID is recommended for full unlinkability. Other wallets work, but may involve limited verification callbacks until CuK support is finalized.
Note that AI Auto-Blocking works for plugins and scripts loaded through WordPress’ standard architecture. Scripts hardcoded in theme files are not detected and must be added to blocking rules manually
Aesirx Consent Management Platform

Aesirx Consent Management Platform

Private residency verification
No location data processed
Not linkable across sitesAesirX CMP for WordPress v2.0.0 introduces ZKP age and country verification, meeting global laws without tracking, data sharing, or surveillance.
READ MORE




AesirX CMP can use wallet-based credentials to prove a visitor’s country through a zero-knowledge proof. The website receives only a yes/no result, meaning no IP lookups, no country codes, and no location logs. This makes privacy-safe residency verification possible for teams that want to avoid handling personal data.
IP-based systems are unreliable and treated as personal data. Centralized ID systems log every check. With AesirX CMP, the wallet creates the proof locally, acting as a digital residency check system that avoids phone-home logs and linkability.
Yes. The CMP receives only a binary output and never processes location data. This makes GDPR residency check workflows easier to manage for sites that must restrict access by country without storing sensitive information.
No. Each verification generates a domain-specific pseudonym, preventing correlation even if the same wallet is used. This provides no-tracking geo access control without exposing the user’s real location.
Organizations apply it to meet licensing, regulation, and jurisdiction rules for financial products, digital content, restricted services, and other region-sensitive offerings. Teams use this location-based access control to comply with local requirements without relying on IP data.