Version: 2026-08-29-draft.

Acceptable Use Policy

This Policy applies to every Developer/Client account and every use of the public search or hosted verification tools. Violating it is grounds for immediate suspension, and — where it indicates fraud or identity theft — referral to the relevant authorities.

1. You may only check identities you have a lawful basis to check

Do not submit a NIN, BVN, or any other identifier belonging to someone else unless you have their consent, a legitimate business relationship that justifies the check (e.g. a landlord verifying a prospective tenant, a platform verifying a counterparty), or another lawful basis. Do not use the Service to validate identities you do not control in order to test whether stolen or purchased identity data is "live" or usable elsewhere.

2. Credential handling

• api_secret must be held server-side only. Never embed it in a mobile app

binary, browser JavaScript, or any other client-distributable artifact.

• Do not share your credentials with parties outside your own organization.
• Rotate credentials immediately if you suspect they have been exposed.

3. No bulk or automated abuse

• No bulk scraping, enumeration, or systematic querying of identifiers you

don't already have a specific, individual reason to check.

• No use of the public search tool or hosted verification flow via

automation/bots to bypass the per-account quota or rate limits.

• No attempting to reconstruct or enumerate the underlying government

databases the Service's providers query.

4. No resale without authorization

Do not resell, white-label, or provide unrestricted downstream access to verification results without U-verify's prior written approval — production access review exists specifically to understand and authorize your intended use case.

5. Reporting abuse

If you believe your identity has been checked without your consent, or you've found a security issue, contact the support address in the developer docs or mobile app.