Skip to content
LMIF Docs

Compliance Checklist

Compliance Checklist

Section titled “Compliance Checklist”

Use this checklist to ensure your platform meets LMIF compliance requirements.

Compliance Levels

Section titled “Compliance Levels”
LevelRequirementsBadge
BasicIdentity check before avatar creationLMIF Partner
Standard+ Webhooks, grace period handlingLMIF Verified
Premium+ Pre-approved licensing, audit complianceLMIF Verified (Featured)

Basic Compliance

Section titled “Basic Compliance”

Identity Check Integration

Section titled “Identity Check Integration”
  • API key obtained - Have a valid LMIF API key
  • Identity check before creation - Check every avatar before allowing creation
  • Handle BLOCK policy - Prevent avatar creation for blocked identities
  • Handle all actions - Implement handlers for all action types in responses
  • Error handling - Gracefully handle API errors without exposing users to risks

User Experience

Section titled “User Experience”
  • Clear messaging - Inform users why certain identities cannot be used
  • Alternative suggestions - Offer alternatives when an identity is blocked
  • No circumvention - Don’t allow obvious workarounds (e.g., slight name changes)

Testing

Section titled “Testing”
  • Sandbox testing - Test all policy types in sandbox
  • Error scenarios - Test rate limits, timeouts, and failures

Standard Compliance

Section titled “Standard Compliance”

Everything in Basic, plus:

Webhook Integration

Section titled “Webhook Integration”
  • Endpoint registered - Webhook endpoint configured in LMIF dashboard
  • Signature verification - All webhooks verified before processing
  • Event handlers - Handlers for all required events:
    • box.created
    • box.updated
    • violation.detected
    • grace_period.started
    • grace_period.reminder
    • grace_period.ending
    • grace_period.expired
  • Idempotent processing - Handle duplicate webhook deliveries
  • HTTPS endpoint - Webhook URL uses HTTPS

Grace Period Handling

Section titled “Grace Period Handling”
  • 30-day grace period honored - Don’t immediately remove avatars
  • Creator notifications - Notify avatar creators of violations
  • User notifications - Inform users of affected avatars
  • Reminder notifications - Send reminders at day 7, 21, 28
  • Resolution options - Provide clear paths to resolve (license, modify, remove)
  • Enforcement - Actually deactivate avatars when grace period expires

User Migration

Section titled “User Migration”
  • Conversation preservation - Archive user conversations with deactivated avatars
  • Alternative suggestions - Suggest similar unprotected avatars
  • Smooth transition - Don’t abruptly remove users’ experiences

Existing Content

Section titled “Existing Content”
  • Initial scan - Scan existing avatars when first integrating
  • Ongoing scans - Periodically re-scan for new boxed identities
  • Batch API usage - Use batch endpoints for efficiency

Reporting

Section titled “Reporting”
  • LMIF data stored - Store boxId, policy, checkDate with avatars
  • Usage tracking - Track usage for MONETIZE policy avatars
  • Monthly reporting - Report usage and revenue monthly

Premium Compliance

Section titled “Premium Compliance”

Everything in Standard, plus:

Pre-approved Licensing

Section titled “Pre-approved Licensing”
  • License integration - Full license request flow implemented
  • Tier selection UI - Users can select license tiers
  • License status tracking - Track pending/approved/denied status
  • Auto-renewal handling - Handle license renewals

Revenue Sharing

Section titled “Revenue Sharing”
  • Accurate tracking - Track all revenue types (subscriptions, messages, tips)
  • Timely reporting - Report usage by 15th of following month
  • Payment integration - Process royalty payments

Audit Readiness

Section titled “Audit Readiness”
  • Complete logging - Log all LMIF-related events
  • Data retention - Retain compliance data per requirements
  • API access for audits - Provide data access for compliance audits

Platform Excellence

Section titled “Platform Excellence”
  • Proactive scanning - Detect violations before LMIF does
  • Fast response times - Respond to webhooks within SLA
  • Low violation rate - Maintain minimal violations through prevention

Technical Requirements

Section titled “Technical Requirements”

API Usage

Section titled “API Usage”
  • Rate limit awareness - Stay within rate limits
  • Retry logic - Implement exponential backoff for failures
  • Timeout handling - Handle request timeouts gracefully
  • API versioning - Use versioned endpoints

Security

Section titled “Security”
  • Secure key storage - API keys in environment variables
  • Key rotation - Rotate keys regularly
  • Webhook security - Verify all webhook signatures
  • No key exposure - Keys never exposed client-side

Data Handling

Section titled “Data Handling”
  • Minimal data retention - Only store necessary LMIF data
  • User privacy - Handle user data per privacy requirements
  • Secure transmission - All API calls over HTTPS

Compliance Review Process

Section titled “Compliance Review Process”

When you’re ready, submit for compliance review:

  1. Self-assessment - Complete this checklist
  2. Sandbox demonstration - Show working integration in sandbox
  3. Documentation - Provide technical documentation
  4. Submit request - Apply via the developer dashboard
  5. LMIF review - We verify your implementation
  6. Badge awarded - Receive your compliance badge

Maintaining Compliance

Section titled “Maintaining Compliance”

Ongoing Requirements

Section titled “Ongoing Requirements”
  • Stay updated - Monitor LMIF changelog for API updates
  • Update handlers - Implement new webhook event types
  • Regular testing - Periodically verify integration works
  • Monitoring - Alert on webhook failures or API errors

Annual Review

Section titled “Annual Review”
  • Compliance audit - Annual review of compliance status
  • Documentation update - Keep technical docs current
  • Staff training - Ensure team understands compliance requirements

Support Resources

Section titled “Support Resources”

If you need help with compliance: