Last updated: 27 June 2026
These Terms of Use ("Terms") govern your access to and use of Veri5 Passport, a single sign-on and identity service operated by Hefes LLC ("Hefes", "we", "us", or "our"). Veri5 Passport lets you create one account and use it to sign in to applications within the Veri5 ecosystem. By creating an account, signing in, or otherwise using the service, you agree to these Terms. If you do not agree, do not use the service.
Veri5 Passport is an identity provider. It is the account and sign-in layer for the Veri5 ecosystem and uses the OAuth2 and OpenID Connect protocols to let connected applications authenticate you and receive identity information you have agreed to share. Veri5 Passport is not itself the notarization service or any other ecosystem application; it is the identity service that those applications rely on for sign-in.
You must be at least 18 years old, or the age of majority in your jurisdiction, and legally able to enter into a binding agreement. To create an account you provide your name, email address, and a password, and optionally a mobile number. You may instead choose to sign in using your WeChat (Veri5) identity. We verify your email address and, where provided, your mobile number using a one-time code. You agree that all information you provide is accurate and that you will keep it current.
When you register, the system issues you a managed account secured by a recovery code — a private credential that controls your account. You may reveal this recovery code, and you must store your own copy of it somewhere safe. We hold your recovery code in encrypted form to support recovery, but you are responsible for safeguarding your own copy. We strongly recommend you keep it private and never share it with anyone, including persons claiming to be Hefes staff. If you lose both your password and your recovery code, your account may not be recoverable, and Hefes cannot restore access or recover any credentials held in it.
The service supports several levels of identity assurance: email-verified, mobile-verified, and real-name verified. Real-name verification (KYC for individuals, KYB for organisations) is required for certain functions, such as organisations that wish to issue credentials to others. To complete real-name verification you may be asked to submit identity or registration documents. We collect and store these documents in encrypted form and use them only for verification, fraud prevention, and legal compliance. You represent that any documents you submit are genuine, lawfully obtained, and relate to you or your organisation.
When you sign in to a connected application through Veri5 Passport, we share agreed identity claims — for example your name, account number, or verification level — with that application only after you grant consent. You can review what each application requests before authorising it, and you can review and revoke the applications you have authorised. You are responsible for the activity you conduct within connected applications under your account.
The service includes a "Vault" that aggregates a view of the credentials and assets you hold across ecosystem applications. The Vault is a convenience feature for viewing what is associated with your account; the underlying credentials and assets are governed by the terms of the applications that issued them.
You agree not to use the service to:
We may suspend or terminate accounts that violate these Terms and, where required by law, report violations to the relevant authorities.
You are responsible for maintaining the confidentiality of your password and recovery code and for all activity that occurs under your account. You agree to notify us promptly at [email protected] of any unauthorized use of your account or any other breach of security.
You may stop using the service and request closure of your account at any time. We may suspend or terminate your access if you breach these Terms, if required by law, or to protect the service or other users. On termination, your right to use the service ceases; provisions that by their nature should survive — including ownership, disclaimers, limitation of liability, and indemnification — will survive.
The service is provided on an "as is" and "as available" basis without warranties of any kind, whether express, implied, or statutory, including any implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or secure, or that any defect will be corrected.
To the maximum extent permitted by law, Hefes and its affiliates will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, data, goodwill, or access resulting from a lost password or recovery code. Our total aggregate liability arising out of or relating to the service will not exceed the greater of the amounts you paid us for the service in the twelve months before the event giving rise to the claim, or one hundred US dollars (USD 100).
You agree to indemnify and hold harmless Hefes, its affiliates, and their officers, employees, and agents from any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your use of the service, your violation of these Terms, or your infringement of any rights of a third party.
We may modify the service or these Terms from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice. Your continued use of the service after changes take effect constitutes acceptance of the revised Terms.
These Terms are governed by the laws applicable to Hefes LLC, without regard to conflict-of-law rules, and you agree to the exclusive jurisdiction of the competent courts of that location. For questions about these Terms, contact us at [email protected].