Terms of Service

C-NDA Protocol™ is operated by WitUp Ltd, Company No. 16572774, registered in England and Wales, VAT GB499506632, registered office 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. The underlying method is a patented system.

C-NDA records the acceptance of a non-disclosure agreement together with evidence of who accepted it and when, seals that evidence into a package, and anchors a cryptographic hash of the package on a public blockchain so that anyone can later verify that it has not been altered. For a certified meeting, a witness joins the call and records it once every required participant has signed and consented.

C-NDA provides evidence infrastructure. It is not a law firm and does not give legal advice; a certificate is proof of an act, not a court decision, and no one can promise you how a particular tribunal will weigh it. Whether the agreement you use fits your situation is your decision, and taking legal advice on it is a good idea.

You must give accurate registration details and keep your credentials to yourself. You are responsible for what happens under your account and for the lawfulness of the material you register and the meetings you certify.

You may not use the service to record a meeting where you are not entitled to do so, to bind someone by misrepresenting who you are, or to store material you have no right to store. We may suspend an account that is being used this way, and we will tell you why.

Each plan carries a monthly allowance of protections and meetings; the current allowances and prices are on the pricing page. Subscriptions are billed through Stripe, and you manage or cancel yours from Settings → Manage subscription, which opens the Stripe Customer Portal.

Cancelling takes effect at the end of the period you have already paid for. Certificates already issued, their evidence packages, the signing photographs and the on-chain anchors are never deleted because a plan ends: they remain yours, remain verifiable and remain available to the parties bound by them. Everything else stored for your account (meeting recordings, the media of sessions that were never certified, documents you uploaded for protections that were never certified, exports and your logo) is deleted 30 days after a paid plan ends without renewal. We email you 7 days and again 1 day before that date, deletion never happens before both notices have been sent, a renewal at any point cancels it, and a meeting in progress is never interrupted.

Each plan includes a storage allowance for what you keep with us (recordings, certificates and their packages, signing photographs, uploaded documents, exports, your logo); the allowance of each plan is on the pricing page, and you can see what you are using in Settings. We warn you at 80%. When the allowance is full, new protections and new meetings are paused until you free space; a meeting already in progress is never interrupted.

A meeting credit is consumed when the witness joins your call. If the witness had joined and the session then failed on our side, the credit is returned to your allowance automatically. Refunds in money are covered by the Refund Policy.

The witness joins under the visible name “C-NDA Protocol” and appears in the participant list. It records nothing until every required participant has been identified, has signed and has separately consented to being recorded: that sequence is the core of the product and cannot be skipped or reordered.

You are responsible for having the right to bring a recording witness into a meeting you organise, and for anyone you invite. Where coverage of a recording is incomplete, the gap is declared in the certificate; we will not issue a certificate that quietly hides one.

When the meeting ends, the session is certified without waiting for anyone: the certificate is issued and sent to every bound party, and the automatic summary is sent with it where the plan includes one. You may choose, for a given session, to have the summary held until you have reviewed it. The certificate is never held.

The witness only begins the protected phase while at least one signatory is actually in the room, and it leaves after five minutes of a room with no signatory in it. Where that shortens the coverage of a meeting, the gap is declared in the certificate like any other.

Certificates are issued to all bound parties. A signatory keeps access to a certificate that concerns them for as long as we keep it, which is for as long as it can be needed as evidence and in any case at least five years from sealing (see the Privacy Policy), independently of the status of the account that created it; the certificate and its evidence package can be downloaded at any time and verified without us.

The transcript and the summary that travel with a certificate are produced by software and, at the moment they are sent, have been read by nobody. They are labelled accordingly, and they are what they say they are: a machine's reading of the recording, not an agreed record of the meeting. The recording, the event log and their hashes are the evidence; the transcript is derived from the recording and the summary is derived from the transcript.

If you afterwards correct the transcript or the summary, the correction never replaces what was already sent: it produces a new certificate in the documented revision chain, and the parties receive it as a new document. Both remain verifiable, and anyone can see which came first.

A sealed evidence package is tamper-evident after anchoring: its fingerprint is written on a public blockchain, so any change to the package can be detected by anyone, without trusting us. Corrections never overwrite: they produce a new certificate in a documented revision chain, and both remain verifiable.

Listing a certificate in the public registry is off by default and entirely your choice, one certificate at a time. Only the title, the declared names of the parties and their companies can ever be published, and you can de-list at any time. Before publishing the names of other people, make sure you are entitled to.

We work hard to keep the service running and we do not offer a contractual uptime guarantee: the service is provided as it is, and we will not pretend to a level of availability we have not measured. We keep no service level commitment that is not written here.

We are liable for damage we cause by failing to meet our obligations, up to the amount you have paid us in the twelve months before the event. Nothing in these terms limits liability that cannot lawfully be limited (including for death or personal injury caused by negligence, or for fraud) and nothing here affects the statutory rights of a consumer.

We are not liable for the content of the agreements you use, for the consequences of a meeting you certify, or for a counterparty's conduct.

The platform, its software and its branding remain ours. Your documents, your recordings and your certificates remain yours; we process them to deliver the service and to keep the evidence intact, and for nothing else.

Verifying a certificate never requires our software, our permission or our continued existence. Every evidence package is sealed with published standards, RFC 8785 canonical JSON and SHA-256, and its fingerprint is anchored in a public blockchain transaction, so that you or any third party can recompute that fingerprint and read that anchor using tools that are not ours. We undertake not to change the sealing rule for a package that has already been anchored: a correction is issued as a new certificate in a revision chain, never as a silent edit.

If we change these terms we update this page and its version and date; material changes are announced by email to account holders. You may close your account at any time from Settings → Privacy.

These terms are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction. If you are a consumer resident in the European Union, this does not deprive you of the protection of the mandatory rules of your country of residence.

If we were to discontinue the service, we would tell every account holder and every bound party with access to a certificate by email at least 90 days in advance, and during that period you could download every certificate, evidence package and recording we hold for you. Verifying a certificate has never required us: the anchors stay on the public blockchain indefinitely.

Questions: hub@witup.ai.

These terms are written in English and translated for convenience; if a translation and the English text differ, the English text prevails. The same applies to the Privacy Policy, the Cookie Policy, the Refund Policy and the GDPR page.