Terms of Service
The terms that apply when you use KYC Central.
What the service is
KYC Central is operated by KYC Central Ltd, a company registered in England and Wales (company number 17405668) with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. References to "we" and "us" in these terms mean KYC Central Ltd.
KYC Central provides KYC (Know Your Customer) risk assessments of UK-registered companies, built from public data sources such as Companies House, sanctions lists, sector registries and news search. Plans, features and pricing are as shown on our Pricing page — we do not repeat specific prices or limits here, as they can change; the Pricing page is the current source of truth.
Accounts & acceptable use
When you create an account you agree to:
- Provide accurate account details.
- Keep your login credentials and any API keys confidential.
- If you sign in with Google, GitHub or LinkedIn, keep that account secure too: anyone who can sign in to it can sign in to your KYC Central account.
- Not scrape, bulk-redistribute or resell data obtained through the service.
- Respect the rate limits that apply to your plan.
- Not use the service unlawfully — including using screening results to harass or defame anyone.
Risk indicators, not decisions
The outputs of KYC Central — risk flags, scores, and any AI-generated narrative — are risk indicators, generated automatically from public data sources and probabilistic name-matching. They are a starting point for your own investigation, not a finished judgement.
You must apply your own human review, and verify any match against the underlying source records, before acting on it. Using KYC Central does not, by itself, discharge your obligations under the Money Laundering Regulations 2017, and nothing on this platform constitutes legal advice.
We give no warranty as to the accuracy or completeness of third-party register data — we surface what the source registers and lists publish, and those sources can themselves be incomplete, delayed or wrong.
Billing
Subscriptions are billed monthly or annually via Stripe, depending on the interval you choose at checkout. Any introductory discount applies to the first billing period only. One-off PDF report purchases and AI-token top-ups are also processed through Stripe. The price shown at checkout is the total amount you will be charged for that billing period — we do not add tax or any other charge on top of it.
You can cancel a subscription online at any time from the Account page, in one step. Cancellation takes effect at the end of the current billing period and you keep access until then. We email you to confirm.
Consumer cancellation right If you are a consumer, the Consumer Contracts Regulations 2013 give you a 14-day cooling-off period in which you can cancel a new contract without giving a reason. At checkout you ask us to start providing a subscription straight away. You can still cancel within the 14 days, but you will pay for the service supplied up to the point you cancel, and the right ends once the service has been fully supplied. We measure what has been supplied as the greatest of: the share of the billing period that has passed, the share of that period's PDF report allowance you have used, and the share of that period's AI token allowance you have used. We refund the rest of what you paid for that period. You can do this yourself with "Cancel now" on the Account page, which shows the refund and how it was worked out before you confirm; your access ends straight away. AI-token top-ups and other one-off purchases are not refunded this way. For one-off digital purchases (a single PDF report, PDF credit packs or AI-token top-ups), you consent at checkout to immediate supply and acknowledge that you lose the right to cancel once the report or credits have been made available to you.
If a report cannot be completed We do not deliver a report that is missing a check it is supposed to include. The checks a report requires are: sanctions screening; Companies House records (officers, persons with significant control, charges, filings, insolvency, disqualifications, exemptions and the ownership chain); ownership structure; GLEIF; ICIJ Offshore Leaks; a statement of capital, unless the filing it comes from can never be read (for example an image-only scan, or no confirmation statement); adverse-media (news) search, where we offer it; any sector registry you chose (FCA firm, Charity Commission, HMRC VAT, Gambling Commission, the HMRC money laundering supervision register, the SRA (Solicitors Regulation Authority) register or the CQC); and the AI-written analysis, where we offer it, if you left "Include AI-written analysis" ticked. If you untick that option, the report contains no AI-written content.
Before you pay: while adverse-media search is unavailable, a checkout or report request is refused up front, and you are told that you have not been charged. You can try again once it is working again.
If a required check cannot be completed after a report has started, we do not send the report. We retry the check after about 5 minutes, 30 minutes and 2 hours (about 2½ hours in all), and we email you when it is delayed and again with the outcome.
If you are signed in and the report was covered by a report credit, your monthly allowance or a scheduled report, and the check still cannot be completed, we cancel the report and return the credit or allowance to your account.
For a one-off report bought through Stripe, if the check still cannot be completed, we email the address you gave us (from the report wizard, or your Stripe checkout email) a link to generate the report yourself at no extra cost, using the choices you already made, valid for 30 days. The same email includes a link to ask for a refund instead, which you can use at any time unless the report has since been delivered. If you have used neither link after 30 days, we refund your payment automatically. Refunds usually reach you within 5–10 working days.
Signed in, you can see the result of each screening check (sanctions, adverse media and Offshore Leaks) in the report wizard before you generate, retry any that failed, and, if one is unavailable, choose to generate the report without it. A report generated that way states on its overview page which check it was generated without. If you are not signed in, you cannot choose to proceed without a check. A scheduled report never proceeds without a check. If a sector registry lookup fails, you can retry it or skip it in the wizard; skipping it leaves that registry out of the report.
Data protection & the processor clause
For the screening dataset we build and for operating the platform generally, we act as an independent data controller — see our Privacy Policy for how we process that data.
For the content you create or upload — saved reports, workspace notes and rules, and names you submit for batch screening — we act as your processor. In that role we commit to:
- Process your content only to provide the service and on your documented instructions.
- Keep it confidential.
- Apply appropriate security measures, summarised in our Privacy Policy.
- Use only the sub-processors listed in our Privacy Policy, and give notice on the site before adding a new one.
- Assist you with any data-subject request you need to respond to.
- Delete your content when you close your account.
- Make available the information reasonably needed to demonstrate our compliance with this section.
Your own obligations for report content Once a report, flag or narrative is in your hands, you are an independent controller of the personal data in it. Where it includes criminal-offence data — a sanctions match, a director disqualification, or adverse media alleging criminal conduct — you need your own lawful basis and your own condition under Schedule 1 of the Data Protection Act 2018 for holding and using it, together with the appropriate policy document that Schedule 1 requires. Our conditions cover our processing, not yours.
This section is our lightweight, built-in data processing arrangement. Enterprise customers who need a signed, standalone Data Processing Agreement can request one at privacy@kyccentral.co.uk.
Intellectual property
We own the KYC Central platform, including its software, rule engine and design. You own the content you create — your saved reports, notes and custom rules. Reports generated by the service are for your own internal compliance use; they are not to be republished.
Availability
We do not offer a service-level agreement on the free tier. We aim for reasonable-endeavours uptime across the platform, but features may change or be withdrawn as the product evolves.
Liability
Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited — including for fraud, or for death or personal injury caused by negligence.
Subject to that, our total liability to you is capped at the fees you have paid us in the 12 months before the claim arose. We are not liable for decisions you make based on the risk indicators the service produces — see the Risk indicators, not decisions clause above.
Termination
You can delete your account at any time from the Account page. We may suspend or terminate your account for breach of these terms, giving notice where it is practicable to do so.
UK scope & governing law
KYC Central is directed at customers in the United Kingdom. These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute — except that, if you are a consumer, you keep the benefit of any mandatory consumer protections in the country where you live.
Last updated 2026-10-19. These documents are drafts pending solicitor review.