Last updated: 5 November 2026

1. About VeroID

VeroID is a trading name of One Shot Ventures Pty Ltd (ABN 50 690 149 609). VeroID provides authorised Australian businesses with secure, API-based identity verification services so documents can be checked with the document issuer or official record holder.

Our service is a B2B software-as-a-service (SaaS) platform. VeroID does not provide consumer-facing identity verification services directly to individuals.

2. Early Access Program (closed)

The Early Access Program closed to new customers on 8 October 2026. Early Access pricing ($500 AUD activation fee and $1.50 AUD per verification credit for 12 months from activation) continues to apply only to developer accounts that had paid the Early Access activation fee before that date. Creating an account without paying the activation fee did not secure Early Access pricing. Features, functionality, performance, and availability may change as the service evolves.

If you paid the Early Access activation fee before the VeroID service was generally available and the service had not launched by 31 December 2026, you may request a refund of that fee within 30 days of that date as described in the version of these terms in effect when you paid. No refunds are available after that period except as expressly stated in these terms.

Except as expressly stated in this clause, Early Access fees are non-refundable.

3. Payment and Pricing

VeroID offers two mutually exclusive account types with different pricing models.

A dashboard account runs verifications from the VeroID dashboard, is not issued API keys, and requires an active monthly dashboard subscription of $49 AUD (including GST where applicable). Each paid subscription period includes 10 verification credits. Dashboard accounts may purchase additional prepaid credit packs while their subscription is active.

A developer account integrates over the API, is issued API keys, and pays a one-time activation fee of $750 AUD (excluding GST) before API access. The activation fee includes 100 verification credits. Verification credits are priced at $1.95 AUD each (excluding GST), and live screening checks through the API consume half a credit each unless your account Plan Terms state otherwise. Developer accounts that paid the activation fee before 8 October 2026 retain the Early Access pricing described in clause 2. Developer accounts cannot run verifications from the dashboard.

Your account's commercial terms, including any plan or pricing options agreed with VeroID (such as screening monitoring), are set out in your Plan Terms in the dashboard and form part of these terms once accepted.

Customers may change account type. Switching to a developer account requires payment of the one-time activation fee. Switching to a dashboard account requires an active dashboard subscription and results in revocation of any API keys.

All fees are payable in advance and exclusive of GST unless stated otherwise. Verification credits must be available before live checks are performed.

VeroID may update pricing from time to time. Any changes to pricing will apply from the date the updated pricing is published on the VeroID website and will apply prospectively to future subscriptions, credit purchases, or services. We will provide reasonable notice of material subscription price changes.

Failure to pay fees when due may result in suspension or termination of access.

3A. Dashboard Subscription

Dashboard subscriptions are billed monthly through Revolut. Access to the dashboard requires an active subscription in good standing. If payment fails or a subscription is canceled, dashboard access may be suspended until the subscription is reactivated.

When a subscription invoice is paid, 10 verification credits are added to the account for that billing period. Subscription credits do not expire.

You may cancel your subscription at any time from your dashboard billing page. Cancellation takes effect at the end of the current billing period. No refunds are provided for partial subscription periods unless required by law.

4. Prepaid Credits

Verification credits may be included with a paid dashboard subscription or purchased in prepaid packs. Credits do not expire while your account remains active.

Unused credits have no monetary value and are not refundable except where required by law.

5. Eligibility Requirements

To use VeroID services, you must meet the following criteria:

Be a legal entity whose identity has been established
Be carrying on business in Australia (dashboard accounts) or be a developer integrating the API into your own service
Be subject to the Privacy Act 1988 (Cth) or, for developer accounts, ensure your end customers and their use of verification and screening are handled under applicable Australian privacy and AML/CTF law
Meet all requirements that apply to your use case under applicable identity verification and AML/CTF rules
Comply with all applicable laws and regulations

If you resell or embed VeroID to your own customers under a developer account, you are responsible for their eligibility, consent, permitted purpose, and compliance. You must pass through the obligations in these terms (including acceptable use, consent, record-keeping, and Schedule A where you use production DVS access) to your sub-users.

VeroID reserves the right to verify your eligibility and refuse service to any entity that does not meet these requirements.

6. Acceptable Use and Use of the Services

Dashboard accounts receive a limited, non-exclusive, non-transferable, revocable licence to use the VeroID dashboard for your organisation's own compliance and onboarding workflows. Developer accounts receive a limited, non-exclusive, non-transferable, revocable platform licence to integrate the APIs and documentation into your software and to offer identity verification and screening to your own customers, including for a fee, provided you comply with these terms and applicable law.

You must not, and must not permit any third party to:

Use the services for any unlawful purpose or in breach of any applicable law or regulatory requirements
Submit identity information without the individual's prior express consent
Resell raw VeroID data, list content, or API access as a standalone data product unrelated to your integrated service, or operate a bureau that substitutes for VeroID without a developer account and agreement to these terms
Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, models, or underlying structure of the services
Circumvent, disable, or interfere with security features, usage limits, or access controls
Perform load testing, penetration testing, or benchmarking without VeroID's prior written consent
Use the services in a manner that could damage, disable, overburden, or impair the VeroID platform or underlying third-party verification systems

VeroID may suspend or restrict access where it reasonably believes there has been a breach of this clause. Without limitation to any other rights, VeroID may terminate your service (without refund) for repeated or material breach of these obligations.

7. API Usage Limits

VeroID may impose reasonable usage or technical restrictions on use of the APIs to protect service integrity, comply with regulatory requirements, or manage system capacity. Excessive or abusive usage may result in throttling, suspension, or termination of access.

8. Consent Requirements

Before submitting any identity verification request, you must ensure that the individual whose identity is being verified has provided their prior express consent for:

If you use production DVS access on a developer account, you must also comply with Schedule A, including obtaining express consent for every DVS Transaction and naming VeroID as your verification provider and Information Match Agent in your privacy notices.

The collection and use of their personal information for identity verification
The disclosure of their information to VeroID and official record holders
VeroID to process their information and provide verification results

A sample consent statement that meets legislative requirements is: “I confirm that I am authorised to provide the personal details presented and I consent to my information being checked with the document issuer or official record holder via third-party systems for the purpose of confirming my identity.”

9. Use Case Responsibility

You are solely responsible for ensuring that your intended use of the services is approved by, and complies with the requirements of, applicable regulatory authorities.

10. Data Handling

VeroID:

Does not store identity documents or document numbers
Does not retain verification results beyond what is necessary to deliver the service
Maintains all systems and data within Australia
Keeps transaction records for a minimum of 7 years as required by applicable conditions
Takes reasonable steps to permanently remove or destroy personal information once the verification purpose is fulfilled

10A. Prohibited Uses of Verification Data

You must not, and must ensure your personnel and systems do not, use or disclose identification information obtained for the purpose of making a verification request for any of the following purposes. Schedule A sets out additional restrictions that apply to DVS Results and Identification Information submitted through production DVS access.

Creating a data profile of the individual whose identity is being verified (including tracking their behaviour, whether online or otherwise)
Offering to supply goods or services
Advertising or promoting goods or services
Enabling another person or entity to offer to supply goods or services
Enabling another person or entity to advertise or promote goods or services
Market research

11. Service Availability

VeroID provides live production verifications for approved accounts, with documents checked with the document issuer or official record holder, alongside test hub access for integration. Verification services are provided on an “as is, as available” basis. While we strive for high availability, verification services may be subject to faults, errors, interruption, or unavailability.

Alternative Verification: You must ensure your business processes and operations can be satisfactorily conducted through alternative means of identity verification if the verification services are subject to faults, errors, interruption, or are unavailable for any reason.

12. Verification Results and Record Holder Disclaimer

Verification results indicate whether the information provided matches or does not match records held by the document issuer or official record holder. Results are provided based on data from Official Record Holders and have not been independently verified by VeroID.

Verification results are derived from information supplied by Official Record Holders. VeroID does not verify, warrant, or guarantee the accuracy, completeness, or timeliness of that source data.

You are solely responsible for:

Your business processes and decisions based on verification results
Determining the appropriate use of verification results in your context
Your compliance with applicable laws and regulations

Legal Proceedings: You must not use information contained in a verification result as the only evidence of an individual's identity in criminal or civil proceedings to which the individual is a party.

13. Security Disclaimer

While VeroID implements reasonable administrative, technical, and organisational security measures, no system is completely secure. VeroID does not guarantee that the services will be free from security incidents, unauthorised access, or data loss.

VeroID is not responsible for security incidents arising from factors outside its reasonable control, including failures of third-party systems, issuer or record holder infrastructure, telecommunications networks, or acts or omissions of Official Record Holders.

14. Third-Party Services

The services rely on third-party systems, including Official Record Holders and their infrastructure. VeroID does not control and is not responsible for the availability, accuracy, or performance of these third-party services.

15. Subprocessors

VeroID may use subcontractors and third parties to provide the services. VeroID remains responsible only to the extent required by law and does not assume liability for acts or omissions of third parties outside its reasonable control.

16. Intellectual Property Warranty and Indemnity

VeroID warrants that it owns or has the necessary rights and licences to provide the services and grant the licences set out in these terms.

VeroID will indemnify you against any third-party claim alleging that your authorised use of the services infringes any Australian intellectual property right, provided that:

you promptly notify VeroID of the claim
you do not admit liability or settle the claim without VeroID's prior written consent
you provide reasonable cooperation in the defence of the claim

17. Limitation of Liability

To the maximum extent permitted by law, VeroID's total aggregate liability arising out of or in connection with these terms or the services is limited to the total fees paid by you to VeroID in the 12 months preceding the event giving rise to the claim.

In no event will VeroID be liable for any indirect, incidental, consequential, special, or economic loss, including loss of profits, revenue, business, or data.

Nothing in these terms excludes or limits liability that cannot be excluded under Australian Consumer Law.

18. Customer Indemnity

You indemnify VeroID and Official Record Holders against any loss, damage, cost, expense, claim, or liability arising from your use of VeroID services, any breach of these terms, or any breach of applicable laws.

19. Suspension and Termination

VeroID may suspend or terminate your access to services. For production DVS access, Schedule A also describes when VeroID may suspend or end DVS access and how that interacts with these terms.

Without limiting the above, VeroID may suspend or terminate your access to services:

Immediately if you breach these terms
If required by any regulatory authority
With 45 days notice for any other reason

20. Regulatory Suspension

VeroID may suspend or terminate access to the services immediately where required or directed by any regulatory authority. VeroID will not be liable for any loss arising from such suspension or termination.

21. Effect of Termination

Upon termination or expiry:

all licences granted to you immediately cease
your access to the services will be disabled
any unused credits will be forfeited unless required otherwise by law

Clauses relating to intellectual property, confidentiality, limitation of liability, indemnities, governing law, and any clauses which by their nature should survive will survive termination.

22. Assignment

You may not assign or transfer these terms without VeroID's prior written consent. VeroID may assign these terms in connection with a corporate restructure, financing, or sale of its business.

23. Changes to Terms

We may update these terms from time to time. Material changes will be notified with at least 45 days notice. Continued use of services after changes take effect constitutes acceptance of the updated terms.

Changes to Schedule A follow the notice period in Schedule A clause 12.3 (at least 30 days, or less where the Framework Administrator makes or requires a change).

24. Entire Agreement and Severability

These terms constitute the entire agreement between the parties regarding the services. If any provision is held invalid or unenforceable, the remaining provisions will remain in full force and effect.

25. Governing Law

These terms are governed by the laws of Queensland, Australia. You submit to the non-exclusive jurisdiction of the courts of Queensland.

Schedule A: DVS obligations (developer accounts)

This Schedule applies to developer accounts that access production Document Verification Service (DVS) checks through VeroID. It forms part of these Terms of Service together with your Plan Terms once accepted in the dashboard. Capitalised terms in the Schedule are defined in the Schedule unless the main terms define them first.

Schedule A: Document Verification Service (DVS) obligations

Provider: One Shot Ventures Pty Ltd (ABN 50 690 149 609) trading as VeroID
Effective date: 5 November 2026
Version: 1.1

1. Application and interpretation

1.1 This Schedule forms part of the agreement between VeroID and the Customer under which VeroID provides the Customer with access to the DVS (the Agreement). It applies whenever the Customer accesses or uses the DVS, or any DVS Result, through VeroID.

1.2 In this Schedule, VeroID means One Shot Ventures Pty Ltd (ABN 50 690 149 609) trading as VeroID, and the Customer means the customer named in the Order Form.

1.3 Capitalised terms used but not defined in this Schedule have the meaning given to them in the Agreement.

1.4 In this Schedule, headings are for convenience only, the singular includes the plural and the reverse, and the words "including" and "for example" do not limit what else may be included.

2. Definitions

2.1 In this Schedule:

(a) Authorised Personnel means employees and contractors of the Customer who have been authorised in writing by the Customer to access the DVS or DVS Results, who need that access to perform their duties, and who have completed the training required by clause 8.4.
(b) Business User means a Customer that uses the DVS only for the purposes of its own organisation.
(c) DVS means the Document Verification Service, which forms part of the IVS and is administered by the Framework Administrator.
(d) DVS Access Policy means the DVS Access Policy issued by the Framework Administrator, as amended or replaced from time to time.
(e) DVS Result means any response, match result or other information returned by the DVS in relation to a Transaction.
(f) Express Consent means consent given expressly (not implied) by the individual whose Identification Information is to be checked, which is informed, voluntary, specific to the verification of that individual's identity using the DVS, and obtained for the particular Transaction before that Transaction is submitted.
(g) Framework Administrator means the Commonwealth Attorney-General's Department, in its capacity as administrator of the IVS, or any other body that performs that role from time to time.
(h) Go-Live Application means the application submitted by or on behalf of the Customer for production access to the DVS.
(i) IDSP or Identity Service Provider means a Customer that uses the DVS on behalf of its Service Clients.
(j) Identification Information means any information about an individual, including information on or about an identity document, that is collected for, submitted to, or returned from the DVS in connection with a Transaction.
(k) Identity Opinion means a statement given by an IDSP to its Service Client as to whether, in the IDSP's opinion, an individual's identity has been verified, which does not contain, reproduce or disclose any DVS Result.
(l) Information Match Agent or IMA means a person appointed in writing by a user of the DVS to act as its agent in transmitting Identification Information to the DVS and receiving DVS Results from the DVS on that user's behalf.
(m) IVS means the Identity Verification Services administered by the Framework Administrator.
(n) Order Form means the order form, proposal, Plan Terms acceptance, or other document under which the Customer subscribes to VeroID's DVS services.
(o) Participation Agreement means each agreement, set of terms or other arrangement, entered into with or issued by the Framework Administrator, under which the Customer is permitted to access the DVS, as amended or replaced from time to time.
(p) Service Client means a person to whom an IDSP provides identity verification services.
(q) Transaction means each individual request submitted to the DVS by or on behalf of the Customer to verify Identification Information.

3. Customer category

3.1 The Customer participates in the DVS as either a Business User or an IDSP, as stated in the Order Form or the Go-Live Application.

3.2 If the Order Form and the Go-Live Application are inconsistent, the category approved by the Framework Administrator applies. Until a category is confirmed, VeroID may treat the Customer as a Business User.

3.3 The Customer warrants that the information it provides about its category, its intended use of the DVS and (if it is an IDSP) its Service Clients is complete, accurate and not misleading.

3.4 The Customer must not change its category, or use the DVS in a way that belongs to a different category, without VeroID's prior written approval and any approval required from the Framework Administrator.

4. Appointment of VeroID as Information Match Agent

4.1 By entering into the Agreement, the Customer appoints VeroID in writing as its Information Match Agent for the purposes of the DVS, and VeroID accepts that appointment.

4.2 Under that appointment, VeroID is authorised to:
(a) receive Identification Information from the Customer;
(b) transmit Identification Information to the DVS on the Customer's behalf;
(c) receive DVS Results from the DVS and return them to the Customer; and
(d) do anything reasonably incidental to the matters in paragraphs (a) to (c).

4.3 The Customer acknowledges that VeroID provides access to the DVS as the Customer's gateway to the DVS. To the extent required by the Participation Agreement or the DVS Access Policy, the appointment of VeroID as Information Match Agent in clause 4.1 is the Customer's written appointment of VeroID as its Information Match Agent, and the Customer authorises VeroID to confirm that appointment on the Customer's behalf.

4.4 The Customer must provide any information, documents and assistance that VeroID reasonably requires to carry out due diligence on the Customer (including under clause 4.6 of the DVS Access Policy) and to support the Customer's application to, and dealings with, the Framework Administrator.

4.5 The appointments in this clause 4 continue for as long as the Customer has access to the DVS through VeroID, and end when that access ends, without affecting any obligation that survives under clause 12.

5. Permitted use

5.1 Subject to this Schedule, the Participation Agreement and the DVS Access Policy, the Customer may:
(a) submit Transactions where it has obtained Express Consent from the individual concerned; and
(b) use the DVS Result to verify the identity of that individual.

5.2 A Business User may use the DVS only for the purposes of its own organisation.

5.3 An IDSP may:
(a) submit Transactions on behalf of its Service Clients;
(b) view and use DVS Results itself, for the purpose of verifying identity; and
(c) give its Service Clients an Identity Opinion.

6. Restrictions

6.1 A Business User must not:
(a) share, disclose or provide any DVS Result to any third party;
(b) give any other person access to the DVS; or
(c) submit a Transaction on behalf of, or for the purposes of, any other person.

6.2 An IDSP must not:
(a) pass, disclose or provide any DVS Result to a Service Client or any other third party;
(b) give a Service Client access to the DVS; or
(c) give a Service Client anything other than an Identity Opinion in relation to a Transaction.

6.3 The Customer must not use any Identification Information collected for a DVS check, or any DVS Result, for any purpose other than verifying the identity of the individual concerned. In particular, the Customer must not use that information to:
(a) build profiles of, or track, any individual;
(b) offer, sell or advertise goods or services;
(c) help any other person offer, sell, advertise or promote goods or services; or
(d) conduct market research.

6.4 The Customer must not rely on consent obtained for an earlier Transaction, or for any other purpose, as consent for a Transaction.

7. Consent and privacy notices

7.1 The Customer must obtain Express Consent from the individual concerned for every Transaction, before that Transaction is submitted.

7.2 Express Consent must be specific to the verification of the individual's identity using the DVS. It must not be bundled with, or inferred from, consent to any other purpose.

7.3 The Customer's privacy notices and consent statements must clearly state that VeroID acts as the Customer's gateway and Information Match Agent for the DVS check, and that VeroID will receive and transmit the individual's Identification Information for the purpose of the check.

7.4 If the Customer is an IDSP, it must ensure that consent obtained in connection with a Service Client's customer process meets the requirements of this clause 7.

7.5 The Customer must keep records sufficient to show that Express Consent was obtained for each Transaction, and must provide those records to VeroID or the Framework Administrator on request.

7.6 The Customer must comply with all privacy laws that apply to it in collecting, using, holding and disclosing Identification Information.

8. Security and access controls

8.1 The Customer must ensure that only Authorised Personnel access the DVS, DVS Results or Identification Information.

8.2 The Customer must implement and maintain strong access controls over its access to the DVS, including individual user credentials, access limited to what each person needs for their role, and prompt removal of access when it is no longer needed.

8.3 The Customer must regularly review who has access to the DVS and DVS Results, and in any event at least quarterly (at least once every 3 months), and must keep a record of each review.

8.4 The Customer must ensure that all Authorised Personnel are trained, before they are given access and at regular intervals afterwards, on the permitted uses of the DVS, the restrictions in clause 6 (including the limits on sharing DVS Results) and the consent requirements in clause 7.

8.5 The Customer must notify VeroID in writing within 5 business days of becoming aware of any actual or suspected unauthorised access to, or misuse of, the DVS, DVS Results or Identification Information.

9. Records, audit and compliance

9.1 The Customer must complete an annual self-audit and compliance statement for each Participation Agreement, by the time and in the form required by the Framework Administrator, including in any year in which it submits no Transactions. The Customer must give VeroID a copy on request.

9.2 The Customer must be ready for an audit at all times. It must keep accurate records and evidence of its compliance with this Schedule, the Participation Agreement and the DVS Access Policy, in a form that can be retrieved promptly when needed.

9.3 If the Customer is selected for the DVS Independent Audit Program, it must cooperate fully with the independent auditors, including by giving them timely access to relevant records, systems and personnel.

9.4 The Customer must give VeroID or the Framework Administrator any information about its use of the DVS, or its compliance with this Schedule, the Participation Agreement or the DVS Access Policy, that either of them reasonably requests, within 10 business days or any shorter period required by the Framework Administrator.

9.5 The Customer must keep the records referred to in this clause 9 and clause 7.5 for at least 7 years, or any longer period required by law, the Participation Agreement or the DVS Access Policy.

10. Notification of changes

10.1 The Customer must notify the Framework Administrator and VeroID in writing of any proposed change of control of the Customer at least 45 days before the change takes effect.

10.2 The Customer must notify the Framework Administrator and VeroID in writing, within 5 business days (or earlier if required by the Participation Agreement or the DVS Access Policy), of:
(a) any change to its entity name or ABN;
(b) any merger or acquisition involving the Customer; and
(c) any change to its key contacts for the DVS.

10.3 Notices to VeroID under this clause 10 must be sent to support@veroid.com.au, or any other address VeroID notifies to the Customer.

10.4 Notifying VeroID does not satisfy the Customer's obligation to notify the Framework Administrator, and notifying the Framework Administrator does not satisfy the Customer's obligation to notify VeroID.

11. Monitoring, suspension and termination

11.1 The Customer acknowledges that VeroID is required to monitor the users of its DVS gateway on an ongoing basis. VeroID may monitor the Customer's use of the DVS for that purpose, including by reviewing Transaction volumes, patterns and logs, and by requesting information under clause 9.4.

11.2 The Customer acknowledges and agrees that VeroID may notify the Framework Administrator of, and share relevant information with the Framework Administrator about:
(a) the Customer as a new applicant for DVS access;
(b) any change to the Customer's details or circumstances, including any matter referred to in clause 10; and
(c) any actual or suspected non-compliance by the Customer with this Schedule, the Participation Agreement or the DVS Access Policy.

11.3 VeroID may suspend the Customer's access to the DVS, in whole or in part, immediately by notice to the Customer if:
(a) VeroID reasonably believes that the Customer has failed, or is likely to fail, to comply with this Schedule, the Participation Agreement or the DVS Access Policy;
(b) the Framework Administrator directs or requests VeroID to do so; or
(c) VeroID's own access to the DVS is suspended, limited or ended.

11.4 VeroID may end the Customer's access to the DVS, or terminate the Agreement to the extent it relates to the DVS, by notice to the Customer if:
(a) the Customer fails to remedy a non-compliance within 14 days after receiving notice of it from VeroID;
(b) the non-compliance is serious or cannot be remedied; or
(c) the Framework Administrator directs VeroID to do so, or ends the Customer's eligibility to access the DVS.

11.5 VeroID will restore suspended access once it is reasonably satisfied that the cause of the suspension has been resolved and any required approval of the Framework Administrator has been given.

11.6 VeroID is not liable to the Customer for any loss arising from a suspension or termination made in accordance with this clause 11.

12. Precedence and survival

12.1 If there is any inconsistency between this Schedule (or any other part of the Agreement) and the Participation Agreement or the DVS Access Policy, the Participation Agreement and the DVS Access Policy prevail to the extent of the inconsistency, and the Customer must comply with the stricter requirement.

12.2 If there is any inconsistency between this Schedule and any other part of the Agreement in relation to the DVS, this Schedule prevails to the extent of the inconsistency.

12.3 The Customer must comply with the Participation Agreement and the DVS Access Policy as amended from time to time. VeroID may amend this Schedule by giving the Customer at least 30 days notice, or any shorter notice required to reflect a change made or required by the Framework Administrator.

12.4 Clauses 6, 7.5, 7.6, 9, 10, 11.2, 11.6 and 12, and any other provision of this Schedule which by its nature is intended to continue, survive the end of the Customer's access to the DVS and the termination or expiry of the Agreement. This includes the obligation to complete any self-audit and compliance statement for a period in which the Customer had access to the DVS.

26. Contact

For questions about these terms, please contact us at hello@veroid.com.au

One Shot Ventures Pty Ltd trading as VeroID
ABN: 50 690 149 609