Terms of Service

Last updated: 5 October 2026

These Terms govern access to and use of the FlagIQ platform, website, API and trust badge (the "Service") by the organization that registers for it (the "Client") and its authorized users. By accessing the Service you agree to these Terms. Where the Client has signed a separate order form or master agreement with FlagIQ, that agreement prevails over these Terms to the extent of any conflict.

1. The Service

FlagIQ provides software for real-time transaction screening: sanctions and watchlist matching, behavioral monitoring rules, crypto KYT, on-chain tracing and verification, and case management. The Client submits transaction data via the API or interface; the Service screens it and returns dispositions, signals, and investigation tooling.

2. A screening tool — not compliance advice

Screening data is drawn from official and public sources (including OFAC, UN and UK OFSI sanctions lists, public blockchain data, and open attribution datasets). These sources are provided "as is"; FlagIQ synchronizes them on a regular schedule but does not warrant their completeness, accuracy or timeliness, nor that any name or wallet match corresponds to the actual listed person or entity. Match confirmation is the Client's responsibility.

3. Accounts and acceptable use

• The Client is responsible for its users, their credentials, and all activity under its organization. Roles and permissions must be assigned appropriately; access must be removed when personnel leave.
• The Client must keep API keys and webhook signing secrets confidential and rotate them if compromise is suspected.
• The Client may not: use the Service to evade sanctions or facilitate unlawful activity; probe, overload or circumvent security or tenant isolation; scrape, resell, sublicense or redistribute the Service or its datasets; reverse engineer the Service; or use outputs to build a competing screening dataset.
• The Client warrants it has a lawful basis (and any required notices/consents) to submit transaction data — including personal data of its customers — to FlagIQ for screening.

4. Client data

As between the parties, the Client owns the transaction data it submits and the case records derived from it. FlagIQ processes that data only to provide, secure and support the Service, as described in our Privacy Policy, and acts as the Client's processor for it. FlagIQ owns the Service, its software, rule engine, aggregated and de-identified operational statistics, and all intellectual property in the platform. Upon termination the Client may export its data from the Service; FlagIQ will thereafter delete or return it per the Client's instructions, subject to legal retention duties.

5. Trust badge

Active clients may display the FlagIQ trust badge on their own properties using the embed provided in the platform. The badge must link, unmodified, to its FlagIQ verification page and may not be displayed in a misleading way or after termination or suspension of the Service. FlagIQ may revoke a badge token at any time; the badge license ends automatically when the Service ends. The badge indicates that transactions are screened by FlagIQ — it is not an endorsement, guarantee or certification of the Client's business.

6. API and fair use

API access is provided per the documentation in the platform. FlagIQ may apply reasonable rate and volume limits to protect the Service and may update the API with reasonable notice of breaking changes. Webhook submissions must be signed as documented; unsigned or invalid requests are rejected.

7. Fees

Fees, tiers and volumes are as agreed in the applicable order form or plan. Unpaid amounts may result in suspension after notice. Taxes are the Client's responsibility.

8. Warranties and disclaimers

FlagIQ will provide the Service with reasonable skill and care. Except as expressly stated, the Service is provided "as is" and "as available", without warranties of any kind, express or implied, including fitness for a particular purpose, non-infringement, or that the Service will be uninterrupted, error-free, or will identify any or all illicit activity, sanctioned parties or regulatory risks.

9. Limitation of liability

To the maximum extent permitted by law: (a) neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill; and (b) FlagIQ's total aggregate liability arising out of or relating to the Service is limited to the fees paid by the Client for the Service in the twelve months preceding the event giving rise to the claim. Nothing in these Terms excludes liability that cannot be excluded by law. The Client will indemnify FlagIQ against third-party claims arising from the Client's unlawful use of the Service or breach of Section 3 or 4.

10. Term, suspension and termination

These Terms apply while the Client uses the Service. Either party may terminate for material breach not cured within 30 days of notice. FlagIQ may suspend access immediately where necessary to protect the Service, other clients, or to comply with law — including where the Service would be used in violation of sanctions. Sections 2, 4, 8, 9 and 11 survive termination.

11. General

These Terms are governed by the laws of the jurisdiction in which the FlagIQ contracting entity is established, as identified in the applicable order form, and the courts of that jurisdiction have exclusive jurisdiction, unless that order form says otherwise. Failure to enforce a provision is not a waiver; if any provision is unenforceable the remainder stands; the Client may not assign these Terms without consent except to an affiliate or in a bona fide corporate reorganization. We may update these Terms by posting the revised version here and updating the date above; material changes will be notified to clients, and continued use after the effective date constitutes acceptance.

12. Contact

Questions about these Terms: hello@flagiq.io.