Legal Document

TruCheck™ Acceptable Use Policy

Effective Date: September 21, 2026

Last Updated: October 20, 2026

Entity: VerifiedID LLC ("VerifiedID", "we", "us", or "our")

Application: TruCheck™ Application, Client Portals, APIs, Consumer Reports, and Digital Cards

This TruCheck™ Acceptable Use Policy ("AUP") sets the required rules for using the TruCheck™ platform, services, APIs, client portals, Consumer Reports, and TruCheck™ Digital Cards run by VerifiedID LLC. It applies to all Clients, users, and downstream entities ("You" or "Client"). By using the portal, logging in, using TruCheck™ services, or making API requests, you agree to follow this AUP.

SECTION 1: PERMISSIBLE PURPOSE & FCRA COMPLIANCE

1.1 Legitimate Employment Purpose Only. You may use TruCheck™ services only for allowed employment screening purposes under 15 U.S.C. § 1681b(a)(3)(B).

1.2 Prohibition on False Pretenses. You must never request, order, or obtain consumer reports or identity data under false pretenses. Doing so can lead to federal civil and criminal penalties under 18 U.S.C. § 1001 and 15 U.S.C. § 1681q.

1.3 Non-Commercial Redistribution. You must not lease, sell, resell, rent, license, or otherwise profit from candidate identity data or Consumer Reports. The only exception is sharing with authorized corporate end-clients for verified project placement.

1.4 Strict Prohibition on Data Sale & Monetization. This rule follows USCIS Torch API guidelines and state privacy laws. Clients and downstream entities must never sell, rent, lease, trade, or make money from candidate personal data, verification results, or work authorization query data.

SECTION 2: PROHIBITED PLATFORM & API ACTIVITIES

You must NOT do any of the following, directly or indirectly, or allow any third party to do them:

Scraping & Data Extraction: Use bots, scrapers, crawlers, or manual tools to capture or copy protected content from the portal, API endpoints, or TruCheck™ Digital Card web pages. Protected content includes government document images, facial photos, video frames, and candidate metadata.
Biometric Vector Reverse-Engineering: Try to extract, isolate, reverse engineer, or rebuild facial recognition vectors, biometric templates, or algorithm models from any photo, selfie, or verification session.
Account Credential Sharing: Share admin or user account logins with unverified people. Every portal user must have their own login.
Circumvention of Security: Try to bypass, probe, disable, or change access controls, end-to-end encryption, digital card expiration controls, or identity verification steps.
Proxy Verification & Fraudulent Submissions: Submit altered, forged, synthetic, or fake candidate identity documents. You must also not help candidates get around live selfie or liveness checks.
Unauthorized Third-Party Disclosure: Share candidate personal data or verification reports with unauthorized third parties without the candidate's active, explicit consent. All third parties and sub-processors that receive candidate data are bound by contract to the terms, security standards, and privacy protections in the TruCheck™ Privacy Policy.
Credential Exposure & API Key Storage Violations: Store, expose, or share production API keys, OAuth tokens, or admin portal logins in an unsafe way. This includes public code repositories, unencrypted code, and client-side apps.

SECTION 3: USAGE RESTRICTIONS FOR TRUCHECK™ DIGITAL CARDS

3.1 Permitted Scope. Shared TruCheck™ Digital Cards may be used only for:

Interview Identity Verification: Checking that the person who attends a job interview, in person or online, is the verified candidate. This prevents proxy interviewing.
HR Onboarding Verification: Confirming the candidate's identity and work authorization status during onboarding.
Ongoing Project & Active Duty Audits: Checking that the person doing the work on a project or client site matches the verified candidate profile.

3.2 Redaction Integrity. You must not alter, unmask, or try to decrypt hidden (redacted) details on TruCheck™ Digital Cards.

3.3 Restricted Downstream Distribution. Digital Cards may be shared only with genuine end-client representatives who need them for their work.

SECTION 4: ENFORCEMENT, SUSPENSION, AND TERMINATION

4.1 Compliance Monitoring. VerifiedID may review query logs, system access patterns, API calls, and Digital Card sharing to check that you follow this AUP.

4.2 Immediate Suspension. The following will lead to immediate suspension or permanent loss of platform access: any breach of this AUP, unauthorized data scraping, compromised credentials, unauthorized third-party disclosure, or misuse of permissible purpose rules. All active TruCheck™ Digital Cards will also be deactivated, with no refund.

4.3 Legal & Federal Reporting. VerifiedID has the right to report illegal access, fraud, exposed credentials, or data misuse to state and federal law enforcement.

SECTION 5: CONTACT & AUP INQUIRIES

If you have questions about acceptable use, or you think a security issue or credential leak has happened, contact us right away:

VerifiedID LLC
Attn: Legal & Compliance Department
11180 State Bridge Road, Suite 303, Alpharetta, GA 30022, USA