Plain-language summary, not part of the agreement: you pay for signed assets, we run the service and keep your evidence intact, verification stays free for everyone, and either side can leave with 30 days notice. Your content stays yours.
These terms govern use of the PROVENA platform operated by PROVENA B.V., registered in Amsterdam under KvK 92847113 ("Provena", "we"). They apply to the customer entity that creates an account or signs an order form ("you"). Where an order form conflicts with these terms, the order form prevails.
The public verification tool is available without an account. Using it means accepting sections 6, 8 and 9 only.
Provena marks, signs and records digital assets, and verifies assets against the C2PA trust list and the EU trusted list. We provide the interfaces described in your plan, the signing identities you configure and the compliance reports the platform generates.
We do not warrant that a verdict establishes the truth of any content, nor that the absence of evidence proves human authorship. Verdict codes are documented publicly and will not change meaning within a major API version.
You retain all rights in the assets you submit. We process them only to perform the service. In Cloud deployments asset bytes are handled in memory and discarded after processing; what persists is the manifest, the hash and the ledger entry.
Where you hold signing keys in your own KMS, we never receive private key material. Where we hold keys on your behalf, they are used solely for identities you configured and are destroyed 30 days after termination.
Fees are stated on the pricing page or in your order form, exclusive of VAT. A signed asset is one output file leaving your pipeline with a manifest, a watermark or both; re-signing the same asset id after an edit counts once per calendar month.
Exceeding a quota does not stop signing. Overage is billed per thousand signed assets at your plan rate, and the invoice states the ledger sequence range it covers. Verification never counts against a quota.
Cloud signing and verification target 99.9% monthly availability, measured excluding announced maintenance. If we miss it, you may claim service credits of 10% of the monthly fee per full percentage point below target, up to 50%. Credits are the sole remedy for unavailability.
Self-hosted deployments carry a support response SLA rather than an availability SLA, since we do not operate the infrastructure.
You may not use the service to misrepresent provenance, to sign content on behalf of an identity you do not control, to attempt to strip or forge marks belonging to others, or to overload the public verification tool. Automated verification at scale requires an API key.
Either party may terminate for convenience with 30 days written notice, effective at the end of the billing period. On termination you may export your full ledger and all manifests for 90 days, in the documented format, at no charge. We delete remaining data after that period unless law requires retention.
Each party's aggregate liability is limited to the fees paid in the twelve months preceding the claim, except for death or personal injury, wilful misconduct, or breach of confidentiality obligations. Neither party is liable for indirect or consequential loss, including regulatory fines imposed on you.
Nothing in these terms makes Provena responsible for your compliance with Article 50 or any other obligation. We provide evidence infrastructure; the obligation remains yours.
We announce material changes 30 days in advance by email and on this page, with the version number incremented. Continuing to use the service after the effective date accepts the new version. Dutch law applies and the courts of Amsterdam have exclusive jurisdiction, without prejudice to mandatory consumer or public procurement rules.