Terms of Service

The agreement that governs your use of Last1 ID.

Last updated: May 22, 2026

Draft for review. This document is a starting point and will be finalized by legal counsel before any commercial launch. Use Last1 ID today understanding that the binding terms may change. Material changes will be announced at least 30 days in advance.

1. Acceptance

By creating a Last1 ID account, accessing the Service, or authorising any third-party application to call Last1 ID on your behalf, you accept these Terms. If you do not accept them, do not use the Service.

2. Identity sovereignty

Last1 ID is custodial only in the operational sense — we run the infrastructure on your behalf. The identity record, credentials, consent grants, and the activity ledger associated with your account are your data. You may export them at any time and you may delete them at any time (see Section 7). We do not sell, license, or otherwise transfer your data to third parties for advertising or training purposes.

3. Acceptable use

You agree not to use the Service to: (a) impersonate another person; (b) circumvent rate limits or security controls; (c) request or present credentials you are not entitled to; (d) scrape, replay, or farm trust events; (e) interfere with the Service's operation; or (f) violate any applicable law. Violations may result in account suspension, credential revocation, or, in serious cases, referral to law enforcement.

4. Partner applications

When you authorise a partner application (e.g. LastVet, RadioCheck, MATR), the partner becomes responsible for the data it receives subject to its own terms and privacy policy. Last1 ID does not control how partners use the data you allow them to receive. You can see and revoke any partner's access at any time in /care-connections or /dashboard/apps.

5. Verifiable credentials

Last1 ID issues, holds, and verifies credentials on your behalf. We do not guarantee that any external verifier accepts a Last1-issued credential — acceptance depends on the verifier's own trust framework. We sign credentials with keys we manage at rest under AES-256-GCM and we publish the corresponding DID and JWKS for third-party verification.

6. Health-care contexts (HIPAA / 42 CFR Part 2)

Some partner applications (notably LastVet) operate inside the U.S. health-care system. For those uses Last1 ID will execute a Business Associate Agreement (BAA) directly with the covered entity before any protected health information flows. Until a BAA is signed, do not place PHI into your Last1 ID account. We will publish the BAA template alongside our HIPAA compliance documentation when it is ready.

7. Account export and deletion

You may export the full contents of your Last1 ID account at any time. You may also request irrevocable deletion of your account, which will: revoke all outstanding tokens, purge personally identifiable information, mark issued credentials as revoked, and notify your active partner applications. We retain a minimal audit record of revoked credential identifiers (without PII) for fraud prevention. The full mechanism is described in our Privacy notice.

8. Service availability and changes

We aim for high availability and will publish a status page when one is launched. We do not guarantee uninterrupted service. We may deprecate features with at least 30 days' notice for identity-impacting changes.

9. Disclaimers and liability

The Service is provided “as is.” To the maximum extent permitted by law, Last1 Enterprises disclaims all implied warranties. Our aggregate liability for any claim relating to the Service is limited to the greater of $100 USD or the amount you paid us in the twelve months preceding the claim. Nothing in these Terms limits liability that cannot be limited by law (including gross negligence or wilful misconduct).

10. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, U.S.A., without regard to conflict-of-laws principles. Any dispute will be resolved in the state or federal courts located in Delaware, except that either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidentiality.

11. Contact

Questions about these Terms? support@last1.id. Security concerns? security@last1.id.