Witness terms of use

Effective 9 September 2026.

These are the terms on which Apertrue Ltd provides Witness. They are written to be read. Where a sentence promises something, the software is built to keep it.

1. What Witness is, and what it proves

Witness provides camera enrolment, live-call verification, and evidence a counterparty can check in their own browser. It proves that the video on a call came from a specific enrolled camera on a specific machine belonging to a passport-verified person, and how recently that was checked. When you choose, it also shows your verified name and a proven work address.

It does not claim more than that. It is not a guarantee against every form of deception, and where a check did not run, the page says so rather than filling the gap. Every public description of what Witness proves is held to the same ceiling as the software, and if any of our material ever claims more, tell us and we will treat it as a defect.

2. Accounts

• One account per email address. Sign-in is by passkey or by Google. There are no passwords.
• You are responsible for the devices that hold your passkeys, and for vetoing an identity recovery you did not start. Recoveries are deliberately slow, and we notify the account when one begins so it can be stopped.
• Your account holds nothing cryptographic. Your identity, your devices and your receipts are separable from it by design, which is what lets you delete it cleanly.

3. Plans, trials and payment

• Personal covers one person: your passport identity, your camera on your own devices, receipts kept on your Mac, and the claims you choose to show on a call.
• Workspace, as Solo or Team, covers a team: its operating members, and people outside it whom its coverage units cover, one person for 30 days per unit.
• Enterprise is an annual contract on the same meters, with its own agreement.
• Checking someone else's call is always free and needs no account.
• Prices, in pounds sterling, are shown on the account page and at checkout at the time you subscribe. VAT is added where it applies. We give at least 30 days' notice of a price change to existing subscribers.
• Every new account starts with a 30 day trial, and every workspace starts as a free evaluation with a review after 30 days. Nothing is charged until you agree to a paid plan. Subscriptions are billed through Stripe, monthly or yearly, and can be cancelled from the billing portal at any time; a cancelled plan runs to the end of its paid period.
• If you buy Personal as a consumer, you have 14 days to change your mind. You can cancel within 14 days of subscribing, for any reason, and get your money back. When you subscribe you can ask for Witness to start straight away; if you do and then cancel inside the 14 days, we keep a share of the price for the days you used and refund the rest. To cancel, use the billing portal, or email support@apertrue.photo saying you are cancelling; either is enough, you do not need to give a reason, and you can use the cancellation form below. We refund to the card you paid with within 14 days of hearing from you, and we confirm all of this by email when you subscribe.
• Outside those 14 days, cancelling stops the next payment and your plan runs to the end of the period you have paid for. We do not refund part of a period, except where the law requires it or where we end the service early, in which case we refund the unused part in full. If Witness does not do what these terms say it does, tell us: your rights under consumer law are not affected by anything on this page.
• Solo and Team are for businesses. When you buy one, you confirm that you are buying it for your business. If Witness is for you as an individual, choose Personal.
• If a payment fails, Stripe retries on its schedule. If the subscription ends, the account keeps working for a further 30 days, after which it cannot start verified calls until it subscribes again. Nothing cryptographic is revoked by a billing change: your identity, your enrolment and your saved receipts remain yours.

4. Covered verification

• A workspace may cover a person outside it, so that person's verified calls within one of the workspace's processes are paid for by the workspace. The invitation names the workspace and the process before the person accepts.
• While coverage is active, the workspace receives the receipts of that person's verified calls in that process, and nothing else about their account. The person's calls carry a line naming the workspace.
• Either side can end coverage at any time. The workspace may keep the receipts filed under it for 90 days after it ends, after which we delete them.
• The workspace is responsible for having a lawful reason to ask, and for how it uses what it receives.

5. Workspaces

• A workspace's administrators control its membership, its API keys, who may commit its coverage units, and its billing, and are responsible for who they admit and what those people do with it.
• API keys identify the workspace to the service. Keep them secret; revoke any that may have leaked.
• A workspace with no members dissolves. An administrator who is the only one must hand the role on before deleting their own account.

6. Acceptable use

Do not attempt to enrol a camera you do not control, to defeat or misrepresent the verification of anyone, to present a verification result as something it does not say, or to probe or overload the service. We may suspend or refuse service where we reasonably believe it is needed to protect the integrity of the registry or of other people's verification, and we will say why.

7. Availability and support

• Verification of a saved receipt is self-contained in the checker's browser. Our service being unavailable does not falsify evidence already produced.
• We do not offer a service level agreement on the self-serve plans. Enterprise agreements state their own.
• Support is by email at support@apertrue.photo, and a person answers.

8. Your data

How we handle personal data is set out in the privacy policy, which forms part of these terms. The companies that process data for us are listed on the sub-processors page.

9. Liability

Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be limited by law.

If you use Witness as a consumer, we are responsible for loss or damage you suffer that is a foreseeable result of our breaking these terms or failing to use reasonable care and skill. Loss is foreseeable if it was obvious it would happen, or if we and you both knew it might happen when you subscribed. We are not responsible for loss that was not foreseeable, or for business losses such as loss of profit or of a business opportunity, since as a consumer you use Witness for your own purposes. Nothing here affects your legal rights as a consumer.

If you use Witness for a business, including on Solo, Team or Enterprise, our total liability to you arising from Witness in any twelve month period is limited to the amount you paid us in that period, and we are not liable for loss of profit, loss of business or indirect loss.

Witness is a verification aid; decisions taken on a call remain the decisions of the people on it.

10. Changes and ending

• We may change these terms. Changes that matter are emailed to account holders at least 30 days before they take effect, and the date at the top of this page changes.
• You may end this agreement at any time by cancelling and deleting your account. Leaving is designed to be clean: cancel in the billing portal, delete the account from the account page (which needs your passkey), and uninstall the app and camera extension from your Mac. What remains is the blinded, append-only transparency log, which identifies nobody.
• We may end it, with notice and reasons, for breach of section 6, or if we cease to provide Witness, in which case we will give at least 90 days' notice and keep the export and deletion tools working until the end.

11. Law

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction, without taking away any protection you have as a consumer under the law of where you live.

12. Contact

13. Cancellation form

For consumers cancelling within 14 days (section 3). You do not have to use it: an email saying you are cancelling, or cancelling in the billing portal, is just as good. We also send it with the email confirming your subscription.