SDK licence agreement

• "Veris" means VERIS LABS LIMITED (RC 9414656), a company registered in Nigeria.
• "SDK" means the Veris Capture SDK and/or Veris Scan SDK, including all associated binary files, source code samples, documentation, and updates.
• "Licensee" or "you" means the individual developer or organisation that holds an active Veris subscription and integrates the SDK.
• "Application" means the mobile application developed by the Licensee that embeds the SDK.
• "License Key" means the unique API key issued by Veris to authenticate SDK usage.
• "Subscription" means an active paid Veris plan (Spark, Build, Launch, Scale, Pro, or Enterprise).

Subject to the terms of this Agreement and the existence of an active Subscription, Veris grants you a limited, non-exclusive, non-transferable, non-sublicensable license to:

• Integrate and use the SDK within your Application
• Distribute the SDK as part of your compiled Application to end users
• Use the SDK in sandbox and production environments, as permitted by your Subscription tier

This license is valid only while your Subscription remains active. Expiry or cancellation of your Subscription immediately terminates this license.

You may not:

• Reverse engineer, decompile, disassemble, or attempt to derive source code from the SDK binary
• Modify, adapt, translate, or create derivative works of the SDK
• Sublicense, sell, resell, transfer, assign, or otherwise commercialise the SDK as a standalone product
• Use the SDK to build a product that competes directly with Veris
• Remove, obscure, or alter any proprietary notices, labels, or marks on the SDK
• Use the SDK outside the scope of the features included in your Subscription tier
• Share your License Key with third parties or use it across multiple organisations
• Use the SDK in any application designed to circumvent identity verification, evade fraud detection, or facilitate illegal activity

Veris retains all right, title, and interest in and to the SDK, including all intellectual property rights. This Agreement does not transfer any ownership rights to you. You retain ownership of your Application, excluding the embedded SDK.

• Each Subscription is issued one License Key per application (production) and one sandbox key.
• Your License Key is confidential. You are responsible for keeping it secure.
• The SDK validates your License Key with Veris servers at session start and caches the result for up to one hour.
• If your Subscription lapses, the SDK will return a SUBSCRIPTION_INACTIVE result - it will not crash your application.
• One production package name may be registered per License Key at any time. Changing the registered package name triggers a 24-hour cooldown period.

• Veris does not store any biometric data. Face images, video, liveness scores, and biometric feature vectors are processed entirely on-device and are never transmitted to Veris servers.
• The SDK collects anonymised, non-biometric telemetry (session outcome, error codes, platform, SDK version) to improve product quality. This telemetry contains no personally identifiable information and no biometric data.
• You may disable telemetry collection from your developer dashboard.
• You are responsible for obtaining all necessary consents from your end users for your use of the SDK within your Application, including any applicable requirements under the Nigeria Data Protection Act 2023 (NDPA) and other applicable laws.

• Veris may release SDK updates at any time. Updates may add features, fix bugs, or address security issues.
• Veris will publish a minimum supported SDK version. Applications running below the minimum version will receive a SDK_VERSION_UNSUPPORTED response and must update.
• You are responsible for integrating SDK updates within a reasonable time, particularly for security-related releases.

• Sandbox keys are available at no cost after email verification and provide access to all SDK features for development and testing.
• Sandbox usage is subject to a limit of 50 validations per day and 10 lifetime Compare API calls.
• Sandbox results include an "environment": "sandbox" field and are rejected by the production verify-result endpoint.
• Sandbox keys must not be used in production applications distributed to end users.

THE SDK IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

Veris does not warrant that:

• The SDK will be error-free or uninterrupted
• The SDK will detect all fraudulent or spoofed face presentations
• OCR extraction will be 100% accurate for all document conditions
• The SDK will be compatible with all versions of Android, iOS, Flutter, or React Native

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VERIS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO YOUR USE OF THE SDK, EVEN IF VERIS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

VERIS'S TOTAL CUMULATIVE LIABILITY TO YOU FOR ANY CLAIMS ARISING OUT OF THIS AGREEMENT SHALL NOT EXCEED THE AMOUNTS PAID BY YOU TO VERIS IN THE THREE (3) MONTHS PRECEDING THE CLAIM.

You agree to indemnify, defend, and hold harmless Veris and its officers, directors, employees, and agents from any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to:

• Your Application and its use by end users
• Your violation of this Agreement
• Your violation of any applicable laws or regulations
• Any claim that your Application infringes third-party intellectual property rights

• This Agreement begins when you first use the SDK and continues for as long as your Subscription remains active.
• This Agreement terminates automatically if your Subscription expires, is cancelled, or is terminated for breach.
• Veris may terminate this Agreement immediately upon written notice if you breach any material term of this Agreement and fail to cure such breach within 14 days of notice.
• Upon termination, you must immediately cease use of the SDK and remove it from any applications you distribute.

This Agreement is governed by the laws of the Federal Republic of Nigeria. Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of Lagos State, Nigeria.

Veris may update this Agreement from time to time. We will notify you by email and post the updated Agreement at verisinfra.com/legal/sdk-license at least 14 days before changes take effect. Continued use of the SDK after the effective date constitutes acceptance of the updated Agreement.

For questions about this Agreement, contact us at [email protected].