This Services Schedule is entered into pursuant to and forms part of the Master Partner Agreement (the “Agreement”) between GBG and the Partner. Capitalised terms used in this Services Schedule shall have the meanings given to them in the Master Partner Agreement – Core Terms unless otherwise defined herein. This Services Schedule sets out the specific terms, scope, and conditions applicable to the Services described below.
1.1 In this Service Schedule the following definitions shall apply in addition to those in the Core Terms:
“Additional Terms” means the special terms and conditions relating to particular Datasets and/or aspects of the Services as updated from time to time which are available at https://www.gbgplc.com/en/legal-and-regulatory/legal-additional-terms/idscan-enterprise/;.
"Document Library” means the template documents that the Service is trained to recognise and process as updated from time to time. This shall include all Identity Documents supported within the Service.
“FCRA” means the US Fair Consumer Reporting Act, 15 U.S.C §1681 et seq;
“Forensic Document Checking Services” means the review of an Identity Document by a Forensic Document Examiner and the provision of additional advice and guidance in relation to that Identity Document in accordance with the Professional Services as described on the Product Page. This is an additional Professional Service and may be added as an optional component on the Order Form;
“Forensic Document Examiner” means a person trained to detect signs of forgery in images of Identity Documents
“Identity Document” means a document processed via the Service, which may be used to prove a person’s identity and/or address. For example, a passport, driving licence, national identity card, utility bill or bank statement;
“IDScan Enterprise Permitted Purpose” means the End User’s use of the Service for identity verification and fraud purposes and subject to any restrictions and/or conditions for the use of applicable Datasets/Sources outlined in the Additional Terms
“Preferential Pricing” means any or all Charges for the use of the Software and/or Services that are discounted from GBG’s standard rates, as defined within the Order Form and/or any Special Conditions relating to charges and payment.
"Reseller App" means the mobile application created (or to be created) and/or released (or to be released) by the Partner, which utilises component(s) from the Software, including any new version or updated version of such mobile application.
"Reseller Website" means the web-based application created (or to be created) and/or released (or to be released) by the Partner, which utilises component(s) from the Software, including any new version or updated version of such website.
“Sample Service” if selected on the Order Form, means the additional services that shall be provided in accordance with the terms set out on the Service Page as updated from time to time.
“Service” means the IDscan Enterprise service which comprises of GBG products and Datasets and may include the Standard Support Services and Professional Services and/or Forensic Document Checking Services where selected, the Sample Services, where selected, as described on the Service Page together with any other ancillary service provided by GBG to the Reseller pursuant to this Agreement.
“Service Page” means the dedicated webpage that includes relevant information about the Service, including details regarding, Standard Support Services, and Professional Services, Sample Service, Forensic Document Checking Services available at https://www.gbgplc.com/legal-and-regulatory/products-v6/idscan-enterprise/. Any reference to “Customer” in documents made available on the Service Page shall, for the purposes of this Service Schedule, be construed as a reference to the Partner.
“Standard Pricing” means GBG’s standard Charges for the use of Datasets provided as part of the Software and/or Service as set out in the Order Form and updated by GBG from time to time.
2.1 This Order Form incorporating this Service Schedule s shall become effective on the Contract Start Date and will continue for the Initial Term and shall automatically renew for further Renewal Terms unless terminated earlier in accordance with this Agreement.
2.2 GBG will provide the Standard Support Services outlined in accordance with the terms outlined in the Service Page.
2.3 Where selected on the Order Form, GBG will provide the Professional Services in accordance with the terms outlined in the Service Page.
3.1 Under this Service Schedule, GBG appoints the Partner to act as a Reseller and to be its non-exclusive Partner for the promotion, sale, provision and general support of the Service when bundled and/or integrated with the Partner products to Prospects and End User.
3.2 The Partner is not permitted to promote, sell and support the Services through a third party.
3.3 The Partner shall ensure that each End User enters End User Terms incorporating the Minimum Terms set out in Appendix 1 to this Service Schedule.
3.4 The Partner will comply with clause 4 regarding End Users.
3.5 The Partner shall not modify or omit any part of the Minimum Terms without GBG’s prior written consent.
3.6 The Partner shall contractually require End Users to only use the Services for the Permitted Purposes.
4.1 The Partner shall ensure that End Users only use the Services for the IDScan Permitted Purpose.
4.2 The Partner shall take reasonable steps to ensure that End Users comply with the Minimum Terms and shall notify GBG without undue delay upon becoming aware of any breach by an End User.
4.3 Before entering a binding commitment with an End User, the Partner will: a) provide the End User with its own End User Terms reflecting, in substance, the Minimum Terms; and b) ensure those terms clearly identify the GBG Datasets taken by referencing the relevant GBG Dataset ID number to comply with the Additional Terms.
4.4 The Partner acknowledges that GBG may, where reasonable, require the Partner to a) immediately suspend an End User’s access without notice if the End User materially breaches, the Minimum Terms; and b) deactivate any End User account on a pay-as-you-go basis that has been inactive for 12 months or more, and notify the Partner promptly of such action. In these cases, GBG will inform the Partner and provide sufficient details to enable the Partner to carry out the suspension, termination, or deactivation on GBG’s behalf.
4.5 The Partner acknowledges that GBG may need to update the Minimum Terms, including Additional Terms for certain Datasets, to comply with Applicable Laws or Data Supplier requirements. GBG will notify the Partner in writing and require it to update its End User agreements, accordingly, including making any necessary amendments to existing agreements.
4.6 The Partner shall indemnify GBG against all liabilities, costs, expenses, damages, and losses arising from any third-party claim resulting from an End User’s breach or non-compliance with the Minimum Terms.
5.1 The Partner shall comply with the terms of this Agreement, including where relevant the Additional Terms. Where the Partner has selected the Sample Service, the additional conditions set out in the Sample Service will apply.
5.2 The Partner agrees that (a) the Service shall be used by End User’s solely for the IDscan Enterprise Permitted Purpose, (b) The Services are not provided by a “consumer reporting agency” nor do the Services (nor any Results) constitute “consumer reports” as defined in the FCRA; and (c) the Services and Results may not be used as a factor in determining eligibility for credit, insurance, employment or any other purpose for which a consumer report may be used under the FCRA (or any other similar consumer credit law in the United States of America.
5.3 The Partner shall ensure that, apart from any development or testing activity undertaken by the Reseller, the Reseller App, Reseller Website and any other third party systems that integrate with the GBG software components may only be used by End Users that have accepted the Partner End User Terms that are consistent with and no less protective of GBG’s rights in respect of the Software and Services than those contained in this Agreement.
5.4 The Partner acknowledges and accepts that GBG cannot process payment cards as part of the Service as it does not follow the Payment Card Industry Data Security Standard. Consequently, the Partner or End User must not send GBG images of payment cards.
5.5 The Partner acknowledges that all Intellectual Property Rights in and to any documents generated as a result of the provision of Professional Service or Standard Support Service, including any template Identity Documents added to the Document Library for the addition of new document types, shall belong to and continue to belong to GBG.
6.1 If the Partner has received Preferential Pricing or if the Standard Pricing or payment terms that applied on the Contract Start Date have changed during the Initial Term, then unless otherwise expressly agreed in writing between the Parties, GBG’s Standard Pricing and payment terms will prevail in respect of the Reseller’s continued use of the Software and/or Service after the Initial Term.
6.2 Notwithstanding anything else in this clause 6, after the expiry of the Initial Term GBG shall be entitled to increase the Charges by providing at least 30 days’ notice of the change.
6.3 Subject to any price increase provision as set out in the Core Terms or this Service Schedule, on renewal, all Charges shall renew automatically in line with the Partner’s existing Order (including any applicable Prepayments). GBG shall invoice the Partner for the Charges applicable to that Renewal Term.
8.1 Where the Partner uses Datasets that performs face match and liveness tests as part of the Service, the Partner and/or End User is required to obtain express written consent from each Data Subject being verified, in accordance with the Agreement and Applicable Data Protection Laws. The Partner therefore acknowledges that such laws (e.g. Biometric Information Privacy Act (740 ILCS 14/ in Americas or under UK GDPR/EU GDPR) may require the Partner to disclose GBG’s processing of Biometric Data (as defined in the DPA) to the Data Subject and/or link back to GBG’s privacy notice to disclose the processing details. GBG’s privacy notice is available at https://www.gbgplc.com/en/legal-and-regulatory/products-services-privacy-policy/
8.2 As part of the Service, the Partner may provide, or GBG may request, samples of Identity Documents to help improve the accuracy of GBG’s Document Library. In such cases, the Partner and/or the End User shall be responsible for obtaining the express Consent (as defined in the DPA) of the Data Subject for the collection and Processing of the Data Subject’s Personal Data for this purpose, together with complying with all other requirements under Applicable Data Protection Laws.
Partner will require each of its End Users to agree to End User Terms for the Service which will reflect in substance the Minimum Terms. The End User acknowledges that GBG is not a party to their agreement with the Partner and consequentially it shall not be entitled to bring any claims against GBG directly:
Proprietary Rights. Partner’s End Users’ use of the Services does not transfer any right, title, or interest to any Services to the End User, except as explicitly provided in the commercial agreement between End User and Partner (the “End User Agreement”). The Partner’s End Users acknowledge that all Intellectual Property Rights in and to any Insights created by GBG continue to belong to GBG.
Additional Terms. The Partner’s End Users will comply with the Additional Terms available at: https://www.gbgplc.com/en/legal-and-regulatory/legal-additional-terms/idscan-enterprise/, as applicable to the Datasets such End User procures. Partner may be required from time to time to make updates to the End User Agreement, in particular the Additional Terms that apply to certain Datasets.
Changes to the Services:
3.1 End Users will comply with reasonable instructions from the Partner which are necessary to maintain the Services provided by GBG; and
3.2 The Partner or GBG may suspend End User’s access to the Services for mandatory operational reasons such as repair, maintenance or improvement or because of an emergency, however the Partner shall ensure that the Services are restored as soon as possible following suspension.
End User Obligations. The End User agrees:
4.1 To use the Services in accordance with the IDScan Permitted Purposes as notified to the Partner;
4.2 That none of the activities for which it shall use the Services will constitute, involve or facilitate, either directly or indirectly, the commission of any unlawful or illegal act or infringement of the rights of any person; and
4.3 To comply with all Applicable Laws which apply to the End User in connection with its use of the Services;
4.4 to be responsible for the provision of the telecommunications and network services and correctly configured hardware and other equipment needed to connect to the Services, if any;
4.5 to be responsible for the configuration and management of its access to the Software and/or Service including the configuration of its network, firewall, DNS, routers and personal computers; and
4.6 only access and integrate with the Services as permitted by Partner and shall not attempt at any time to circumvent system security or access the source software or compiled code for any other purpose.
4.7 not to resell (or attempt to resell) or sub-licence (or attempt to sub-licence), transfer (or purport to transfer) the Services (or any part of facility of it, including the Results) to any third party.
4.8 To be responsible for the completeness of all End User Data provided as part of its use of the Service in accordance with Applicable Data Protection Laws;
4.9 To retain back-up copies of all End User Data in accordance with Applicable Data Protection Laws.
Suspension
5.1 The Partner or GBG may suspend the End User’s access to the Services immediately and without providing notice in the event in the event that Partner or GBG, acting reasonably, demonstrates that the End User has committed a material breach of the Minimum Terms, including the Additional Terms.
Security. End User agrees to:
6.1 Take all necessary steps to ensure that User IDs are kept confidential, secure, are used properly by Authorised Users and are not disclosed to any unauthorised parties whether intentionally or otherwise; and
6.2 Inform the Partner if there is any reason to believe that a User ID or Password has or is likely to become known to an unauthorised user or is being or is likely to be used in an unauthorised way and where the End User is able to do so, take such action as required to prevent or cease such unauthorised use.
Confidentiality.
7.1 End User will maintain the confidentiality of any confidential information of Partner or its relevant third parties (such as GBG and its Suppliers) that End User obtains in connection with this Schedule.
Audits.
8.1 If required to comply with applicable law or regulation, Partner is entitled to appoint a mutually-agreed third-party auditor (not to be unreasonably withheld or delayed) to conduct an audit of End User’s compliance with the Minimum Terms, subject to:
8.1.1 the Auditing Party and its third-party auditor’s agreement to reasonable and appropriate confidentiality undertakings;
8.1.2 the third party auditor conducting audits during End User’s normal business hours and in a manner that does not materially disrupt, delay or interfere with the End User’s business.
8.2 Audits shall not be carried out on more than one occasion per year unless GBG or Partner can reasonably demonstrate that the End User is in material breach of the Minimum Terms.
8.3 If any audit undertaken in accordance with this clause identifies a material breach of the Minimum Terms by the End User, then the End User shall take the necessary steps to cure the material breach under this Schedule.
Data Protection
9.1 The End User acknowledges that the Service performs face match and liveness tests, which involve Processing of biometric data for Identity Document authentication purposes. This is a special category of Personal Data under Applicable Data Protection Laws, which requires explicit written consent to be given by the Data Subject as a condition for Processing such data. The End User acknowledges that GBG has no interaction with the Data Subject, and as a consequence it will be the responsibility of the End User to obtain and log the Data Subject’s explicit written consent on GBG’s behalf and inform the Data Subject that GBG is acting as a separate independent controller, where relevant.
9.2 The End User shall, where required under Applicable Data Protection Laws and in accordance with all its obligations under the DPA, disclose GBG’s processing of biometric data to the Data Subject and/or provide a link to GBG’s privacy notice to disclose the processing details which can be found here: https://www.gbgplc.com/en/legal-and-regulatory/products-services-privacy-policy/
9.3 As part of the Service, the End User may provide or GBG may request samples of Identity Documents to improve the accuracy of GBG’s Document Library. In such event, the End User shall be responsible for obtaining the express Consent (as defined under Applicable Data Protection Law) of the Data Subject for the collection, and Processing of the Data Subject’s Personal Data for such purpose together with any other requirements under Applicable Data Protection Laws.
Last updated 31 08 2026
