1. Definitions

• "Account" means a registered user account on the Service.

• "Admin" means a user with administrative privileges, including managing seats, roles, and permissions.

• "Audit Trail" means the append-only, tamper-evident log of all actions related to a Document, including uploads, views, signatures, and verifications, secured by cryptographic hashing.

• "Document" means any file or data uploaded to the Service, including but not limited to text, images, PDFs, or other formats.

• "Evidence Bundle" means a downloadable package containing the original Document, SHA-256 hash, Audit Trail, WORM receipt, and any Merkle proof or external anchoring data.

• "External Anchoring" means optional linking of Document proofs to a third-party timestamp authority (TSA) or blockchain for enhanced verifiability.

• "Immutable" or "Immutability" means once committed, a Document cannot be altered, deleted, or overwritten; it is stored in Write-Once-Read-Many (WORM) storage with SHA-256 hashing.

• "User Content" means any Documents, data, or information uploaded, shared, or processed by you or on your behalf through the Service.

• "You" or "User" means the individual or entity accessing or using the Service, including Admins, Uploaders, Viewers, or other roles

2. Eligibility and Account Registration

You must be at least 18 years old or the age of majority in your jurisdiction to create an Account and use the Service. By registering, you represent that you meet this requirement and have the authority to bind any entity you represent.

To use the Service, you must create an Account via self-onboarding or admin invitation. Registration requires providing accurate information, including email, SMS OTP, and ID verification for certain roles. You are responsible for maintaining the confidentiality of your Account credentials, including any private keys issued. All activities under your Account are your responsibility.

Admins control seats and keys based on subscription plans (e.g., Professional: 2 extra seats; Business: 7 extra seats). Admins may revoke access, re-issue keys, or change seats, but cannot delete Immutable Documents.

3. Description of the Service

DocuProof is an Immutable document platform providing cryptographic proof of a Document's existence and integrity at ingestion, using SHA-256 hashing, WORM storage, and an append-only Audit Trail. The Service includes:

• Core Features: Document upload with hashing and immutability enforcement; role-based access control (RBAC) for Admins, Uploaders, and Viewers; plan-based limits (e.g., documents per month, file size).

• Enhancements: One-click Evidence Bundle export; private Hyperledger Explorer for scoped queries; multi-signature workflows (M-of-N thresholds, sequential/parallel signing with PKI/asymmetric cryptography); sign & return workflows; secure inter-account Document transfer for review/signing; public verification portal (no login required for hash/timestamp/audit summary); webhook notifications; admin-configurable permissions; subscription billing via Stripe; API rate limiting.

• Immutability Guarantee: Once committed, Documents are Immutable. No deletions or alterations are possible, even by Admins or us. Proof of existence persists via SHA-256 hash and Audit Trail. External Anchoring (TSA or blockchain) is optional.

• Verification: Users can verify Document integrity via UI, API, or public portal. The Service does not interpret or alter Document contents, only verifies hashes.

The Service is blockchain-agnostic but uses Hyperledger Fabric for private data collections where applicable. Phase 1 features (core immutability, basic UI) are live; Phase 2 adds new capabilities as described in our documentation.

4. User Responsibilities and User Content

You are solely responsible for:

• The accuracy, legality, completeness, and appropriateness of all User Content, including compliance with applicable laws (e.g., copyright, privacy, data protection).

• Verifying that uploaded Documents are suitable for immutability and your intended use.

• Obtaining all necessary consents, rights, and permissions for User Content, including from third parties.

• Ensuring User Content does not infringe intellectual property rights, contain malware, or violate these Terms.

• Determining the legal validity of any signatures, timestamps, or proofs for your jurisdiction and purpose; DocuProof provides cryptographic evidence but does not guarantee legal enforceability.

• Backing up and retaining your own copies of User Content, as we have no obligation to store or return it beyond Immutability requirements.

By uploading User Content, you grant us a worldwide, non-exclusive, royalty-free license to host, store, process, and display it as necessary to provide the Service, including generating hashes, Audit Trails, and Evidence Bundles. You retain ownership of User Content, subject to Immutability.

Important Notices on Immutability:

• You acknowledge and agree that once a Document is committed, it is Immutable and cannot be changed, deleted, or removed by you, Admins, or us.

• All actions are logged in the Audit Trail, tied to verified identities where applicable.

• We may hide or restrict access to Documents (e.g., "soft-delete" from public view) at our discretion, but the underlying hash and proof of existence remain.

• We do not read, interpret, or assume responsibility for Document contents. DocuProof guarantees only integrity, timestamping at ingestion (not original creation), and auditable history—not authenticity, truthfulness, or legality.

• If the system experiences downtime, Documents remain Immutable; verification relies on stored hashes and data, not live components.