Terms of Service

1. Who we are

Signcert is operated by Aleksandar Mijić, an independent sole proprietor based in Berlin, Germany ("we", "us", "our"). These Terms govern your use of the Signcert certificate integrity platform and related services (the "Service").

2. Acceptance and eligibility

By creating an account or using the Service you confirm that you are at least 16 years old (or the age of digital consent in your country, if higher) and that you have authority to bind any organisation on whose behalf you use the Service. If you do not agree to these Terms, do not use the Service.

3. The Service

Signcert seals the certificates that certification bodies issue to it with a digital seal tied to the issuing certification body and registered with an independent timestamp authority, and lets any recipient verify a certificate's authenticity and integrity. The Service is provided on an as-is basis and may be modified, suspended, or discontinued in whole or in part at any time, with reasonable notice where practicable.

4. Account and access

You are responsible for maintaining the confidentiality of your credentials and for all activity under your account. You must notify us promptly at contact@signcert.io of any suspected unauthorised access. We may require multi-factor authentication and may revoke sessions to protect the Service.

5. Acceptable use

You agree not to:

• Use the Service in violation of applicable laws, including data protection, anti-fraud, sanctions, and export-control laws.
• Submit, seal, or share documents you have no right to seal or share, or that infringe the rights of any third party.
• Misrepresent the origin, validity, or status of a sealed certificate, or attempt to forge, tamper with, alter, or circumvent a seal or a verification result.
• Reverse-engineer, scrape, resell, sublicense, or build a competing service from the Service or its outputs.
• Probe, attack, or interfere with the Service, attempt to circumvent rate limits or access controls, or upload malicious code.

We may suspend or terminate access for breach without prior notice where necessary to protect the Service or third parties.

6. Privacy and data protection

Our processing of personal data is described in our Privacy Policy, which forms part of these Terms. Where you use the Service to seal certificates containing personal data of your own certified clients or their representatives, you act as the controller of that data and we act as your processor; in that case, our Data Processing Addendum (DPA) applies and is available on request from contact@signcert.io. You are responsible for having a valid lawful basis under Articles 6 and, where relevant, 9 and 10 GDPR before sending personal data to the Service.

7. Customer data

You retain all rights in the certificates and other data you submit to the Service ("Customer Data"). You grant us a limited licence to host, process, and transmit Customer Data solely to provide and improve the Service, secure it, and comply with law. We will not sell Customer Data.

8. Seals and verification results

A Signcert seal confirms that a document matches the fingerprint recorded at the moment of sealing and the issue date registered with an independent timestamp authority. A verification result therefore speaks only to the integrity and origin of the sealed document — that it is unchanged and came from the identified issuer. It is not a statement on the underlying certification decision, the accuracy of the issuer's content, or the regulatory validity of the certificate, all of which remain the responsibility of the issuing certification body. You are responsible for the accuracy of the data you submit for sealing.

9. Fees

If your plan is paid, fees, billing cycle, and tax handling are described at sign-up or in your order form. Fees are non-refundable except where required by law. We may change fees on at least 30 days' notice; continued use after the effective date constitutes acceptance.

10. Intellectual property

The Service, its content, software, and trademarks are owned by us or our licensors. We grant you a limited, revocable, non-exclusive, non-transferable licence to use the Service for its intended business purpose during your subscription. No other rights are granted by implication.

11. Disclaimers

To the maximum extent permitted by applicable law, the Service is provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted operation. Nothing in these Terms excludes or limits any warranty, right, or remedy that cannot be excluded or limited under applicable consumer-protection law.

12. Limitation of liability

To the maximum extent permitted by applicable law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, goodwill, or data, even if advised of the possibility. Our total aggregate liability arising out of or relating to these Terms or the Service will not exceed the greater of (a) the fees you paid for the Service in the twelve months immediately preceding the event giving rise to the claim, or (b) one hundred euros (€100). Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, fraudulent misrepresentation, or any other liability that cannot be limited under applicable law.

13. Indemnification

You will defend and indemnify us against third-party claims arising from your Customer Data, your use of the Service in breach of these Terms, or your violation of applicable law, including data-protection law.

14. Term and termination

You may stop using the Service and close your account at any time. We may suspend or terminate access for material breach of these Terms, for risk to the Service or third parties, or where required by law. On termination, the licences granted in sections 7 and 10 cease and you must stop using the Service. You may export your Customer Data for 30 days after termination, after which we may delete it in accordance with our Privacy Policy. Seals already registered with the independent timestamp authority may remain independently verifiable.

15. Changes to the Terms

We may update these Terms. For material changes we will give you at least 30 days' notice in-app or by email before the changes take effect. If you do not accept the changes, you may stop using the Service before the effective date; continued use after the effective date constitutes acceptance.

16. Governing law and dispute resolution

These Terms are governed by the laws of Germany, without regard to conflict of laws principles, and to the extent applicable by mandatory European Union law. The courts of Berlin, Germany have exclusive jurisdiction, except that consumers domiciled in the EU may also bring proceedings in their country of residence and benefit from the protections of mandatory local law. The European Commission's Online Dispute Resolution platform was discontinued on 20 July 2025; EU consumers seeking out-of-court dispute resolution may instead use the European Commission's Consumer Redress resources at consumer-redress.ec.europa.eu.

17. Miscellaneous

If any provision is held unenforceable, the remainder will remain in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our prior written consent; we may assign them in connection with a corporate transaction. These Terms, together with the Privacy Policy and any DPA or order form, constitute the entire agreement between you and us regarding the Service.

18. Contact

Questions about these Terms: contact@signcert.io.