1.1 These Product Terms and Conditions (“Product Terms”) govern your use of Co.ID, a verified business identity wallet service provided by Umazi Ltd (“we”, “us”, or “our”).
1.2 These Product Terms form part of your agreement with Umazi and should be read together with the Umazi Master Terms and Conditions (“Master Terms”). Definitions used in the Master Terms apply to these Product Terms unless stated otherwise.
1.3 By creating a Co.ID account or using the Co.ID service, you confirm that you have read, understood and agree to be bound by these Product Terms and the Master Terms.
1.4 These Product Terms are designed to be clear and straightforward. If anything is unclear, please contact us at info@umazi.io.
Definitions
In addition to the definitions in the Master Terms, the following definitions apply to these Product Terms:
Co.ID The Umazi verified business identity wallet service, which enables businesses and individuals to create, store and share verified identity credentials.
Co.ID Account The account created by a Holder to access and manage their Co.ID identity wallet.
Credential A verified piece of information or attestation about a Holder’s identity, status or attributes, stored within the Co.ID wallet.
Holder A business, organisation or individual who creates and maintains a Co.ID identity wallet to store and share their verified identity information.
Identity Wallet The secure digital wallet within Co.ID where a Holder’s verified Credentials, Verification Stamps and identity information are stored.
Relying Party Any third party (such as a bank, law firm, regulator, or business counterparty) that receives and relies upon verified identity information shared by a Holder through Co.ID.
Verification Stamp A cryptographically secure attestation confirming that a specific verification or due diligence check has been completed by a trusted verifier.
Audit Trail The immutable, tamper-proof record of all verification activities, data changes and sharing events associated with a Co.ID identity wallet.
The Co.ID Service
What Co.ID Does
3.1 Co.ID is a verified, reusable business identity wallet. It allows you to complete due diligence once and reuse your verified identity across multiple counterparties, platforms and jurisdictions.
3.2 The core features of Co.ID include:
a) Identity creation and storage — creating and securely storing your verified business identity information in a digital wallet.
b) Verification Stamps — receiving and storing cryptographically secure attestations from trusted verifiers confirming that due diligence checks have been completed.
c) Identity sharing — sharing your verified identity information with Relying Parties on demand, without needing to resubmit documents each time.
d) Consent management — controlling who can access your identity information, with the ability to grant and revoke access at any time.
e) Audit Trail — maintaining a complete, immutable record of all verification and sharing activities associated with your identity wallet.
What Co.ID Does Not Do
3.3 Co.ID stores and shares identity information that has been verified through appropriate verification processes. Co.ID does not itself carry out due diligence checks, identity verification, or compliance assessments. Those services are provided separately through Smpl.Comply or other approved verification providers.
Your Co.ID Account
4.1 To use Co.ID, you must create a Co.ID Account. You are responsible for keeping your login details secure and must not share them with anyone.
4.2 You must ensure that all information provided when creating and maintaining your Co.ID Account is true, complete and up to date. You must notify us promptly if any of your account information changes.
4.3 You are responsible for all activity that occurs under your Co.ID Account. If you suspect any unauthorised access to your account, you must notify us immediately at info@umazi.io.
4.4 The general account provisions set out in the Master Terms (including account audits, suspension and termination) also apply to your Co.ID Account.
Your Data and Identity Information
Data Ownership
5.1 Your identity information belongs to you. All identity data, documents and Credentials stored in your Co.ID wallet remain your property. We do not claim ownership of any information you upload to or store in Co.ID.
5.2 We require a limited licence to use your identity information solely for the purpose of operating the Co.ID service — for example, to store your data securely, to display it to you within your wallet, and to share it with Relying Parties when you authorise us to do so. This licence ends when you close your Co.ID Account, subject to any legal or regulatory retention obligations.
Consent and Sharing
5.3 You control who sees your information. Your identity information will only be shared with Relying Parties when you give explicit consent. You can grant, manage and revoke sharing permissions at any time through your Co.ID Account.
5.4 Once you share information with a Relying Party, we cannot control how that Relying Party uses, stores or processes it. You should satisfy yourself that the Relying Party’s own data handling practices are acceptable to you before sharing your information.
5.5 Revoking a Relying Party’s access will prevent further access to your information through Co.ID, but it will not affect any copies of information the Relying Party has already received or downloaded.
Data Accuracy
5.6 You are responsible for ensuring that the identity information you provide is true, accurate and complete. If any information changes, you must update your Co.ID Account promptly.
5.7 We are not responsible for verifying the accuracy of information you upload to Co.ID. Verification Stamps relate only to the checks carried out by the relevant verifier at the time of verification, and do not constitute an ongoing guarantee of accuracy.
Verification Stamps and Audit Trail
6.1 When due diligence or verification checks are completed on your identity through an approved verification provider, a Verification Stamp will be added to your Co.ID wallet. Each Verification Stamp records what was checked, when, and by whom.
6.2 Verification Stamps are cryptographically secured and cannot be altered or removed by you or by us. They form part of your permanent Audit Trail.
6.3 Co.ID maintains a complete Audit Trail of all verification activities, data changes and sharing events associated with your identity wallet. This Audit Trail is immutable and tamper-proof, designed to provide a trusted record for compliance purposes.
6.4 You acknowledge that Verification Stamps and the Audit Trail reflect the status of checks at the time they were carried out. They do not guarantee your ongoing compliance status or the continued accuracy of verified information.
Data Security
7.1 We take the security of your identity information seriously. We implement appropriate technical and organisational measures to protect your data, including encryption, access controls and secure storage practices.
7.2 Co.ID uses blockchain or decentralised ledger technology to ensure the integrity and immutability of Verification Stamps and Audit Trails. This means that records cannot be altered or deleted once created.
7.3 While we take reasonable steps to protect your data, no system is completely secure. We cannot guarantee that unauthorised access, data loss or corruption will never occur. You should maintain your own copies of important documents.
7.4 In the event of a security incident affecting your identity data, we will notify you as soon as reasonably practicable and in accordance with applicable Data Protection Laws.
Regulatory Compliance and Interoperability
8.1 Co.ID is designed to comply with applicable digital identity regulations and frameworks, including the EU eIDAS 2.0 regulation and the UK Digital Identity and Attributes Trust Framework (DIATF).
8.2 While we aim to maintain compliance with these frameworks, regulatory requirements may change over time. We will use reasonable endeavours to update Co.ID to reflect material changes in applicable regulations, and will notify you of any changes that may affect your use of the service.
8.3 Co.ID is designed for interoperability with other compliant identity systems and business registries. However, we do not guarantee interoperability with any specific third-party system, registry or jurisdiction.
Your Obligations
9.1 When using Co.ID, you agree to:
a) provide only true, accurate and complete information;
b) keep your account details and login credentials secure;
c) promptly update your information if it changes;
d) use Co.ID only for lawful purposes and in accordance with these Product Terms;
e) not attempt to tamper with, circumvent or interfere with the security or integrity of Co.ID, including Verification Stamps and the Audit Trail;
f) comply with all applicable laws and regulations, including Data Protection Laws.
9.2 You must not use Co.ID to create a false or misleading identity, or to misrepresent your business or personal identity in any way.
. Fees
10.1 Fees for using Co.ID are set out in your Commercial Terms or as published on our website. The fee structure for Co.ID may differ from fees applicable to other Umazi products.
10.2 The payment terms set out in the Master Terms apply to Co.ID fees unless otherwise specified in your Commercial Terms.
10.3 We may change Co.ID fees from time to time. We will give you at least 30 days’ written notice of any fee changes. The updated fees will apply from the date specified in our notice.
. Limitation of Liability
11.1 The limitation of liability provisions set out in the Master Terms apply to your use of Co.ID.
11.2 In addition, you acknowledge and agree that:
a) we are not responsible for the accuracy, completeness or reliability of any information provided by you, by verification providers, or by any Relying Party;
b) we are not responsible for any decision made by a Relying Party based on information shared through Co.ID;
c) Verification Stamps reflect the status of checks at the time they were carried out and do not constitute a guarantee of ongoing compliance; and
d) while we use blockchain or decentralised ledger technology to secure Audit Trails, we do not guarantee that such technology is immune to all forms of attack or failure.
. Data Protection and Privacy
12.1 Given the nature of Co.ID, we will process personal data and business identity data as part of providing the service. The data protection and privacy provisions in the Master Terms and our Privacy Policy apply to Co.ID.
12.2 As a Holder, you are the data controller of the identity information you store in your Co.ID wallet. We act as a data processor on your behalf, processing your identity data only as necessary to provide the Co.ID service and as authorised by you.
12.3 When you share identity information with a Relying Party, that Relying Party becomes an independent data controller in respect of any personal data they receive. Their use of that data will be governed by their own privacy policies and data protection obligations.
12.4 We comply with applicable Data Protection Laws, including the UK GDPR and the Data Protection Act 2018. Where Co.ID operates in the EU, we also comply with the EU GDPR and eIDAS 2.0 requirements relating to digital identity data.
. Closing Your Co.ID Account
13.1 You may close your Co.ID Account at any time by contacting us in writing. Account closure does not affect any fees already due or any obligations that have accrued before closure.
13.2 On closure of your Co.ID Account, we will delete or anonymise your identity data in accordance with applicable Data Protection Laws, subject to any legal or regulatory obligations that require us to retain certain records (including Audit Trail records).
13.3 You should download any identity information or documents you wish to retain before closing your account. We are not required to provide copies of your data after your account has been closed, except as required by applicable law.
13.4 Verification Stamps and Audit Trail records may be retained in anonymised or pseudonymised form after account closure, to the extent necessary for regulatory compliance and the integrity of the verification ecosystem.
. General
14.1 The general provisions set out in the Master Terms (including governing law, jurisdiction, dispute resolution, force majeure, severability, assignment and notices) apply to these Product Terms.
14.2 We may update these Product Terms from time to time. We will give you at least 30 days’ notice of any material changes. Your continued use of Co.ID after the effective date of any changes constitutes your acceptance of the updated Product Terms.
14.3 If any provision of these Product Terms conflicts with the Master Terms, these Product Terms shall prevail in respect of Co.ID.