Acceptable Use Policy

You may only run an identity verification, screening, or due-diligence check on an individual if all of the following are true:

• The individual is your firm's client, or is genuinely entering a business relationship with your firm (including beneficial owners and officers of client entities)
• The check is for anti-money-laundering, client due diligence, or identity verification purposes connected to that relationship
• Your firm has a lawful basis for the check and has informed the individual in line with your privacy notice

You must never use the Services to:

• Run checks for credit decisions, employment or tenant screening, tracing or locating individuals, marketing, or curiosity
• Check individuals with no connection to your firm — including colleagues, family members, public figures, or yourself for testing (use the demo data we provide instead)
• Resell, expose, scrape, or systematically extract verification results or the data behind them
• Discriminate unlawfully against any individual on the basis of a check result

You must not:

• Share login credentials, or give platform access to anyone outside your firm without our written agreement
• Attempt to access another firm's workspace or data, or probe, scan, or test the vulnerability of the platform without our prior written consent
• Introduce malware, interfere with service operation, or circumvent rate limits, usage limits, or security controls
• Use automated means to create accounts or submit checks except through interfaces we provide for that purpose
• Misrepresent your identity, your firm, or your regulatory status when registering or using the Services

Plans with unlimited or high-volume features are subject to fair usage consistent with a professional firm's genuine compliance workload. We will contact you before acting on any fair-usage concern.

If you believe an account is misusing the Services, or you have found a security vulnerability, email support@certivus.com. We ask security researchers to report responsibly and give us a reasonable opportunity to fix issues before public disclosure; we will not pursue good-faith research conducted within this policy.

Depending on severity, we may warn you, suspend the affected users or checks, or terminate the account under the Terms of Service. Misuse of verification data is treated as a material breach and may be suspended immediately — our agreements with data partners require it. Where the law requires, we may also notify regulators or law enforcement.