Terms of Use
Effective date: February 2, 2026 · Last updated: May 30, 2026
See what changed in this document →
Service Description
VerityRecord generates cryptographic hashes and timestamps for the files and links you upload. These records can be used to prove that content existed at a specific point in time. The service does not provide legal advice or guarantee admissibility in court.
Acceptable Use
- Uploading illegal content is prohibited
- Attempting to circumvent security measures or rate limits is prohibited
- You may only seal content you are authorized to record or that is in the public domain; sealing third-party communications or personal data without lawful basis is prohibited
- You are responsible for the content you upload
- You are responsible for maintaining the security of your account
- Automated or bulk access requires prior authorization
Content Authorization & Third-Party Consent
You may only seal content that you are authorized to record or that is in the public domain. You are solely responsible for ensuring you have the legal right to capture, archive, or seal any content you submit, including content involving third parties.
VerityRecord does not assess or determine the lawful basis for your captures. Sealing third-party communications, private messages, or personal data without consent may violate applicable law in your jurisdiction, including but not limited to:
- United States — Wiretap Act (18 U.S.C. § 2511) and the Electronic Communications Privacy Act (ECPA): one-party or two-party consent rules vary by state.
- European Union — GDPR (EU 2016/679) Article 6: a lawful basis (consent, legitimate interest, legal obligation) is required to process personal data.
- United Kingdom — Computer Misuse Act 1990: unauthorized access to or interception of communications may be unlawful.
- Australia — Privacy Act 1988 and state-level surveillance acts govern personal information and recorded communications.
- Turkey — TCK Article 134 (Right to Privacy) and KVKK (Law No. 6698): processing personal data without lawful basis may incur civil and criminal liability.
Australia is included alongside the United States and the United Kingdom to provide coverage across Anglo-American legal systems and the global OSINT and journalism communities. This list is illustrative, not exhaustive. Similar frameworks apply in most jurisdictions worldwide. You should consult qualified legal counsel for advice specific to your situation. VerityRecord disclaims liability for unauthorized captures and reserves the right to suspend accounts where misuse is reported and substantiated.
Encryption and Liability
The password you use for encrypted bags is held solely by you. Due to our zero-knowledge architecture, we cannot restore access to your data if you forget your password. This is by design and is not an error.
Service Availability
We aim to provide uninterrupted service but do not guarantee continuous access. Scheduled maintenance will be announced in advance. In the event of unexpected outages, you can check the system status page for updates.
Intellectual Property
You retain all rights to the content you upload. VerityRecord claims no rights over your content. The service itself (software, design, trademarks) belongs to VerityRecord.
Limitation of Liability
VerityRecord provides only a technical timestamping and document verification service. No legal advice is given. We shall not be held liable for any direct or indirect damages arising from the use of the service.
Changes to These Terms
We may update these terms with prior notice. You will be notified at your registered email address of any significant changes. Your continued use of the service constitutes acceptance of the updated terms.
Technical Standards
VerityRecord sealing process relies on the following internationally recognized cryptographic standards:
- SHA-3 (SHA3-256) — NIST FIPS 202 standard hash function used for computing unique file fingerprints
- Merkle Tree — Binary hash tree structure enabling efficient integrity verification of multiple files within a single seal
- RFC 3161 Trusted Timestamping — Independent Time Stamp Authorities (TSA) provide cryptographic proof of the exact time a seal was created. TSA providers: FreeTSA.org, DigiCert, Sectigo
- AES-256-GCM — Authenticated encryption standard used for client-side bag encryption (zero-knowledge architecture)
These standards are widely accepted in legal and forensic contexts and allow any third party to independently verify the integrity and timestamp of sealed documents without relying on VerityRecord.
Legal Compliance
VerityRecord is designed to comply with the following regulations:
- GDPR (EU 2016/679) — General Data Protection Regulation: data minimization, right to access, portability, and erasure
- eIDAS (EU 910/2014) — Electronic Identification and Trust Services: framework for electronic timestamps and seals
VerityRecord uses RFC 3161 electronic time stamps, which are recognized as admissible evidence under eIDAS (EU 910/2014, Article 41) and comparable international frameworks. Each time stamp binds the sealed content to a specific date and time so that any subsequent modification can be detected.
Service Provider
VerityRecord is operated by:
Age Requirement
You must be at least 18 years of age to create an account and use VerityRecord. By registering, you confirm that you meet this age requirement. If you are under 18, you may only use the service under the supervision and with the consent of a parent or legal guardian who agrees to be bound by these terms.
Governing Law & Jurisdiction
These Terms of Use are governed by and construed in accordance with the laws of the State of Delaware, United States. Any disputes arising out of or in connection with these terms shall be submitted to the exclusive jurisdiction of the courts of New Castle County, Delaware, United States. This clause does not affect mandatory consumer protection rights that may apply under your local law.
See also: Privacy Policy · Data Deletion