Terms of Service

These Terms of Service (“Terms”) govern access to and use of the API products, dashboard, sandbox, and documentation operated by NEXIEL LIMITED (“Nexiel,” “we,” or “us”), together the “Services.” By creating an account, requesting API access, or otherwise using the Services, the organization on whose behalf you act (the “Client”) agrees to these Terms.

1. Definitions

• Services means Nexiel Screen, Nexiel Verify, Nexiel Age, Nexiel Credentials, Nexiel Login, Nexiel Sign, Nexiel Seal, and any other API, dashboard, sandbox, or documentation Nexiel operates, together with any of Nexiel Invoice or Nexiel MiCA once either is generally available.
• Client means the organization that has been approved through Nexiel's KYB process and holds one or more active API keys, or, before that approval, the organization evaluating the Services in sandbox mode.
• End user means a natural person whose data is processed through the Services at the Client's direction, for example someone the Client screens against sanctions/PEP data or asks to verify their identity through an EUDI wallet.
• Sandbox mode means the free, default operating mode of each Service, which returns synthetic data and reaches no real sanctions list, wallet, or credential issuer.
• Production mode means the operating mode, gated on KYB approval and a production API key, in which a Service processes real end-user data.

2. The Services

Nexiel provides EU digital identity verification through the European Digital Identity (EUDI) Wallet, together with sanctions and PEP screening and standing AML decisions built on top of that identity layer where a Client's use case calls for it. Some Services stop at identity or age verification alone, and others chain a compliance screen onto the same verified identity. Each Service is independently callable through its own documented API. The current, accurate status of each Service, including which are live in production and which are sandbox-only pending an external dependency (such as a real Qualified Trust Service Provider relationship, or the EU's own eIDAS PID-Provider trust infrastructure going live), is stated on that Service's own documentation page at nexiel.eu/docs, which controls over any summary given here.

3. Eligibility, onboarding, and KYB

Sandbox mode is available without a business verification step. Production access requires the Client to complete Nexiel's Know Your Business (KYB) process: legal entity verification, a company registration check, mapping of ultimate beneficial owners, and screening of the entity and its relevant persons. Nexiel may decline, delay, or revoke KYB approval, and may suspend production access, for any Client that no longer meets Nexiel's onboarding criteria or that Nexiel reasonably believes is using the Services unlawfully.

4. API keys and account security

API keys are short-lived, rotatable credentials issued to the Client, not to any individual end user. The Client is responsible for safeguarding its own API keys, for every action taken under them, and for revoking a key immediately if it is exposed or an individual with access to it leaves the Client's organization. Nexiel supports multiple active keys per Client and instant revocation for exactly this reason.

5. Client obligations and acceptable use

The Client agrees to:

• Use the Services only for lawful purposes, and only to screen or verify individuals it has a legitimate basis to screen or verify.
• Request from the EUDI wallet, or from any other data source, only the specific claims a given check genuinely needs, consistent with Nexiel's own selective-disclosure design of each Service.
• Never use a POSSIBLE_MATCH screening result as if it were an automatic clear or an automatic confirmation. Nexiel's systems never auto-clear a POSSIBLE_MATCH; the Client's own human review of that result is the Client's responsibility, not Nexiel's.
• Not attempt to circumvent, probe, or degrade the Services' rate limiting, anomaly detection, or authentication mechanisms, and not resell or share a production API key across source IPs or domains outside what Nexiel's access-restriction controls permit for that key.
• Comply with its own obligations as the data controller, obliged entity, or other responsible party under applicable law for the checks it runs, exactly as set out in the Legal disclaimer below.

6. Fees and payment

Sandbox mode is free. Production usage is billed according to the pricing published at nexiel.eu/pricing at the time of use, through Nexiel's payment processor, Stripe. Fees are stated exclusive of VAT and any other applicable tax, which the Client is responsible for in addition to the stated fee where it applies. Nexiel may change published pricing prospectively. A change does not apply retroactively to usage that has already occurred.

No refunds, no cooling-off period. The Client is a business, not a consumer: production access requires KYB approval, and the withdrawal/cooling-off rights the EU Consumer Rights Directive gives to consumers do not apply to a business-to-business contract in the first place. Even setting that aside, the Services are digital and begin performing immediately once used, the exact case EU consumer law itself exempts from any cooling-off right for digital content supplied with the recipient's prior consent. Fees already incurred are non-refundable except where mandatory law requires otherwise. The Client acknowledges this when it subscribes to a paid plan.

8. Data protection

Nexiel's handling of personal data, including retention periods and the encrypted evidence-pack mechanism used for AML-relevant Screen and Verify decisions, is set out in full in the Privacy Policy, which is incorporated into these Terms by reference. Where the Client acts as a controller of personal data it submits to or receives from the Services, and Nexiel processes that data on the Client's behalf, the Data Processing Agreement applies and is incorporated into these Terms by reference. Where the Client is itself the controller for an end user it screens, the Client is responsible for its own lawful basis, notices, and obligations to that end user, independent of Nexiel's own role.

9. Intellectual property

Nexiel retains all rights in the Services, including its matching engine, APIs, documentation, and dashboard. These Terms grant the Client a limited, non-exclusive, non-transferable right to use the Services during the term of its account, for its own internal business purposes. The Client retains all rights in the data it submits to the Services and in the outputs it receives back.

10. Confidentiality

Each party will protect the other's confidential information with the same care it uses for its own confidential information of similar importance, and at least reasonable care, and will use it only to perform under these Terms. This does not restrict either party from disclosing information that is public, was already known to it, or that it is required by law to disclose.

11. Service availability

Real-time status and how to get a binding SLA are described at nexiel.eu/sla, which is incorporated into these Terms by reference. Nexiel does not warrant that the Services will be uninterrupted or error-free.

12. Warranties and disclaimers

Except as expressly stated in these Terms, the Services are provided “as is” and “as available.” To the maximum extent permitted by applicable law, Nexiel disclaims all other warranties, whether express, implied, or statutory, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement. Nothing in this section limits a warranty that cannot lawfully be excluded under Irish or EU law.

13. Limitation of liability

To the maximum extent permitted by applicable law, and except for a party's liability arising from fraud, gross negligence, death or personal injury caused by its negligence, or any other liability that cannot lawfully be limited or excluded: neither party is liable to the other for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill, arising out of or relating to these Terms or the Services. Each party's total aggregate liability arising out of or relating to these Terms is limited to the fees the Client actually paid Nexiel for the Services in the twelve months immediately before the event giving rise to the claim.

14. Indemnification

The Client will indemnify and hold Nexiel harmless from any third-party claim arising from the Client's use of the Services in breach of these Terms, including the Client's own compliance, screening, or verification decisions made using the Services' outputs, except to the extent the claim arises from Nexiel's own breach of these Terms.

15. Term, suspension, and termination

These Terms apply from the Client's first use of the Services and continue until terminated. Either party may terminate for the other party's uncured material breach on 30 days' written notice, or immediately if the other party becomes insolvent. Nexiel may suspend a Client's access immediately, without prior notice, where reasonably necessary to prevent harm to the Services, other clients, or end users, including on genuine evidence of unlawful use, and will notify the Client promptly once it does. Sections that by their nature should survive termination (including the Legal disclaimer, Confidentiality, Limitation of liability, Indemnification, and Governing law sections) survive.

16. Changes to these Terms

Nexiel may update these Terms from time to time. Nexiel will post the updated Terms at this URL with a new effective date. Continued use of the Services after an update takes effect constitutes acceptance of the update. For a material change, Nexiel will make reasonable efforts to notify active Clients directly before the change takes effect.

17. Governing law and jurisdiction

These Terms, and any dispute arising out of or in connection with them, are governed by the laws of Ireland, without regard to its conflict-of-laws principles. The courts of Ireland have exclusive jurisdiction over any such dispute, except that either party may seek interim injunctive relief in any court of competent jurisdiction.

18. General provisions

• Entire agreement. These Terms, together with the Privacy Policy and any order form or enterprise agreement signed by both parties, are the entire agreement between the parties on their subject matter, and supersede any earlier agreement on the same subject.
• Severability. If any provision of these Terms is found unenforceable, the rest remain in effect, and the unenforceable provision will be read to give effect to its intent as closely as lawfully possible.
• Assignment. Neither party may assign these Terms without the other's consent, except to a successor of substantially all of its business, whether by merger, acquisition, or sale of assets.
• Force majeure. Neither party is liable for a failure to perform caused by an event genuinely beyond its reasonable control.
• No waiver. A party's failure to enforce a provision of these Terms is not a waiver of its right to do so later.
• Notices. A legal notice to Nexiel under these Terms should be sent to the contact details below.

19. Contact and company details

Registered company number and office address are shown once this page finishes loading.

For a question about these Terms, contact dpo [at] nexiel [dot] ie.

Effective date: 29 August 2026. See also the legal disclaimer, privacy policy, data processing agreement, and service levels.