Legal

TERMS OF
SERVICE.

Last updated: 1 August 2026  ·  Governing law: Republic of India  ·  Jurisdiction: Bengaluru

1. Acceptance

By creating an account, accessing the Veriflow API, or using the Veriflow dashboard, you ("Customer") agree to these Terms. If you are entering into these Terms on behalf of a company, you represent that you have authority to bind that company.

2. The service

Veriflow provides a unified verification API that orchestrates identity, financial, and document checks via licensed data sources including UIDAI (Aadhaar OTP), ITD (PAN), NPCI (bank account), GST portal (GSTIN), and others. We provide sandbox and production environments, a web dashboard, and SDKs.

3. Customer obligations

  • Obtain valid consent from end-users before initiating any verification under the DPDP Act 2023.
  • Use the API only for lawful KYC, KYB, or identity verification purposes.
  • Not share, resell, or sublicence API keys without written approval.
  • Maintain accurate account information and notify us of security incidents within 24 hours.
  • Comply with all applicable Indian laws including IT Act 2000, RBI KYC Master Directions, and DPDP Act 2023.

4. Prohibited uses

Customers may not use Veriflow to: perform verification without end-user consent; build competing verification infrastructure; scrape, cache, or re-sell raw data from UIDAI or other licensed sources; verify individuals for surveillance, fraud, or discriminatory purposes.

5. Pricing and payment

Usage is billed monthly in INR at the per-verification rate applicable to your plan. Invoices are issued on the 1st of each month. Payment is due within 15 days. Overdue accounts are suspended after 7 days of notice. GST at 18% applies to all charges.

6. Uptime SLA

We target 99.9% monthly uptime for production API endpoints. Planned maintenance is announced 48 hours in advance. For uptime below 99.5% in any calendar month, customers on Growth and Enterprise plans may claim a service credit of 10% of that month's invoice, capped at 30%.

7. Data handling

Our handling of personal data processed through the API is governed by our Privacy Policy, which forms part of these Terms. Customers are data fiduciaries under DPDP Act 2023; Veriflow acts as a data processor on their behalf.

8. Liability

Our aggregate liability under these Terms is limited to the total fees paid by the Customer in the 3 months preceding the claim. We are not liable for indirect, consequential, or punitive damages. We are not liable for downtime caused by third-party data sources (UIDAI, ITD, NPCI, GST portal).

9. Termination

Either party may terminate with 30 days written notice. We may terminate immediately for material breach, non-payment, or use that violates applicable law. On termination, Customer data is deleted within 30 days unless retention is required by law.

10. Governing law

These Terms are governed by the laws of the Republic of India. Disputes are subject to the exclusive jurisdiction of courts in Bengaluru, Karnataka. The parties agree to attempt mediation before litigation.

11. Contact

Legal enquiries: [email protected] · [email protected]

DPDP Act 2023
RBI KYC Directions
UIDAI AUA / KUA
ISO 27001
IT Act 2000