go('calculator')}>Could you bear a loss? Try our free calculator
{/* Logged-out public browse (BRD §7.5) — all projects visible with marketing-level info */}
go('browse')}>Browse the live projects — no account needed
{/* Art 8(2) — public register of restricted-person investments */}
go('register')}>Conflicts-of-interest register (Art 8(2))
Protected by 2-factor authentication · EUR · EU/EEA
I have read and accept the Terms of Use ({LEGAL.terms.version}) and the Privacy Policy ({LEGAL.privacy.version}).
I accept non-essential cookies per the Cookie Policy ({LEGAL.cookies.version})(optional).
{/* Art 19(2) scheme disclaimers — required at signup (BRD §8.9) */}
{window.OPALUS_COPY.art19_2}
}>Create account
Already have an account? Sign in
);
}
/* ============================================================ PASSWORD RESET (single-use token, 1h expiry) ============================================================ */
function PasswordResetScreen() {
const { state, update, go } = window.useOpalus();
const [phase, setPhase] = useState('email'); // email | sent | set | done
const [email, setEmail] = useState(state.investor.email);
const [token] = useState(() => 'RST-' + Math.random().toString(36).slice(2, 8).toUpperCase());
const [issuedAt] = useState(() => Date.now());
const [entered, setEntered] = useState('');
const [pw, setPw] = useState('');
const [confirm, setConfirm] = useState('');
const [showPw, setShowPw] = useState(false);
const [tokenErr, setTokenErr] = useState('');
const policy = checkPassword(pw);
const match = confirm.length > 0 && pw === confirm;
const expiresAt = issuedAt + 60 * 60 * 1000; // 1-hour expiry
const verifyToken = () => {
if (Date.now() > expiresAt) { setTokenErr('This reset link has expired. Links are valid for one hour — request a new one.'); return; }
if (entered.trim().toUpperCase() !== token) { setTokenErr('That code is not valid. Check the link we emailed you.'); return; }
setTokenErr(''); setPhase('set');
};
const setNewPassword = () => {
if (!policy.ok || !match) return;
update((s) => { s.investor.password = pw; s.investor.loginLockout = { fails: 0, until: 0 }; });
setPhase('done');
};
return (
{phase === 'email' && (
<>
Reset your password
Enter your account email. We'll send a single-use link, valid for one hour, to set a new password.
If {email} matches an account, a single-use reset link is on its way. It can be used once and expires in one hour.
For this prototype, enter the code below as if you'd opened the email link: {token}
{ setEntered(e.target.value); setTokenErr(''); }} placeholder="RST-XXXXXX" />
{tokenErr &&
{tokenErr}
}
go('welcome')}>Back to sign in
)}
{phase === 'set' && (
<>
Set a new password
Choose a strong password. All other sessions will be signed out.
Your password has been changed and the reset link is now used up. You can sign in with your new password.
)}
);
}
// Lightweight auth chrome for the password-reset flow (account.jsx owns the richer AuthShell, but it
// loads after onboarding.jsx, so we keep a self-contained one here).
function AuthShellLite({ children }) {
return (
Account recovery
{children}
);
}
/* ============================================================ ONBOARDING HUB (INV-03) ============================================================ */
const KNOWLEDGE_Q = [
{ q: 'What can happen to the money you invest in these projects?', a: ['It is guaranteed by Opalus', 'You may lose some or all of your capital', 'It always grows with the property market'], correct: 1 },
{ q: 'How easily can you sell or exit an investment before the project ends?', a: ['Instantly, at any time', 'It is illiquid — you may not be able to exit early', 'Within 24 hours via the platform'], correct: 1 },
{ q: 'Are the advertised returns guaranteed?', a: ['Yes, they are fixed and guaranteed', 'No — they are targets and may not be achieved', 'Only for sophisticated investors'], correct: 1 },
{ q: 'Why does spreading money across several projects matter?', a: ['It increases guaranteed returns', 'Diversification helps manage the risk of any one project failing', 'It is required by law every month'], correct: 1 },
{ q: 'As a non-sophisticated investor, what protection applies after you commit?', a: ['A 4-day reflection period to withdraw without penalty', 'No protection applies', 'A 30-day money-back guarantee on returns'], correct: 0 },
];
function stepStatus(inv) {
const soph = inv.category === 'sophisticated';
const sophReview = inv.sophApplication?.status === 'review';
return {
residency: inv.residencyConfirmed ? (inv.countrySupported ? 'Done' : 'Action needed') : 'Not started',
identity: inv.kyc === 'verified' ? 'Done' : inv.kyc === 'review' ? 'Under review' : inv.kyc === 'rejected' ? 'Action needed' : inv.kyc === 'pending' ? 'In progress' : 'Not started',
connection: inv.restrictedPerson ? 'Done' : 'Not started',
category: inv.category ? (sophReview ? 'Under review' : 'Done') : 'Not started',
knowledge: soph ? 'Done' : inv.knowledgeTest?.passed ? 'Done' : inv.knowledgeTest ? 'In progress' : 'Not started',
losssim: soph ? 'Done' : inv.lossSim?.acknowledged ? 'Done' : 'Not started',
};
}
function StatusChip({ status }) {
const map = {
'Not started': ['var(--surface-inset)', 'var(--text-muted)'],
'In progress': ['var(--cream-100)', 'var(--bronze-700)'],
'Under review': ['var(--info-50)', 'var(--info-600)'],
'Done': ['var(--success-50)', 'var(--success-600)'],
'Action needed': ['var(--danger-50)', 'var(--danger-600)'],
};
const [bg, fg] = map[status] || map['Not started'];
return {status};
}
function Onboarding() {
const { state, update, go } = window.useOpalus();
const inv = state.investor;
// view: hub | residency | identity | category | soph | knowledge | losssim
const [view, setView] = useState(() => (inv.residencyConfirmed ? 'hub' : 'residency'));
const toHub = () => { setView('hub'); window.scrollTo(0, 0); };
return (
)}
{/* Art 16 country of fiscal residence — defaults to residence, overridable; snapshot at offer creation */}
{picked && supported && (
)}
{picked && !supported && (
!}>
Your account stays active, and we'll email you if this changes. You can browse projects, but investing isn't available in your country yet.
)}
);
}
/* ---------- INV-05 · KYC — Sumsub WebSDK-mirroring identity verification ----------
Mirrors the real Sumsub applicant flow (Sumsub_Flow_Spec §A): intro/consent → applicant data →
country + document type → ID document capture (front/back, scanning + quality-retry) → selfie +
liveness (face-roll) → optional proof of address → submit → Under review. Applicant status states
surfaced: Not started / In progress / Processing / Under review / Verified / Action needed / Rejected.
Capture is mocked (file pickers / camera placeholders) — no real SDK in a prototype. */
const SUMSUB_DOC_TYPES = [
{ id: 'passport', label: 'Passport', sides: ['photo page'], Icon: OB_ICONS.IconlyRegularOutlineDocument },
{ id: 'id-card', label: 'National ID card', sides: ['front', 'back'], Icon: OB_ICONS.IconlyRegularOutlineDocument },
{ id: 'drivers', label: "Driver's licence", sides: ['front', 'back'], Icon: OB_ICONS.IconlyRegularOutlineDocument },
{ id: 'permit', label: 'Residence permit', sides: ['front', 'back'], Icon: OB_ICONS.IconlyRegularOutlineDocument },
];
// quality-retry reasons surfaced after a (mocked) failed read
const SUMSUB_QUALITY_REASONS = {
glare: 'Glare detected — move away from direct light and avoid reflections.',
blur: 'The image is blurry — hold steady and make sure the document is in focus.',
cropped: 'Part of the document is cut off — fit all four corners inside the frame.',
expired: 'This document appears to be expired — use a current, in-date document.',
};
// "Powered by Sumsub" + EU data-residency footer, shown on every step
function SumsubBrand() {
return (
Powered by Sumsub Data processed in the EU (Frankfurt / Dublin)
);
}
// dropzone / capture placeholder used for document & PoA capture
function CaptureBox({ captured, label, onUpload, onCamera }) {
return (
Your identity has been verified. Your KYC badge is now active and you can continue setting up your account.
);
}
if (status === 'review') {
return (
}>
Under review. We'll email you the moment it's complete.
);
}
if (status === 'actionNeeded') {
return (
}>
{actionReason}
);
}
if (status === 'rejected') {
return (
}>
We were unable to confirm your identity from the information and documents provided.
);
}
/* ----- intro / consent (Not started) ----- */
if (status === 'notStarted') {
return (
}>
{[['A valid government ID', 'Passport, national ID, driver’s licence or residence permit', OB_ICONS.IconlyRegularOutlineDocument],
['A device camera', 'For a short selfie and a liveness check', OB_ICONS.IconlyRegularLightProfile]].map(([t, d, Icon]) => (
{t}
{d}
))}
By starting, you agree that Sumsub may process your identity document and biometric (facial) data to verify your identity on Opalus's behalf, in the EU. Learn how your data is used.
);
}
/* ----- in-progress wizard ----- */
const WIZ = ['Consent', 'Your details', 'Document', 'ID capture', 'Selfie', 'Address', 'Submit'];
const advance = () => setStep((n) => Math.min(WIZ.length - 1, n + 1));
const back = () => (step === 0 ? onBack() : setStep((n) => n - 1));
// ID capture sub-flow handlers (mock scan → quality retry → done)
const captureSide = (side) => { setCaptured((c) => ({ ...c, [side]: true })); };
const allSidesCaptured = docDef.sides.every((s) => captured[s]);
const runScan = () => {
setDocPhase('scanning');
setTimeout(() => {
// first scan fails with a quality reason; second scan passes (demo behaviour)
if (!qualityReason && Math.random() < 0.5) {
const keys = Object.keys(SUMSUB_QUALITY_REASONS);
setQualityReason(keys[Math.floor(Math.random() * keys.length)]);
setDocPhase('quality');
} else {
setDocPhase('done');
}
}, 1600);
};
const retryCapture = () => { setCaptured({}); setQualityReason(null); setDocPhase('capture'); };
// selfie liveness (face-roll) handler
const startRoll = () => {
setSelfiePhase('rolling'); setRollPct(0);
const id = setInterval(() => setRollPct((p) => {
if (p >= 100) { clearInterval(id); setSelfiePhase('processing'); setTimeout(() => setSelfiePhase('done'), 1400); return 100; }
return p + 10;
}), 180);
};
const submit = () => { setStatus('review'); setKyc('review'); };
return (
}>
{/* 0 · consent */}
{step === 0 && (
<>
You're about to start identity verification with Sumsub. Your ID and a facial scan are processed securely in the EU to confirm your identity.
Your identity document, a selfie with a liveness check, and that the two match.
We match your face to your document and confirm you're really here.
{selfiePhase === 'done'
? ✓
: }
{selfiePhase === 'intro' && 'Position your face in the circle, then slowly turn your head until the ring turns green.'}
{selfiePhase === 'rolling' && 'Keep turning your head — hold steady…'}
{selfiePhase === 'processing' && 'Checking your selfie…'}
{selfiePhase === 'done' && 'Liveness confirmed and matched to your document.'}
)}
);
}
/* ---------- Art 8(2) · Connection to Opalus (restricted-person self-flagging) ----------
ECSP Art 8(2): a person connected to the platform (shareholder ≥20% / manager / director /
employee / a person they control) may invest, but their participation must be published on the
public register. We capture the connection, the relationship, and an explicit public-disclosure
consent, and store it on the investor profile (investor.restrictedPerson). */
const RP_RELATIONSHIPS = [
['shareholder', 'Shareholder holding 20% or more of Opalus’s capital or voting rights'],
['manager', 'Manager or member of Opalus’s management body'],
['director', 'Director of Opalus'],
['employee', 'Employee of Opalus'],
['controlled', 'A person or entity controlled by one of the above'],
];
function ConnectionStep({ inv, update, onDone, onBack }) {
const existing = inv.restrictedPerson;
const [connected, setConnected] = useState(existing ? (existing.connected ? 'yes' : 'no') : null); // null | 'no' | 'yes'
const [relationship, setRelationship] = useState(existing?.relationship || '');
const [disclosureConsent, setDisclosureConsent] = useState(!!existing?.disclosureConsent);
const canSave = connected === 'no' || (connected === 'yes' && !!relationship && disclosureConsent);
const save = () => {
if (!canSave) return;
const declaredAt = new Date().toISOString();
update((s) => {
s.investor.restrictedPerson = connected === 'yes'
? { connected: true, relationship, disclosureConsent: true, declaredAt }
: { connected: false, relationship: null, disclosureConsent: false, declaredAt };
});
onDone();
};
return (
}>Save & continue}>
Are you a shareholder (20% or more), manager, director or employee of Opalus, or a person controlled by any of them?
{[['no', 'No — I have no connection to Opalus'], ['yes', 'Yes — I am connected to Opalus']].map(([id, label]) => (
))}
{window.OPALUS_COPY.art8_2}I consent to my participation in projects being disclosed on Opalus’s public register, as required for persons connected to the platform.
)}
);
}
/* ---------- INV-06 · Categorisation ---------- */
function CategoryStep({ inv, update, onContinue, onApply, onBack }) {
const [scrolledEnd, setScrolledEnd] = useState(false);
const onScroll = (e) => { const el = e.target; if (el.scrollTop + el.clientHeight >= el.scrollHeight - 8) setScrolledEnd(true); };
const sophCriteria = [
'Income ≥ €60,000 / year, or a financial portfolio over €100,000',
'At least 1 year in a professional financial-sector role, or 12 months in an executive position',
'10+ significant capital-market transactions per quarter over the last 4 quarters',
];
return (
Non-sophisticated investorRecommended
The standard category. You keep the full set of protections: a knowledge assessment, a loss-capacity simulation, warnings for larger investments, and a 4-day reflection period on every investment.
Sophisticated investorOn request
For experienced investors who meet specific EU criteria. Fewer protections, fewer steps.
If you apply for sophisticated status{scrolledEnd && ✓ Read}
Sophisticated investors give up protections: no appropriateness assessment, no loss-bearing simulation, no warnings on larger investments, and no 4-day reflection period — investments settle immediately and cannot be withdrawn.
Scroll to the end to enable the sophisticated application.
);
}
/* ---------- INV-07/08 · Sophisticated application ---------- */
const SOPH_CRITERIA = [
'Annual gross income ≥ €60,000, or a financial instrument portfolio over €100,000',
'At least one year in a professional position in the financial sector',
'An average of 10 significant transactions per quarter over the last 4 quarters',
'Hold or have held an executive position for at least 12 months',
];
function SophApplication({ update, onDone, onBack }) {
const [step, setStep] = useState(0);
const [entity, setEntity] = useState('individual');
const [crit, setCrit] = useState([]);
const [statementAck, setStatementAck] = useState(false);
const [veracity, setVeracity] = useState(false);
const [submitted, setSubmitted] = useState(false);
// Sophisticated status is valid for 24 months from the application date (ECSP / BRD §5.2).
const appliedAt = useRef(new Date().toISOString()).current;
const validUntil = window.opalusAddMonths(appliedAt, 24);
const minCrit = entity === 'individual' ? 2 : 1;
const enough = crit.length >= minCrit;
const toggle = (i) => setCrit((c) => c.includes(i) ? c.filter((x) => x !== i) : [...c, i]);
if (submitted) {
return (
}>Back to setup}>
Compliance will review it, usually within 2 business days. Until it's approved, you can continue as a non-sophisticated investor.
Individuals must meet at least 2; legal entities at least 1. Attach evidence for each criterion you claim — for example a tax return, portfolio statement, employment letter, registry extract, or financial statements.
{SOPH_CRITERIA.map((c, i) => (
toggle(i)}>{c}
{crit.includes(i) && }
))}
{!enough &&
Select and evidence at least {minCrit} criteria to continue.
}
)}
{step === 2 && (
<>
Statement of consequences
I understand that as a sophisticated investor I will not receive the appropriateness assessment, the loss-bearing simulation, the warnings applicable to larger investments, or the 4-calendar-day reflection period, and that my investments will settle immediately and cannot be withdrawn.
I have read and understand this statement of consequences.
)}
{step === 3 && (
I confirm that the information and evidence provided are true, accurate and complete, and that I remain responsible for their truthfulness.
)}
Knowledge requirement satisfied under ECSP Article 21.
);
}
if (phase === 'warning') {
return (
Based on your answers, the crowdfunding services provided through this platform may not be appropriate for you. You risk losing the entirety of the money invested.
I have read and understood this warning.
);
}
return (
Question {n + 1} of {total}Save and continue later
If a single investment exceeds 10% of this amount, we'll show you an additional warning before you proceed. EU rules also advise against investing more than 10% of your net worth in crowdfunding overall.
Unlike the public tool, your result is saved to your account and refreshed annually. Valid until 11 Jun 2027 — you can redo the simulation anytime, for example if your finances change.
I understand these investments put my capital at risk, and I am financially able to bear the loss of the amounts I choose to invest.
);
}
return (
}>
setNetWorth(Math.max(0, +e.target.value || 0))} />
);
}
/* ---------- Public pre-registration loss-bearing calculator (logged-out, anonymous) ----------
D-H1 / BP-048 / DM loss_bearing_simulations.source='public_tool' (no save-to-profile).
Reuses the loss-sim inputs; output = 10% of net worth. Live exposure is gated behind a
Bank of Lithuania pre-clearance flag (see PUBLIC_CALC_BOL_CLEARED below). */
/* ASSUMPTION (confirm Lithuanian counsel): the public loss calculator is BUILT but its live
exposure is gated behind a "BoL pre-clearance" flag, defaulting to NOT-yet-cleared.
— see Sync_Audit_Report open Q4 */
const PUBLIC_CALC_BOL_CLEARED = false;
function PublicCalculator() {
const { go } = window.useOpalus();
const [netWorth, setNetWorth] = useState(150000);
const [commitments, setCommitments] = useState(0);
const [permanent, setPermanent] = useState(true);
const [seen, setSeen] = useState(false);
const investable = Math.max(0, netWorth - commitments);
const capacity = Math.round(investable * 0.10);
return (
Loss-bearing calculator go('welcome')}>Back to sign in
Free tool · No account needed
Could you bear a loss?
Before you ever invest in crowdfunding, picture what a loss would mean. This anonymous tool estimates a sensible ceiling — 10% of your net worth. Nothing you enter is saved.
{!PUBLIC_CALC_BOL_CLEARED ? (
Our public loss-bearing calculator is awaiting pre-clearance from the Bank of Lithuania before it goes live. In the meantime, you can complete the full simulation once you go('welcome')}>create an account.
) : (
setNetWorth(Math.max(0, +e.target.value || 0))} />
My income is reasonably permanent (stable employment or recurring income).
{seen && (
Your estimated capacity to bear losses
{window.eur(capacity)}
This is an anonymous estimate and is not saved. When you create an account, you'll complete the full simulation, which is recorded and refreshed annually.
)}
{seen && }
)}
);
}
/* ============================================================ PUBLIC REGISTER — Art 8(2) restricted-person investments ============================================================
Public-facing (logged-out) register required by ECSP Art 8(2) 2nd subparagraph: persons connected
to Opalus may invest only if their participation is disclosed on the website, identifying the
specific projects, with identical treatment and no preferential information. Opalus itself never
participates in any offer (Art 8(1)). Updated as positions change. */
function PublicRegisterScreen() {
const { go } = window.useOpalus();
const rows = [
{ project: 'Le Marais Heritage Apartments', role: 'Platform manager', since: 'Mar 2026', status: 'Open position' },
{ project: 'Canal Saint-Martin Lofts', role: 'Employee', since: 'May 2026', status: 'Open position' },
];
return (
Conflicts-of-interest register go('welcome')}>Back to sign in
Public disclosure · No account needed
Restricted-person investments
Under Article 8(2) of Regulation (EU) 2020/1503, Opalus shareholders holding 20% or more, managers, employees, and persons linked to them by control cannot be project owners on this platform. They may invest only if their participation is disclosed here, identifying the specific projects — on identical terms to every other investor and with no preferential information. Opalus itself never participates in any offer (Article 8(1)).
ProjectConnection to OpalusSinceStatus
{rows.map((r) => (
{r.project}{r.role}{r.since}{r.status}
))}
This register is updated as positions change. Connected persons receive no early access, no separate fee schedule and no privileged information. Last updated 11 June 2026.