Legal Centre Publication & Governance

1. Purpose

This document governs how VettiGuard's public legal documents are published, versioned and kept aligned with the live product.

2. Legal Centre documents

The public Legal Centre should contain, at minimum:

• Privacy, Biometric Information & Identity Verification Policy;
• Terms of Service;
• Acceptable Use Policy;
• Data Processing Addendum;
• Data Hosting & Subprocessor Notice;
• Cookies & Similar Technologies Policy;
• Security & Responsible Disclosure Policy;
• Service Level & Support Policy;
• Biometric Collection & Consent Notice;
• Identity Verification & Document Screening Notice;
• Data Retention, Deletion & Legal Hold Policy;
• API & Developer Terms;
• APP 5 Collection Notices & Privacy Requests;
• Automated Decision-Making & Human Review Notice; and
• Communications & Electronic Messaging Policy.

3. Versioning

Each document should display a version and effective or updated date. Material policy changes should create a new version rather than silently replacing material commitments without a record.

4. Review triggers

Review the Legal Centre when any of the following changes:

• hosting country or primary hosting provider;
• a material subprocessor;
• biometric or identity provider;
• retention behaviour;
• introduction of any pricing, paid plan, billing or payment processing;
• marketing or analytics technology;
• government identity-service access;
• a new high-impact use case;
• applicable Australian privacy or communications law; or
• a security architecture change that makes a published claim inaccurate.

5. Product-to-policy alignment

Legal pages must describe the product that actually exists. New product claims about encryption, government verification, data residency, certifications, uptime, deletion or provider locations must not be published unless they are supported by the live environment.

6. Approval

Material legal changes should be reviewed by the VettiGuard product/security owner and, for significant legal changes, an appropriately qualified Australian legal adviser before publication.

7. Historical versions

Maintain previous versions internally with their effective dates. Where technically practical, preserve a public change note for major changes affecting customers.

8. Contact consistency

All Legal Centre pages should use the same official privacy/support contact unless a dedicated channel has been intentionally established. Broken or unmonitored legal contact addresses must be corrected promptly.

9. Priority

A specifically negotiated customer agreement may override a standard public policy where it expressly says so. Public documents should not claim to override non-excludable statutory rights.