Legal
Terms of service
Last updated 2026-09-01
1. Who these terms are between
These terms apply between Triple Down AB (org. no. 559333-6091, VAT no. SE559333609101, Skeppargatan 55, 114 59 Stockholm, Sweden, "Tessio", "we") and the organisation that opens a Tessio.Cloud account ("you"). If we sign a separate agreement with you, for example a design partner agreement, that agreement wins where they differ.
2. What the service is
Tessio.Cloud is an API and dashboard for age and identity verification built on the EU Digital Identity Wallet. You start a check, the person confirms a claim such as being over 18 in their wallet, and you receive a signed yes or no. The service is designed so that neither you nor we receive identity documents or identity attributes from the person being checked.
3. Early access, stated plainly
Two paths exist and they are at different stages. Checks from the EU age verification app complete in production, and that path needs no access certificate, because its profile puts reader authentication out of scope. Verification against an EU Digital Identity Wallet does require a relying party access certificate, which we applied for on 5 August 2026 and do not yet hold. We do not promise a date for that second path, because the date is not ours to promise.
During early access the service is provided as is, without an availability commitment. We deploy carefully (health gated releases with automatic rollback) and we publish how the platform is run on the security page, but we do not yet offer an SLA.
4. Test mode, and how live access is granted
A new account starts in test mode. A test check is a sandbox: it completes without a wallet, its result is simulated rather than real, and it is free. Every response marks which mode produced it, so a simulated result cannot be mistaken for a verified one. Do not rely on a test result for any decision about a real person.
Live traffic is enabled by us, per organisation. Before we enable it you must confirm the email address on your account, and we must approve the organisation, which we do after we understand what you are building. We can withdraw live access if these terms are breached or an invoice goes unpaid; withdrawing stops new live projects being created and does not switch off an integration that is already running.
5. Your account and keys
You are responsible for what happens under your account and API keys. Keep keys secret; rotate them from the dashboard if you suspect exposure. We store keys only as hashes and cannot recover a lost key, only issue a new one.
6. Acceptable use
Use the service only for lawful age and identity verification of people who interact with your own products. Do not attempt to access other tenants’ data, probe or overload the infrastructure, resell the service without our agreement, or use it to harass, surveil or discriminate. We may suspend accounts that do.
7. Your regulatory responsibility
An age check gives you a cryptographically verified answer to one question. What that answer means for your obligations, under gambling licences, the UK Online Safety Act, the EU Digital Services Act or any other rule, remains your decision and your responsibility. Tessio is a tool in your compliance process, not the process itself.
8. Data protection
For personal data processed in checks we act as your processor under a data processing agreement, available on request from hello@tessio.eu. The privacy policy describes our own processing as controller. The subprocessors page lists the external services involved.
9. Fees and billing
Your plan and its price are the ones shown on the pricing page when you subscribe, unless we have agreed something different in writing, in which case the written agreement wins. Each plan includes a monthly volume of verified checks; checks beyond it are charged at that plan's rate.
You pay only for checks where a wallet presented an attestation and we verified it. Everything else is free. A check that finds no wallet, is declined, times out, or presents an attestation that fails verification is not billed, and test mode is free in every case. The pricing page lists these outcomes in full.
Prices are in euro and exclude VAT. Swedish VAT is added where it applies; for business customers elsewhere in the EU who give us a valid VAT number, the reverse charge applies. We invoice monthly: the subscription for the coming month, and any overage for the month just ended. Invoices are payable within 30 days of issue, after which interest accrues under the Swedish Interest Act (räntelagen).
We can change prices with 30 days notice by email, taking effect at your next billing period. A price change is never applied to a period you have already been invoiced for. If you do not accept it, you can cancel before it takes effect.
10. Intellectual property
We own the service. You own your data and your integration. The verifier library underneath is separately available as open source under Apache-2.0; nothing in these terms limits your rights under that licence.
11. Liability
Neither side is liable to the other for indirect or consequential loss. Our total liability under these terms is capped at the fees you paid us in the twelve months before the claim or, if you have paid nothing, EUR 1,000. Nothing here limits liability that cannot lawfully be limited.
12. Ending it
You can cancel at any time, from the dashboard or by email. Cancellation takes effect at the end of the month you have already paid for, so the service keeps working until then. We do not refund part of a month, and any overage already incurred is still invoiced. You can stop using the service and ask us to close the account at any time.
We can terminate with 30 days notice, or immediately for breach of these terms. On closure we delete your data as described in the privacy policy, and backup copies expire within 14 days.
13. Changes and law
We may update these terms; material changes are announced by email to account holders at least 14 days before they apply. Swedish law governs these terms, and disputes go to the Swedish courts, with the Stockholm District Court (Stockholms tingsrätt) as first instance.
Related: privacy · security · subprocessors · questions to hello@tessio.eu