Confidentiality and compliance: luxury artwork storage

Respecting a collection's confidentiality doesn't mean "hiding"; it simply means securing it. In Luxembourg, Fortius combines climate control, physical security, and strict AML/KYC procedures to ensure impeccable artwork storage. Discover how we balance discretion and regulatory transparency.

1. Responsible confidentiality: protecting without concealing

1.1 Discretion, not anonymity

Fortius maintains a precise register of assets and their owners, accessible only to authorized teams and competent authorities upon judicial or customs request. No anonymous boxes: each artwork is linked to an identified client according to the European AMLD5 directive.

1.2 Selective transparency and asset security

Sensitive information (value, location) remains confidential from the public to limit:

• targeted theft risks;
• media pressure;
• fraud attempts.

However, this information is available, upon requisition, to tax or judicial entities—a guarantee of compliance.

2. Regulatory framework and customs compliance

2.1 Licensed operator and customs controls

The Luxembourg High Security Hub operates under license from the Customs and Excise Administration (Ministerial Order of November 30, 2012 establishing a free zone). Unannounced inspections verify correspondence between inventories and goods.

2.2 Enhanced AML/KYC

Since August 2015 in Luxembourg and January 2020 at European level, free zone operators are required to comply with certain legal obligations regarding anti-money laundering and counter-terrorism financing (AML-CTF). Fortius applies:

• Systematic identification of beneficial owners;
• PEP & sanctions list screening;
• Proactive reporting of any suspicious transaction.

3. Controlled environment: science serving conservation

3.1 Temperature-controlled storage

Constant temperature: 21°C ±1°C. Humidity: 55% ±5%. These parameters limit expansion and micro-cracks, ensuring long-term art preservation.

3.2 Secure sensors

Encrypted IoT sensors (AES-256) transmit auditable data, timestamped and archived for 10 years.

4. Security technologies and auditability

• Biometric badges not stored in plain text
• Internal CCTV only: feeds retained for 30 days, accessible to authorities upon court order
• Dual traceability chain: guaranteed by the operator and customs services.

5. Selection criteria for a compliant provider