ConnectID End User Terms

Version: May 2026

These ConnectID End User Terms apply when Client Core Pty Ltd (ABN 97 684 911 108) trading as Nagaris (Nagaris, we, us or our) makes ConnectID available to you for identity verification or for the transfer of identity-related information through the Nagaris platform, software, integrations and related services.

These terms apply in addition to any other Nagaris terms that apply to your use of our services and our Privacy Policy. If there is an inconsistency between these ConnectID End User Terms and our other terms, these ConnectID End User Terms apply to your use of ConnectID to the extent of the inconsistency.

1. ConnectID and Identity Data

1.1 We are a participant in the ConnectID digital identity network. ConnectID enables you to request an organisation with whom you have a relationship, such as a bank or other accredited provider (Identity Provider), to provide identity and attribute information about you (Identity Data) to us.

1.2 Identity Data may include information such as your name, telephone number, email address, date of birth, residential address, driver licence number or other identity-related information displayed to you during the ConnectID flow.

1.3 Where you are completing an onboarding, anti-money laundering, counter-terrorism financing, verification or similar workflow for one of our business customers, we may make the Identity Data and verification outcome available to that customer for the relevant workflow.

2. Digital Identity Transactions

2.1 The ConnectID network facilitates the transfer of Identity Data directly between the relevant Identity Provider and us. Each transfer is a Digital Identity Transaction.

2.2 The ConnectID Operator does not access or hold your Identity Data. The transfer of Identity Data occurs directly from the Identity Provider to us.

2.3 A Digital Identity Transaction is at your request and option. Identity Data will only be provided by the Identity Provider you select and with your express consent.

2.4 If you do not provide consent, the Digital Identity Transaction will not be performed. We will provide an alternative option for you to provide your Identity Data or have your identity verified other than through ConnectID.

2.5 Each Digital Identity Transaction is a one-off transfer of Identity Data. Any later transfer of Identity Data, including from the same Identity Provider, will require your further consent and a new Digital Identity Transaction.

3. Eligibility

3.1 ConnectID is only available where we have enabled it for the relevant product, service or workflow, where the relevant Identity Provider holds valid accreditation as part of ConnectID, and where you meet the requirements in this section.

3.2 You will only be able to perform a Digital Identity Transaction if you have a digital account enabled with the relevant Identity Provider, have verified your identity and certain core Identity Data with that Identity Provider within the prior 5 years, and meet the minimum age requirements set out in the relevant Identity Provider's terms of service for ConnectID.

4. Your acknowledgements

4.1 You acknowledge and agree that any Digital Identity Transaction requested by you using ConnectID is governed by these ConnectID End User Terms.

4.2 You will be asked by the Identity Provider to review the Identity Data to be transferred to us, verify its accuracy and expressly consent to the transfer.

4.3 Where you consent to the transfer of Identity Data to us from an Identity Provider, we may collect, use and disclose the Identity Data as consented to by you as part of the Digital Identity Transaction, and for secondary purposes where you have further consented to those secondary purposes or where those secondary purposes are otherwise permitted by applicable privacy law, our terms with you and our Privacy Policy.

4.4 Once Identity Data has been transferred to us, the Identity Provider will no longer control and will not be responsible for the security or handling of that transferred Identity Data. Our terms with you and our Privacy Policy will govern our handling of the transferred Identity Data.

4.5 If we suffer a security or data incident that impacts your Identity Data, you consent to us providing information about that incident to the relevant Identity Provider, including your Personal Information and the Identity Data impacted by the incident. The Identity Provider may use that information to seek to prevent or respond to cyber security incidents, fraud, scam activity or identity theft.

4.6 Neither we nor the ConnectID Operator endorse or make any representations or recommendations about any Identity Provider, including the suitability of an Identity Provider's security or privacy practices.

4.7 To the maximum extent permitted by law, we and the ConnectID Operator exclude all liability to you in connection with any acts or omissions of an Identity Provider.

4.8 The exclusions in section 4.7 that relate to the ConnectID Operator are held on trust by us for the ConnectID Operator. This means that, although the ConnectID Operator is not a party to these terms, it can rely on your acknowledgment of and agreement to those exclusions.

5. Availability and suspension

5.1 We may withdraw or suspend ConnectID availability at any time.

5.2 We, or the relevant Identity Provider, may be unable to make ConnectID available or process a Digital Identity Transaction relating to you for a number of reasons, including if the underlying transaction is not one for which we can use ConnectID, you do not meet the eligibility requirements, the Identity Provider cannot supply the requested Identity Data, there are reasonable suspicions of fraud or a security incident, our participation in ConnectID has been suspended or terminated, or there are grounds to believe that the Digital Identity Transaction requires intervention, including because it relates to you as a vulnerable person.

6. Fees

6.1 We will not charge you any fees to perform a Digital Identity Transaction for you.

7. Access, correction and fraud concerns

7.1 You can request access to, or correction of, Personal Information held by us by contacting us in accordance with the procedures set out in our Privacy Policy.

7.2 Updating your Personal Information with us will not update your record with an Identity Provider. You will need to separately contact the relevant Identity Provider to update the Personal Information it holds about you.

7.3 If you suspect fraud in relation to your identity, your account with us or any Digital Identity Transaction that you did not authorise, you must notify us as soon as possible.

8. Complaints

8.1 If you have a complaint or dispute relating to our participation in a Digital Identity Transaction relating to you, please contact us at privacy@nagaris.com.

8.2 If your complaint or dispute relates to activities of an Identity Provider that you asked to disclose Identity Data to us, we may direct you to contact that Identity Provider directly.

9. Consumer Data Right

9.1 Digital Identity Transactions are intended to operate separately to requests made under the Consumer Data Right scheme. We do not provide Consumer Data Right services through ConnectID unless we expressly notify you otherwise.

10. Dictionary

ConnectID Operator means ConnectID Pty Ltd or its Related Bodies Corporate.

Digital Identity Transaction has the meaning given in section 2.1.

Identity Data has the meaning given in section 1.1.

Identity Provider has the meaning given in section 1.1.

Personal Information means personal information as that term is defined in applicable privacy law.