18 U.S.C. § 2257 Compliance Statement
(Statement of compliance with 18 U.S.C. §§ 2257, 2257A and 28 C.F.R. Part 75)
Version: 1.0 · Last updated: 22 October 2026 · Language: English (Terms section 17)
Preamble
Copy link to “Preamble”This document contains the statement provided for by 18 U.S.C. §§ 2257 and 2257A and 28 C.F.R. Part 75, that desioart, operated by DAAR GLOBAL LIMITED, keeps the records those provisions require about everyone appearing in visual depictions of actual or simulated sexually explicit conduct on the platform.
Although we are not established in the United States, we comply with those provisions voluntarily and in full — so far as the law of the Republic of Cyprus and of the European Union allows — because they are the standard recognised worldwide for making sure that only verified adults appear in adult content, and because we have users in the USA.
This statement forms part of our terms of service (Terms section 19.1) and supplements the age verification policy (Age Verification), the co-performer policy (Co-Performers), the legal notice (Legal Notice section 6) and the privacy policy (Privacy sections 2.2 and 7.1).
1 The statement under 18 U.S.C. § 2257
Copy link to “1 The statement under 18 U.S.C. § 2257”Everyone depicted is of full age. Anyone appearing on desioart (desioart.com) in a visual depiction of actual or simulated sexually explicit conduct was at least 18 years old when the recording was made. We ensure that through an independent identity and age check before publication (Age Verification sections 4.2 and 8). The records that 18 U.S.C. § 2257 and 28 C.F.R. Part 75 require for such depictions are kept by the Custodian of Records named in section 3.
Depictions outside the scope. No record-keeping obligation under § 2257 arises for the platform’s other visual content. That covers content showing none of the conduct described in 18 U.S.C. § 2256(2)(A)(i)–(iv); depictions falling under 18 U.S.C. § 2257A or under 18 U.S.C. § 2256(2)(A)(v), so far as they were produced after 19 March 2009; recordings from before 3 July 1995; and content in whose distribution we do not act as a “producer” within the meaning of 28 C.F.R. § 75.1(c). Our own verification duty under section 2 applies regardless to every item of content not suitable for all audiences.
Identification of the work. This statement relates to the desioart platform at desioart.com, including all content available there.
Inspection. Authorised inspectors are given access to all records required under US federal law at the Custodian of Records at the address in section 3.
2 Scope
Copy link to “2 Scope”2.1 Content covered
Copy link to “2.1 Content covered”We keep records for every visual depiction (photo, video, livestream, audio with an identifiable person) showing:
- actual or simulated sexual intercourse, whether between people of the same sex or not
- masturbation
- sadistic or masochistic abuse
- lascivious exhibition of the genitals, anus or pubic area (interpreted by the Dost factors)
- (for the avoidance of doubt: conduct involving animals is prohibited by Acceptable Use section 2 and is never published)
The practical rule: every item a creator marks as not suitable for all audiences, or that our check classifies that way, is treated as requiring records. We draw no case-by-case line but verify whenever there is doubt. That takes in depictions which might legally be exempt.
2.2 Content not covered
Copy link to “2.2 Content not covered”Content suitable for all audiences (profile pictures and banners, promotional covers, intro videos, posts suitable for all audiences, text without images, voice messages with no sexual content) requires no records; for the people appearing in it, the consent rules in Co-Performers apply (age verification, no identity document).
2.3 Simulated conduct (§ 2257A)
Copy link to “2.3 Simulated conduct (§ 2257A)”We treat simulated sexually explicit conduct as we treat actual conduct under § 2257; we do not rely on the certification exemption in § 2257A(h), because it is designed for professional productions with a compliance programme of their own, not for user-generated content.
2.4 AI-generated content
Copy link to “2.4 AI-generated content”For purely synthetic depictions in which no real person appears (the company’s AI personas, Community section 2.5), § 2257 provides for no records, because there is no performer. We nonetheless keep a provenance record for each such item (the model, the prompt parameters, the time of generation, the version of the safety rules, and confirmation that nobody depicted reads as a minor or is a real person) and mark the content as AI-generated. Depictions that alter real people with AI are permissible only with that person’s verification and consent, and the record-keeping obligations apply to them without qualification.
3 Custodian of Records
Copy link to “3 Custodian of Records”| Item | Value |
|---|---|
| Custodian of Records | Alexander Repp (Director) |
| For | DAAR GLOBAL LIMITED, 1 Apriliou 52, 7600 Athienou, Larnaca, Cyprus |
| records-custodian@desioart.com | |
| Availability for inspections | Monday to Friday, 09:00–17:00 local time in Cyprus (EET/EEST), at least 20 hours a week (28 C.F.R. § 75.5(c)(1)); inspections are possible during those hours without an appointment, though because of the distance we ask for notice so that we can make rooms and access available |
The Custodian is responsible for the completeness, order and accessibility of the records and is at the same time the contact for authorities. The records are kept solely at the company’s seat in Cyprus; there is no additional custodian in the United States.
4 What the records contain
Copy link to “4 What the records contain”For every person appearing in content requiring records we keep (28 C.F.R. § 75.2):
| Element | Source |
|---|---|
| The full name from the identity document, and the date of birth | the identity check (stage 2, Age Verification section 4.2) |
| A copy of the official photographic identity document | carried over from the identity check into our separate records area |
| Every stage name, username and alias — including those of every linked account of the same person | account and identity administration |
| The date and identifier of the verification, the provider and the result | the verification log |
| The person’s consent to the recording and to publication (a digital release with the time, a hashed IP, a device identifier and the version of the text; withdrawals and fresh consents) | the consent system (Co-Performers) |
| A list of every item the person appears in: the content identifier, the upload and publication dates, where it is (URL), hash values and, for videos, the time codes in which the person is visible | the publication log |
| The creator’s confirmation that everyone involved is of full age and has consented (the versioned text, the time) | the upload dialogue |
| Watermark and delivery records (which copy was generated when) | content protection |
Where they are stored: the records are held by us in a separate, encrypted and immutable archive (WORM — object lock in compliance mode) with an access log; access requires a special permission, a two-factor confirmation and — for opening copies of identity documents — the four-eyes principle. The verification provider processes the raw data only during the check, as a processor (Privacy section 5.1). The records are searchable and cross-referenced by name, alias and content (28 C.F.R. § 75.2(e)).
5 How the record is built
Copy link to “5 How the record is built”5.1 Before a creator’s first content not suitable for all audiences
Copy link to “5.1 Before a creator’s first content not suitable for all audiences”- Age verification (stage 1) has already been completed by every user (Age Verification section 4.1).
- As soon as a creator first uploads content not suitable for all audiences, the upload waits at “review pending” until the identity check (stage 2: identity document, liveness, comparison, sanctions and PEP screening) is passed.
- The creator confirms the 2257 declaration: “I confirm that I had turned 18 when each recording was made, and I will publish no content in which people appear who are not themselves verified and consenting.”
- The record is created and linked to the account; uploads not suitable for all audiences are unlocked automatically once the check is passed.
Without a completed identity check, no content not suitable for all audiences is published.
5.2 With every upload
Copy link to “5.2 With every upload”- The creator marks the content (suitable or not suitable for all audiences) and tags every other person appearing in it from their list of verified participants.
- The creator confirms, as a required declaration (versioned text): “Everyone appearing in this content was of full age when it was recorded, is verified and has consented.”
- The system checks server-side whether a valid consent (individual or general) and the right verification level exist for each person tagged; a count of people on the creator’s own device serves as a plausibility check (Moderation section 2.1).
- Only then is the content published, and the content identifier, the people, the time codes and the time are added to the record.
5.3 People taking part without a creator account of their own
Copy link to “5.3 People taking part without a creator account of their own”People appearing in content not suitable for all audiences without being creators themselves go through the same identity check (stage 2) before publication, through an invitation link valid for 48 hours, and give their digital consent (per item, or generally for one creator, withdrawable at any time). They can contact us directly and without the creator knowing at any time (records-custodian@desioart.com, ncii@desioart.com). The details are in Co-Performers and Age Verification section 8.
5.4 Changes and withdrawal
Copy link to “5.4 Changes and withdrawal”Where someone withdraws their consent, the content is hidden; the record remains and notes the withdrawal. Where content is deleted, the record remains without the media (section 6).
6 How long records are kept
Copy link to “6 How long records are kept”We keep records for seven years from the last publication or distribution of the item in question (28 C.F.R. § 75.4). Should the company cease trading, the records are kept for five years beyond that. Retention is independent of whether the creator’s or the participant’s account is closed or deleted (Privacy section 7.2); requests for erasure under Article 17 GDPR are to that extent deferred under Article 17(3)(b) and (e).
7 Producer status
Copy link to “7 Producer status”7.1 The creator as primary producer
Copy link to “7.1 The creator as primary producer”Each creator is the primary producer (28 C.F.R. § 75.1(c)(1)): they make the recording and are responsible for everyone appearing in it being of full age and consenting. The platform provides the verification and consent tools centrally, and we keep the records in their name and in ours so that they can meet their obligations. Creators who produce and publish away from the platform remain responsible for that themselves.
7.2 The platform as secondary producer
Copy link to “7.2 The platform as secondary producer”We treat ourselves as a secondary producer (§ 75.1(c)(2)) as a precaution, because we process uploaded content technically (transcoding, watermarking, previews) and make it publicly available. We produce no content with real people ourselves; for the AI personas we operate, section 2.4 applies.
7.3 A group-wide statement
Copy link to “7.3 A group-wide statement”This statement applies to every domain and app of the platform (desioart.com and its subdomains).
8 Content created before this statement took effect
Copy link to “8 Content created before this statement took effect”This statement applies to all content published on the platform. Content created before it was published on desioart faces the same requirements: verification and consent of everyone appearing in it before it is published here, and the date of recording must be given.
9 Working with US authorities
Copy link to “9 Working with US authorities”Inspections under § 2257 by authorised bodies of the US Department of Justice are directed to the Custodian (section 3). Requests in criminal matters (the FBI, HSI) and reports to NCMEC follow Moderation section 6 (legal@desioart.com; identity data only on a lawful order; formal requests through the USA–Cyprus mutual legal assistance treaty or the e-Evidence Regulation). We acknowledge requests within 24 hours.
10 How this fits with other legal systems
Copy link to “10 How this fits with other legal systems”This statement applies in addition to: section 4 JMStV and Article 28 DSA (Age Verification); Cypriot criminal law and the law on the protection of minors; Article 9 GDPR and the KUG and personality rights of the people depicted (Co-Performers). Where they conflict, the stricter requirement governs.
11 Updates
Copy link to “11 Updates”We review this statement at least once a year (changes to 18 U.S.C. § 2257, 28 C.F.R. Part 75, DOJ guidance, case law). Where a change is substantial we tell you 30 days beforehand (creators at least 15 days, Article 3 of Regulation (EU) 2019/1150). The current version is at legal.desioart.com/2257.
12 Contact
Copy link to “12 Contact”| Matter | Channel |
|---|---|
| Inspection of the records (the Custodian) | records-custodian@desioart.com |
| Requests from authorities | legal@desioart.com |
| Suspected minors (24 h) | abuse@desioart.com · desioart.com/report |
| People taking part: consent, withdrawal, questions | records-custodian@desioart.com · ncii@desioart.com |
| Data protection for the records | privacy@desioart.com · dpo@desioart.com |
Custodian of Records: Alexander Repp (Director), attn. Custodian of Records, 1 Apriliou 52, 7600 Athienou, Larnaca, Cyprus