Atum Developer Terms

These terms are an agreement between ATUM, Inc., a Delaware corporation ("Atum", "we"), and the company or person that uses the Atum Verify API, the Atum SDK or the Atum developer portal ("you"). If you accept them for a company, you confirm that you can bind it. A signed order form or pilot agreement with Atum overrides these terms where they differ.

1. What you get

  • Verify API. It checks a passport presentation and returns:
    • whether the presentation and the agent's permission are valid;
    • a passport ID that only you receive (a "pairwise ID");
    • as they become available: whether the passport is alive, its trust level and history age.
  • SDK. The SDK is licensed under Apache 2.0. These terms cover your use of the API that it calls.
  • API keys. Keep them secret. You are responsible for all use of your keys.

During early access, the API is provided as a beta. It may change, and we may set rate limits.

2. How you may use it

You may use Atum to detect whether a real person is behind an account or agent, and to limit how many times one passport or its agents receive something from you, such as:

  • free credits, trials, rewards, airdrops or votes;
  • API requests, including payments over x402.

You must not:

  • try to learn who a passport holder is, or link pairwise IDs with those of other services, your own data or data brokers to find out who people are;
  • deny people essential services, such as housing, employment, credit, insurance, healthcare or government benefits, solely based on an Atum result;
  • treat an Atum result as proof of identity, age or citizenship;
  • resell or expose the API, or build a competing service from its results;
  • cache results longer than needed for the decision, or longer than 30 days;
  • overload, reverse engineer or test the security of the API without our written permission;
  • use Atum in breach of the law, including privacy, anti-discrimination and consumer protection laws.

3. Your users

  • Tell them. Tell your users that you use Atum to check that a real person is behind an account or agent, and link to the Atum Privacy Policy in your own privacy notice.
  • Your decisions. You decide what to do with an Atum result, and you are responsible for those decisions and for how you treat your users.
  • Respond to them. Give people a way to contact you if they believe a decision was wrong.

4. Data protection

You and Atum each act as an independent controller of the personal data each of you processes. If you need a data processing agreement, for example under the GDPR, write to hi@atum.digital and we will sign our standard DPA with Standard Contractual Clauses. We process the data described in the Atum Privacy Policy. We don't sell results or use your data to serve ads.

5. Fees

Early access is free unless an order form says otherwise. When we introduce prices, we will give you at least 30 days' notice. Fees exclude taxes and are due within 30 days of the invoice.

6. Confidentiality

Each side keeps the other's non-public information confidential and uses it only for this agreement, except where it is already public, independently developed, or required by law to be disclosed.

7. Publicity

We may name you as a user of Atum only with your written permission. You may say that you use Atum.

8. Warranties and disclaimers

Each side confirms that it can enter into these terms. Beyond that, the API and SDK are provided "as is". Atum is a probabilistic signal: it reduces abuse but does not catch every fake account or farm, and it may not accept every real person. To the extent the law allows, we disclaim all implied warranties.

9. Liability

Neither side is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits or revenue. Each side's total liability is limited to the greater of the fees you paid in the 12 months before the claim and US $1,000. These limits do not apply to breaches of confidentiality, misuse of the API, or the indemnity in section 10.

10. Indemnity

You will defend Atum against third-party claims arising from your use of Atum in breach of these terms or the law, or from decisions you make about your users, and pay the resulting costs and damages.

11. Term and ending

These terms run while you use Atum. Either side may end them with 30 days' written notice, and we may suspend access right away for misuse, non-payment or security risks. When they end, stop using the API and delete cached results.

12. Law

These terms are governed by the laws of the State of Delaware. Disputes go to the state or federal courts in Delaware.

13. General

  • Changes. We may update these terms with 30 days' notice for material changes.
  • Whole agreement. These terms, any order form and the Privacy Policy are the whole agreement.
  • Assignment. Neither side may transfer these terms without consent, except in a merger or acquisition.

14. Contact

ATUM, Inc., a Delaware corporation
hi@atum.digital