Legal

Acceptable Use Policy

Draft v0.1·Last updated 2026-07-31

1. Permitted uses

The customer may use Verela for the following purposes in the sandbox workspace:

Synthetic verificationCreating and running synthetic identity verification sessions using the provided synthetic fixtures and generated evidence.
Policy configurationConfiguring verification policies, review workflows, and retention periods to test and demonstrate the platform.
Team managementInviting team members, assigning roles, and testing the team management and access control features.
API integrationIssuing API keys and integrating with the platform API for testing and development purposes.
Audit reviewReviewing audit history, decision events, and verification outcomes for synthetic sessions.

2. Prohibited uses

The following uses are expressly prohibited:

Real identity and biometric dataSubmitting real identity documents, real biometric data, real facial images, or real personal information of any individual into the sandbox workspace.
Real repayment and credit dataSubmitting real repayment records, real credit-bureau data, real registry data, or real financial records into the sandbox workspace.
Real customer dataSubmitting real customer records belonging to the institution's end customers into the sandbox workspace. Only synthetic fixtures may be used.
Autonomous decisionsUsing the platform to make autonomous lending or credit decisions. Verela provides decision support with reason codes; it does not make autonomous decisions.
Registry authority claimsUsing the platform to claim or imply authorization, connectivity, partnership, endorsement, or official data access from any central bank, credit bureau, or registry authority.
Facial searchUsing the platform to build searchable facial embeddings, perform facial search, or use facial data for any purpose other than vendor-provided liveness plus one-to-one comparison.
Data boundary violationsUsing KYC evidence as credit-scoring input, or using repayment behavior as an AML indicator. These data boundaries are immutable.
Credential and access abuseSharing API keys, sharing account credentials, or circumventing role-based access controls to access data outside the customer's own organization.
Security abuseUsing the platform to transmit, store, or process malware, or to attempt to disrupt, reverse-engineer, or compromise the platform or its infrastructure.

3. Synthetic data only

The sandbox workspace is provisioned for synthetic data only. The platform provides synthetic fixtures and generated evidence for testing and demonstration. Processing real identity data requires a separate review and approval that is not available through self-serve signup. A card payment does not unlock production processing.The customer is responsible for ensuring that every team member and every API integration it configures uses only synthetic data in the sandbox. The customer must not attempt to bypass the synthetic-only restriction by any means.

4. Enforcement

Saintrac may suspend or terminate access if the customer breaches this policy. Saintrac may also remove data that violates this policy. Suspension does not delete the customer's other data. The customer may appeal a suspension by contacting Saintrac.

5. Related documents

This Acceptable Use Policy forms part of the Terms of Service. See the Privacy Policy for the data categories handled and the Data Processing Addendum for the controller and processor roles.