Identity and Age Verification Policy

Effective Date: 26/08/2026

This policy explains when SafeJAM Ltd ("SafeJAM", "we", "us", or "our") requires identity and age verification, the checks involved, how verification affects access to restricted products, and what you can do if a check is unsuccessful. It should be read with our Privacy Policy, GDPR Policy, and Terms of Service.

1. Who Must Complete Verification

You must successfully complete identity and age verification if you want to purchase, subscribe to, or access a product that SafeJAM identifies as restricted. Restricted products currently include:

the gated Remote Browser subscription;
DarkNet Browser or Tor-based sessions;
media-streaming sessions; and
any other product that we clearly mark as requiring identity and age verification.

Verification must be completed by the individual who owns and uses the SafeJAM account. You must be at least 18 years old. Verification is personal to you and cannot be transferred, shared, purchased for another person, or completed using another person's document or likeness.

2. Verification Provider

Verification is performed by our third-party provider, Didit. When you start verification, you are redirected to a Didit-operated flow. Didit generally acts as our data processor when it performs the checks we configure, although it may act as an independent controller for limited purposes described in its Verification Privacy Notice.

3. Checks You Must Pass

To receive a successful verification outcome, you must complete all checks requested in the verification flow. These normally include:

Identity-document verification: checking a supported, valid identity document for authenticity and extracting information needed to verify identity and age;
Age verification: confirming from the date of birth on an approved identity document that you are aged 18 or over;
Liveness check: confirming through a selfie or liveness capture that a real person is present;
Face match: comparing the person completing the liveness check with the portrait on the identity document; and
Fraud and integrity checks: assessing relevant document, session, device, browser, network, IP-address, anti-spoofing, and other risk signals.

Your document must be genuine, readable, unaltered, supported by Didit, and valid at the time of verification. You must provide accurate information and follow the instructions shown during the verification journey.

4. Verification Outcomes and Access Rules

Successful: Identity is verified, documentary age is at least 18, and every check required by SafeJAM has received an acceptable result. Eligible restricted products are then unlocked, subject to payment, availability, these policies, and our Terms of Service.
Pending or in review: Restricted products remain locked until a successful final result is received.
Unsuccessful: A declined, failed, incomplete, abandoned, or expired verification does not unlock restricted products.

An account, payment, purchase, or subscription does not override the verification requirement. Verification only establishes eligibility to access a restricted product; it does not guarantee availability, create a right to use a product unlawfully, or permit activity prohibited by our Terms of Service or Acceptable Use Policy.

5. Retries

You may make up to three failed verification attempts within a rolling seven-day period. Didit counts failed attempts during the seven days immediately preceding each new attempt. After three failed attempts within that window, you will be temporarily blocked from starting another verification attempt.

The block is lifted automatically when enough failed attempts fall outside the rolling seven-day window for the number counted during that window to be below three. This is a rolling limit rather than a fixed weekly reset, so the time at which you can retry depends on when the earlier failed attempts occurred.

Incomplete, abandoned, expired, or in-review sessions may be treated differently from failed attempts by Didit. The status and retry option shown in the verification journey or on your SafeJAM profile determine whether another attempt is currently available. We may impose a longer restriction or stop further attempts where reasonably necessary to protect the Service, investigate suspected impersonation or fraud, comply with law, or prevent abuse.

6. Review and Challenges

Didit uses automated systems to assess document authenticity, face match, liveness, and fraud indicators. If your verification is unsuccessful or you believe the outcome is incorrect, you may contact securityandcompliance@safejam.com to request assistance, provide your point of view, contest the outcome, or request human review.

We will complete a review within 14 calendar days after receiving your request and the information reasonably needed to investigate it. If we cannot complete the review within that period because of exceptional complexity, legal restrictions, or dependency on information from you or Didit, we will notify you and explain the next steps. Restricted products remain unavailable while a review is pending. A review may uphold the original result, permit another verification attempt, or correct the SafeJAM access outcome.

7. Re-verification

A successful verification normally remains valid for three years from the recorded verification date. You must complete re-verification before continuing to use restricted products after that period.

We may require earlier re-verification where reasonably necessary, including following suspected fraud or account compromise, a material discrepancy, a reversal or expiry of a verification result, a change to the account holder's identity information, a change in law or product risk, or a request from a competent authority. We may temporarily restrict affected products until re-verification is complete.

8. Personal Data and Retention

Didit processes identity-document data, biometric and liveness data, and technical and fraud-prevention data for the checks described above. SafeJAM does not store the underlying identity document or document details, date of birth, selfie or liveness capture, biometric template, face-match score, device/IP analysis, or Didit's full verification report in its systems. SafeJAM stores the verification outcome and limited administrative metadata, including verification time and Didit session/workflow identifiers.

We configure Didit to retain the underlying verification data for one year from the verification session, unless earlier deletion or longer retention is required or permitted by applicable law, a valid legal request, or the resolution of a dispute. At the end of the applicable period, Didit will delete, de-identify, or securely destroy the data in accordance with our instructions, applicable law, and its legal obligations.

SafeJAM retains its verification outcome and limited administrative metadata for as long as necessary to manage access, evidence the check, prevent fraud, resolve disputes, and meet legal obligations. Further details, including your data-protection rights, are provided in our Privacy Policy and GDPR Policy.

9. Suspension or Withdrawal of Verified Status

We may suspend or withdraw verified status if we reasonably believe verification was completed fraudulently, by another person, using false or altered material, or in breach of this policy; if Didit reverses or invalidates the result; or if continued reliance on the result would create a security, legal, or fraud risk. Where appropriate, we will explain the action and provide a route to contact us, unless doing so would compromise an investigation or breach a legal restriction.

10. Changes to This Policy

We may update this policy to reflect changes to our products, verification checks, provider, risk controls, or legal obligations. We will publish changes on this page and, where required, notify affected users of material changes.

11. Contact Us

Questions, review requests, challenges, and data-rights requests may be sent to:

SafeJAM Ltd
Email: securityandcompliance@safejam.com
167-169 Great Portland Street, 5th Floor, London, England, W1W 5PF