TERMS OF USE AND DATA PROCESSING — VERISIGNUM Version 8 · in effect since September 7, 2026 This contract applies to customers subscribing from the United States (US region). Customers subscribing from Brazil are subject to `termos-v8-br.md`, with pricing in Brazilian reais. 1. WHAT VERISIGNUM DOES Verisignum is a digital provenance service with two modules: SHIELD — signs your file with a certificate of authenticity issued in your account's name. LENS — verifies whether a file carries a certificate of authenticity and, separately, runs a statistical screening for indicators of AI generation. 2. WHAT IS PROOF AND WHAT IS AN INDICATOR This distinction is the foundation of the service, not a formality. Cryptographically verifiable: the existence of the certificate of authenticity, its integrity, and the identity of the signer. Anyone with a compatible verifier can independently confirm this without relying on us. Not proof: AI-generation analysis. It is a statistical classifier, subject to false positives and false negatives, and does not constitute forensic expertise. A "no AI indicators" result does not prove human origin; a "AI indicators present" result does not prove fraud or automated generation. AI analysis may be unavailable. In that case, the report states this explicitly and makes no claim about the file's origin. 3. PROCESSING OF YOUR FILES 3.1 SHIELD (signing) The file submitted for signing is processed in a request-specific temporary directory, deleted when the request ends — including in case of error. The file does not leave our infrastructure and is not retained. 3.2 LENS — seal verification Certificate-of-authenticity verification runs entirely on our infrastructure, with the same guarantees as 3.1. 3.3 LENS — AI analysis: your file leaves our infrastructure To run AI-generation screening, the submitted file's content is transmitted to a subprocessor — a third-party vendor specialized in synthetic content classification — which processes it on its own systems. Purpose: statistical classification of AI-generated content. Data transmitted: the full content of the file submitted to LENS. Subprocessor retention: up to 14 days. Processing location: United States. This retention period is set by the subprocessor, not by your submission date. While it applies, the file submitted to LENS remains with that third party for the stated period, even after being deleted from our systems. The identity of this subprocessor is available upon request at contato@verisignumdigital.com. There is currently no option to disable AI analysis alone while keeping seal verification. Submitting a file to LENS implies this transmission. If you do not want a file transmitted, do not submit it to LENS — SHIELD (Section 3.1) transmits nothing to third parties. Video and audio files are analyzed in segments; beyond a duration threshold, analysis covers only the beginning of the file. The report always states how much was actually analyzed. 3.4 What is recorded For each operation, we retain: your account identifier, file name, module used, date, result, the SHA-256 hash of the content, and the serial number of the certificate used. We do not retain the file's content. The hash exists so the record can prove which file the operation was performed on, without keeping the file itself. 4. KEYS AND CERTIFICATES Your account's signing identity is generated by us, or provided by you (your own certificate). The private key is stored encrypted. Each signed file carries its own embedded certificate. 5. PRICING AND CONSUMPTION 5.1 The unit is the credit 1 image .......................... 1 credit 1 second of video ................ 1 credit 1 second of audio ................ 1 credit 1 signature (SHIELD) ............. 1 credit Fractions of a second count as a full second: an 88.7-second video consumes 89 credits. One minute of video consumes 60 credits. This is the unit because it's how processing is billed to us. Charging "per file" would make a photograph and a ten-minute video cost the same, when the latter consumes 600 times more. 5.2 What each plan includes Plan Monthly fee Included credits Overage credit Creator $29/month 1,500 $0.015 Professional $149/month 7,500 $0.012 Enterprise $499/month 25,000 $0.010833 Values are charged in U.S. dollars (USD). In minutes of video, the overage credit is equivalent to $0.90 (Creator), $0.72 (Professional), and $0.65 (Enterprise) per minute. 5.3 What happens when the included quota runs out The service is not interrupted. Usage beyond the included credits is totaled and billed at the end of the period, on the same invoice as the monthly fee, at the table above. If there's no overage in a given month, that invoice line shows $0.00. We don't interrupt service because automated usage (the agent's watched folder) runs unattended, and stopping mid-batch would turn a billing matter into lost work for you. 5.4 What is not billed twice A single LENS verification is one operation, even when a long file requires multiple internal analysis passes. Credit consumption is based on the file's duration, not the number of underlying calls we make. Resubmissions of the same request with the same Idempotency-Key header are not billed again. Without that header, each resubmission is a new operation. An analysis that runs but produces no verdict (see Section 2) is still billed: the file was processed. The report always states when this happens. An analysis that does not run at all — because the detector rejected the file, or due to unavailability on our end — does not consume duration-based credits. In those cases, the check counts as 1 credit, for the cryptographic seal verification, which runs regardless. 5.5 Price changes Any change to these values is published as a new version of these terms. You are never charged a new price without first accepting the version that contains it: until acceptance, operations are blocked and no charge at the new rate is made (see Section 10). 6. TRIAL PERIOD The trial period grants limited-time access, free of charge and without a credit card, with a limited credit balance shown in the dashboard. A per-minute request limit applies, which does not apply to paid accounts. Once the trial ends, access to the modules is suspended until a plan is purchased. Your operation history from the trial remains available. 7. AVAILABILITY There is no contracted availability guarantee (SLA). The service is provided as-is, and may be unavailable due to maintenance, infrastructure failure, or unavailability of third parties we depend on. 8. LIMITATION OF LIABILITY The report issued by LENS combines a cryptographic verification (Section 2, first paragraph) and a statistical screening (Section 2, second paragraph). Verisignum is not responsible for decisions made based on the statistical screening alone, and does not present that screening as forensic expertise or proof. Use of the report in an evidentiary, administrative, or judicial context is the sole responsibility of the person using it, who is responsible for assessing its adequacy and, if applicable, submitting it to independent expert review. Verisignum is not responsible for third-party unavailability, for decisions made by external certificate-of-authenticity verifiers regarding trust in the certificate authority used, or for misuse of your account credentials by third parties. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. Verisignum's total and aggregate liability to you arising from these terms or use of the platform, on any basis (contract, tort, or otherwise), is limited to the amount actually paid by you to Verisignum in the 12 (twelve) months preceding the event giving rise to the claim. In no event will Verisignum be liable for lost profits, data loss, business loss, reputational harm, or any indirect, incidental, or consequential damages, even if advised of the possibility of such damages. No limitation in this section applies to damages caused by Verisignum's willful misconduct or gross negligence, nor does it exclude liability that applicable law does not permit to be excluded or limited. 9. GOVERNING LAW AND FORUM These Terms are governed by the laws of the Federative Republic of Brazil, including the General Data Protection Law (Lei Geral de Proteção de Dados — Law No. 13,709/2018), regardless of your country of residence or domicile. The courts of the Judicial District (comarca) of Goiânia, State of Goiás, Brazil, have exclusive jurisdiction to resolve any dispute arising from these Terms. This means: Verisignum operates as a single Brazilian legal entity worldwide, without a local U.S. subsidiary. All customers, regardless of country, are subject to the same governing law and forum. This is a deliberate business choice — the same model used by other international platforms that sell remotely without incorporating locally in every country they serve. 10. CHANGES TO THESE TERMS These terms are versioned. When a new version is published, access to the modules requires acceptance of that version — operations remain blocked until then. You retain the ability to view your history and export your reports. 11. CONTACT Questions about these terms, about how your data is processed, or requests related to your rights as a data subject: contato@verisignumdigital.com