Legal Document
TruCheck™ Acceptable Use Policy
Effective Date: September 21, 2026
Last Updated: October 12, 2026
Entity: VerifiedID LLC ("VerifiedID", "we", "us", or "our")
Application: TruCheck™ Application, Client Portals, APIs, Consumer Reports, and Digital Cards
This TruCheck™ Acceptable Use Policy ("AUP") defines the mandatory rules and restrictions governing the use of the TruCheck™ platform, services, APIs, client portals, Consumer Reports, and TruCheck™ Digital Cards operated by VerifiedID LLC. By accessing the portal, logging into your account, utilizing TruCheck™ services, or making API requests, all Clients, users, and downstream entities ("You" or "Client") agree to strictly adhere to this AUP.
SECTION 1: PERMISSIBLE PURPOSE & FCRA COMPLIANCE
1.1 Legitimate Employment Purpose Only. You shall access and use TruCheck™ services exclusively for permissible employment screening purposes under 15 U.S.C. § 1681b(a)(3)(B).
1.2 Prohibition on False Pretenses. You are strictly prohibited from requesting, ordering, or obtaining consumer reports or identity data under false pretenses. Violations are subject to federal civil and criminal penalties under 18 U.S.C. § 1001 and 15 U.S.C. § 1681q.
1.3 Non-Commercial Redistribution. You shall not lease, sell, resell, rent, license, or commercially exploit candidate identity data or Consumer Reports to third parties outside of authorized corporate end-clients for verified project placement.
1.4 Strict Prohibition on Data Sale & Monetization. In accordance with USCIS Torch API guidelines and state privacy mandates, Clients and downstream entities are strictly prohibited from selling, renting, leasing, trading, or monetizing candidate personal data, verification outcomes, or work authorization query data for profit or any monetary consideration.
SECTION 2: PROHIBITED PLATFORM & API ACTIVITIES
You shall NOT, directly or indirectly, nor allow any third party to:
- Scraping & Data Extraction: Use automated scrapers, bots, crawlers, or manual extraction tools to capture, copy, or scrape source government document images, facial photos, video frames, or candidate metadata from the portal, API endpoints, or TruCheck™ Digital Card web interfaces.
- Biometric Vector Reverse-Engineering: Attempt to extract, isolate, reverse-engineer, or reconstruct facial recognition vectors, biometric templates, or algorithmic models from any photo, selfie, or verification session.
- Account Credential Sharing: Share administrative or user account credentials across unverified individuals. Each user accessing the portal must possess unique login credentials.
- Circumvention of Security: Attempt to bypass, probe, disable, or modify platform access controls, end-to-end encryption, digital card expiration controls, or identity verification workflows.
- Proxy Verification & Fraudulent Submissions: Submit altered, forged, synthetic, or fraudulent candidate identity documents, or assist candidates in bypassing live selfie/liveness detection steps.
- Unauthorized Third-Party Disclosure: Disclose, transmit, or share candidate personal data or verification reports with unauthorized third parties without active, explicit candidate consent. All third parties or sub-processors receiving candidate data are contractually bound to the terms, security standards, and privacy protections set forth in the TruCheck™ Privacy Policy.
- Credential Exposure & API Key Storage Violations: Insecurely store, expose, or share production API keys, OAuth tokens, or administrative portal credentials in public repositories, unencrypted codebases, or client-side applications.
SECTION 3: USAGE RESTRICTIONS FOR TRUCHECK™ DIGITAL CARDS
3.1 Permitted Scope. Shared TruCheck™ Digital Cards are intended strictly for:
- Interview Identity Verification: Cross-referencing candidate identity against individuals physically or virtually appearing for job interviews to prevent proxy interviewing.
- HR Onboarding Verification: Confirming candidate identity and work authorization status during initial corporate onboarding.
- Ongoing Project & Active Duty Audits: Verifying that the specific individual performing work on assigned projects or active client sites matches the authenticated candidate profile.
3.2 Redaction Integrity. You shall not alter, unmask, or attempt to decrypt redacted attributes on TruCheck™ Digital Cards.
3.3 Restricted Downstream Distribution. Digital Cards must only be shared with legitimate end-client representatives who have a direct business need-to-know.
SECTION 4: ENFORCEMENT, SUSPENSION, AND TERMINATION
4.1 Compliance Monitoring. VerifiedID reserves the right to audit query logs, system access patterns, API call parameters, and Digital Card distribution to verify compliance with this AUP.
4.2 Immediate Suspension. Any violation of this AUP, unauthorized data scraping, credential compromise, unauthorized third-party disclosure, or non-compliance with permissible purpose rules will result in immediate suspension or permanent termination of platform access and deactivation of all active TruCheck™ Digital Cards without refund.
4.3 Legal & Federal Reporting. VerifiedID reserves the explicit right to report illegal access, fraudulent activities, credential exposure, or data misuse to relevant state and federal law enforcement authorities.
SECTION 5: CONTACT & AUP INQUIRIES
If you have questions regarding acceptable platform use or suspect a security or credential compromise, contact us immediately at:
VerifiedID LLC
Attn: Legal & Compliance Department
11180 State Bridge Road, Suite 303, Alpharetta, GA 30022, USA
- Phone: (888) 718-2597
- Email: privacy.trucheck@verifiedid.co
- General Legal: compliance@verifiedid.co
