Terms & Conditions

UmbrellaID / IDCanopy FlexCo

back

Provider:
IDCanopy FlexCo
Dr. Karl-Lueger-Platz 5, 1010 Vienna, Austria

1. Scope of Services

UmbrellaID is a SaaS platform providing identity, verification and compliance services, including address verification, SMS verification, KYC / KYB checks, photo identification, biometric verification and fraud/risk assessment services.

The platform is provided exclusively to business customers.

2. Contract Formation

By registering an account, accepting these Terms and completing email verification, the Customer enters into a binding agreement with IDCanopy.

The Customer confirms that it acts solely in a business capacity (B2B).

3. Service Model & Credits

UmbrellaID is provided on a prepaid credit-based model.

  • Credits must be purchased in advance
  • Each service usage deducts credits
  • Pricing is based on the current fee schedule
  • Credits are non-refundable unless explicitly agreed otherwise

4. Regulatory Framework & Nature of Services

UmbrellaID is designed for regulated environments and supports compliance with applicable requirements, including GDPR, AMLD, eIDAS, DORA and NIS2.

  • UmbrellaID provides technical services only
  • IDCanopy does not act as a regulated financial institution or authority
  • Compliance responsibility remains with the Customer

5. Customer Responsibilities

  • Defining the purpose of processing
  • Ensuring a valid legal basis
  • Obtaining required consents where needed
  • Ensuring lawful use of identity and verification services
  • Complying with all applicable legal and regulatory requirements

6. Acceptable Use

The Customer must not use the platform for illegal, fraudulent or abusive purposes, process personal data without a lawful basis, circumvent security mechanisms or share credentials with unauthorized parties.

IDCanopy may suspend or terminate access in case of misuse, security risks, legal violations or regulatory requirements.

7. Data Protection & Roles

Where personal data is processed, the Customer acts as Controller and IDCanopy acts as Processor. IDCanopy processes personal data solely on the Customer's documented instructions.

8. Data Processing Agreement

The Data Processing Agreement (DPA) forms an integral part of these Terms. By accepting the Terms, the Customer also agrees to the DPA.

9. Subprocessors

IDCanopy may engage subprocessors, including infrastructure, verification and communication providers. Subprocessors are contractually bound to GDPR-compliant obligations and IDCanopy remains responsible for their performance.

10. Storage & Retention

Data is stored within the EU/EEA. Retention periods are determined by customer instructions as well as compliance, audit and legal obligations.

11. Availability & Service Changes

The platform is provided on an “as is” and “as available” basis. IDCanopy does not guarantee uninterrupted availability or error-free operation. Maintenance, updates and feature changes may occur.

12. Security & Credentials

The Customer is responsible for safeguarding its login credentials and API keys and for all activities carried out under its account. Suspected security incidents must be reported without delay.

13. Intellectual Property

All rights in UmbrellaID remain with IDCanopy. No ownership rights in the platform are transferred to the Customer.

14. Liability

To the maximum extent permitted by law, IDCanopy is not liable for indirect or consequential damages, loss of profit, revenue or data. Total liability is limited to the fees paid during the six months preceding the claim.

15. Suspension & Termination

IDCanopy may immediately suspend or terminate access if the Customer breaches these Terms, misuse or security risks are identified, or this is required by law.

16. Changes to Terms

IDCanopy may update these Terms from time to time. Material changes will be communicated appropriately. Continued use constitutes acceptance.

17. Governing Law & Jurisdiction

These Terms are governed by Austrian law. Exclusive jurisdiction is Vienna, Austria.

18. Final Provisions

If any provision is invalid, the remaining provisions remain unaffected. Electronic communication is sufficient for notices.