Terms of use of the test application

These terms govern access to the TrustMe sandbox environment and the TrustMe Sandbox Simulator app (“the test application”), provided by A3BC GROUP (“A3BC”). By ticking the box in the access request, you accept them, for yourself and, where applicable, for the entity you represent.

1. Purpose

The sandbox lets Relying Parties and identity providers test their TrustMe integration (OpenID Connect, delayed sharing, webhooks) and run demonstrations. It is not intended for operational use.

2. Fictitious test data

• All data processed in the sandbox must be fictitious. You must not enter or upload real personal data: genuine identity documents, social security numbers, bank details, addresses or supporting documents of real people.
• The identities, documents and verification results shown in the test application are simulations. They have no evidentiary or legal value.
• A3BC may delete any test data and any test account at any time, without notice.

3. No warranty of operation

• The environment and the app are provided “as is”, with no warranty of availability, performance, compliance or fitness for a particular purpose.
• Updates are deployed regularly. The app may include beta features, and the service may experience interruptions, resets or a lower quality of service than Production.
• Security rules are relaxed to facilitate testing and demonstrations. Do not rely on the sandbox to assess the security level of Production.
• No support commitment or service level agreement (SLA) applies to the sandbox.

4. Test period

Access is granted for a limited period of three (3) months from the date access is opened. It may be extended on request, at A3BC’s discretion. At the end of the period, A3BC may disable the credentials (client_id, client_secret, tester accounts) and delete the associated test data.

5. Isolation from Production

The sandbox environment is completely isolated from Production: it uses neither the same data, nor the same accounts, nor the same secrets. Sandbox credentials do not work in Production, and no data is transferred from one to the other. Moving to Production is a separate request, with its own credentials and configuration.

6. Credentials and testers

• The credentials issued to you (client_id, client_secret) are confidential. You are responsible for keeping them safe and for how they are used. Do not publish them in a public repository or share them outside your team.
• Only the testers you declared in the request receive an invitation to the test application. You make sure they know and comply with these terms.
• Tell A3BC without delay if a credential is lost or compromised, so it can be replaced.

7. Acceptable use

You must not:

• attempt to access systems, accounts or data other than your own, or bypass protection measures;
• run load tests, penetration tests or intensive automation without A3BC’s prior written agreement;
• use the sandbox for any unlawful or misleading purpose, or in a way that harms third parties;
• decompile or extract the code of the test application, except where the law allows it.

8. Personal data

The information entered in the request (first name, last name, email address, optional entity, testers’ email addresses, callback URLs) is processed by A3BC to review the request, open and manage access, and provide support during the test period. It is not used for other purposes without your agreement. You have the rights provided by the applicable regulations, described in the personal data protection policy.

For testers’ email addresses, you make sure you have informed the people concerned that they are shared with A3BC.

9. Intellectual property

Access to the sandbox and the test application does not give you any intellectual property rights. It only grants you a personal, non-exclusive, non-transferable right of use, for the duration of the test period and for the purposes described above.

10. Liability

To the extent permitted by law, A3BC is not liable for direct or indirect damages arising from the use of the sandbox or the test application, including loss of test data or unavailability of the service. Nothing in these terms excludes liability that cannot be excluded by law.

11. Suspension and changes

A3BC may suspend or close access at any time, in particular if these terms are not respected. A3BC may change these terms; the applicable version is the one published on this page on the date of your request.

12. Governing law

These terms are governed by French law. For any question, write to contact@a3bc.io.