TokenWorks, Inc.
Effective Date: June 11, 2026 | Last Updated: June 11, 2026
This ID Cloud Parsing Product Addendum (the “Addendum”) is incorporated into and made part of the Master Service Agreement (the “MSA”) by and between TokenWorks, Inc. (“TokenWorks”) and Customer (“Customer”).
This Addendum applies to TokenWorks’ proprietary cloud-based identification document parsing service, ID Cloud Parsing, made available through the Cloud Parsing API at idcloudparser.com (the “Product”), including the optional Barcode Detective Plus (“BCD+”) anomalous barcode format detection feature. The Product is included within the Services offered by TokenWorks. By accessing or using the Product, Customer agrees to be bound by the terms and conditions of the MSA, the Data Processing Addendum (“DPA”), and this Addendum. All capitalized terms used in this Addendum shall have the meanings ascribed to them in the MSA, unless otherwise defined herein.
This Addendum is subject to all terms of the MSA, including but not limited to the limitations of liability, indemnification provisions, warranty disclaimers, and dispute resolution procedures set forth therein, each of which is incorporated into this Addendum by reference. In the event of any conflict between this Addendum and the MSA, this Addendum shall control with respect to the Product, in accordance with the order of precedence set forth in the MSA. This Addendum becomes effective as of the date Customer first accepts the MSA or first accesses or uses the Product (the “Effective Date”).
ID Cloud Parsing is an online, API-based service that parses and extracts structured data fields from the raw decoded PDF417 barcodes found on North American driver’s licenses, driving permits, and government-issued identification cards. Customer submits decoded barcode data — or an image of a barcode via the image decoding endpoint (/cloud/image_decode) — and receives structured identity data fields in response. Each submission of barcode data or a barcode image to the Product, regardless of the result returned, constitutes one “Transaction.”
The Product is offered in two service plans (each, a “Service Plan”):
The Product is delivered as a cloud-hosted application programming interface (API) accessible at idcloudparser.com and/or such other endpoints as TokenWorks may designate, via API integration with Customer’s systems and/or through the TokenWorks Portal, as made available by TokenWorks. Access to the Product requires valid Access Credentials (including API keys) issued by TokenWorks.
The Product is offered on a volume-tiered subscription basis, with monthly or annual prepaid billing. The Service Plan, monthly Transaction volume tier, fees, effective per-unit rates, and billing basis applicable to Customer are set forth in the quote, order form, or pricing schedule issued by TokenWorks and accepted by Customer (each, an “Order Form”). Each Order Form is incorporated into and made part of this Addendum and the MSA, and is governed by their terms. In the event of any conflict between an Order Form and this Addendum, the Order Form shall control with respect to pricing, volume tier, billing, tier adjustment, and termination and cancellation terms.
This Addendum governs Customer’s use of and access to the Product and incorporates all terms of use and limitations as part of the Services under the MSA. The following conditions apply to Customer’s use of the Product:
1. Tier Selection. Customer selects a Service Plan and a monthly Transaction volume tier at signup, as documented in the applicable Order Form. The selected tier establishes Customer’s committed monthly Transaction volume and the applicable subscription fee.
2. Billing Options. Subscriptions are available on (a) an annual prepaid basis, priced at the equivalent of ten (10) months of the corresponding monthly fee (two months free for paying the year up front); or (b) a monthly basis at the full monthly rate. Annual prepaid subscriptions are billed in a single payment in advance of the annual term; monthly subscriptions are billed in advance of each monthly billing period. Billing, invoicing, payment, late payment, taxes, and fee disputes are governed by Section 5 of the MSA.
3. No Rollover. Unused monthly Transaction volume does not roll over, carry forward, accrue, or convert to credit in any subsequent month or billing period, and has no cash value.
4. Custom Volumes. Monthly volumes above 100,000 Transactions require a custom pricing arrangement; Customer should contact TokenWorks for an enterprise quote. Custom arrangements shall be documented in an Order Form or written amendment to this Addendum.
5. Renewal; Cancellation; Refunds. Subscriptions automatically renew in accordance with Section 2.6 of the MSA. Customer may cancel its subscription at any time upon thirty (30) calendar days’ prior written notice to TokenWorks. Upon such cancellation, TokenWorks will refund the prorated unused portion of any prepaid fees, less a cancellation fee equal to one (1) month of the subscription fee at Customer’s then-current tier; no refund is due where the prorated unused amount does not exceed the cancellation fee. Except as set forth in this Section or as required by applicable Law, all subscription fees are non-refundable. Notwithstanding anything to the contrary in the MSA, this Section governs cancellation and refunds for the Product.
6. Plan Changes. Customer may upgrade its Service Plan or volume tier at any time through the TokenWorks Portal or by contacting TokenWorks; upgrades take effect in the next billing cycle unless otherwise agreed, with prepaid annual fees prorated or credited toward the upgraded tier as reasonably determined by TokenWorks. Downgrades take effect at the start of the next subscription term.
7. Termination by TokenWorks. TokenWorks may suspend or terminate Customer’s access to the Product if Customer fails to make any monthly payment or annual renewal payment when due, or if Customer violates the terms of the MSA or this Addendum. This right is in addition to, and does not limit, TokenWorks’ rights under Sections 2.9, 5.4, and 10.2 of the MSA.
1. Tier Adjustment. If Customer’s Transaction volume in any month exceeds the committed monthly volume of Customer’s selected tier, TokenWorks may contact Customer, share Customer’s actual Transaction volume data, and request that Customer move to the next higher tier appropriate to Customer’s actual usage. The Product is not subject to hard caps, and usage above the committed tier does not interrupt the Product.
2. Effect of Tier Change. For monthly subscriptions, the higher tier fee applies beginning with the next monthly billing cycle following the tier change. For annual prepaid subscriptions, TokenWorks will bill Customer the difference between the annual fee of Customer’s current tier and the annual fee of the higher tier, prorated for the remainder of the then-current annual term.
3. Continued Excess Usage. If Customer’s usage continues to materially exceed its committed tier following TokenWorks’ request under Section 3.1, TokenWorks may, upon at least thirty (30) calendar days’ written notice, condition continued provision or renewal of Customer’s subscription on Customer’s selection of the tier appropriate to Customer’s actual usage. Nothing in this Section limits TokenWorks’ rights under Section 2.9 or Section 3 of the MSA.
4. Usage Records. TokenWorks’ records of Transaction counts, as maintained in TokenWorks’ systems and made available to Customer through the TokenWorks Portal, shall be the authoritative measure of Customer’s usage, absent manifest error. TokenWorks reserves the right to review Customer’s usage logs and records at any time to verify proper and lawful use of the Product; information obtained during such review shall be treated as Confidential Information of Customer under the MSA.
1. Function. BCD+ is an optional feature, available under the Parse + BCD+ Service Plan, that analyzes the internal data structure of each submitted ID barcode using automated, jurisdiction-specific anomaly detection, proprietary verification rules, and checks against a shared database of known fraudulent identification document patterns. BCD+ is a screening and risk-signal tool designed to assist Customer in identifying potentially fraudulent identification documents.
2. Results. Each BCD+ Transaction returns one of three results:
3. Valid Format Limitation. Customer acknowledges and agrees that a “Valid Format” result means only that the data structure of the submitted barcode is consistent with the recognized format for the issuing jurisdiction. A “VALID FORMAT” RESULT IS NOT A DETERMINATION, REPRESENTATION, WARRANTY, OR GUARANTEE THAT AN IDENTIFICATION DOCUMENT IS GENUINE, AUTHENTIC, VALID, UNEXPIRED, UNALTERED, OR THAT IT WAS ISSUED TO, OR PRESENTED BY, THE INDIVIDUAL IDENTIFIED THEREIN. A sophisticated counterfeit identification document containing a correctly formatted barcode will return a “Valid Format” result.
4. No Performance Guarantee. Any detection rates, percentages, statistics, or performance figures published or communicated by TokenWorks regarding BCD+ (including any statement that BCD+ may detect up to a stated percentage of fraudulent identification documents) are estimates based on historical field performance, are provided for informational purposes only, will vary based on jurisdiction, document quality, fraud techniques, and other factors outside TokenWorks’ control, and do not constitute a representation, warranty, guarantee, or service level commitment of any kind.
5. Customer Sole Decision-Maker. Customer is solely responsible for all decisions and actions taken or not taken in reliance on the Product, including decisions to accept or reject an identification document, to grant or deny access, service, employment, or any benefit, to detain or question any individual, or to report any individual or document to law enforcement. BCD+ results should be used as one factor among others in Customer’s overall identity verification process, together with appropriate human review, and shall not be relied upon as the sole basis for any decision or action adverse to any individual. TokenWorks shall have no liability for any act or omission of Customer in reliance on any Product output, including any Failed, Warning, or Valid Format result.
1. Genuine Documents Only (Synthetic Data Exclusion). The Product is licensed solely for the parsing and analysis of barcode data obtained from genuine, physical identification documents presented to Customer in the ordinary course of Customer’s lawful business. Except through a designated test environment or Test Key expressly provided by TokenWorks, Customer shall not submit, and shall not permit any Authorized User or third party to submit, any artificially generated, synthetic, simulated, fabricated, or programmatically created or manipulated barcode data or barcode images to the Product. TokenWorks may suspend or terminate Customer’s access to the Product immediately and without liability if TokenWorks reasonably believes Customer has violated this Section, in addition to all other rights and remedies available under the MSA.
2. Lawful Use Only. Customer shall use the Product and all Product output solely for lawful identity verification, age verification, and fraud prevention purposes, and in compliance with all applicable Laws. Without limiting the foregoing, Customer shall not use the Product or any Product output for:
3. Use Restrictions. All use restrictions set forth in Section 3 of the MSA apply to the Product, including the prohibitions on reverse engineering, competitive analysis and benchmarking, resale and service-bureau arrangements, and use of the Product or its output to develop, train, or improve competing products or services, including artificial intelligence or machine learning models.
4. Regulatory Compliance. Customer is solely and entirely responsible for ensuring that its collection, submission, use, retention, and disposal of identification document data in connection with the Product complies with all applicable Laws, including identity theft and fraud prevention laws, state and provincial laws restricting the scanning, collection, or retention of driver’s license data, biometric privacy laws where applicable, and all other privacy and data protection laws. The Product is a tool; its availability does not constitute legal advice or an assurance that any particular use is lawful in any jurisdiction.
1. Customer Responsibility. Customer is solely responsible for the integration of the Product into Customer’s technical environment (the “Customer Environment”), including all hardware, software, scanning devices, barcode decoding, network connectivity, and infrastructure necessary to capture barcode data and transmit it to the Product. Customer acknowledges that the performance, accuracy, and reliability of the Product may be affected by the quality of the barcode data or images submitted, and by the configuration, quality, and maintenance of the Customer Environment.
2. No Compatibility Guarantee. TokenWorks makes no guarantee that the Product will be compatible with all hardware, software, or scanning configurations in the Customer Environment. Integration or customization services, if required, may be subject to additional fees under a separate Statement of Work. TokenWorks shall have no liability for issues arising from incompatible third-party software or hardware, malformed or low-quality barcode submissions, improper configuration, or modifications to the Product or its integration made by Customer or third parties.
3. Credentials and Security. Customer is solely responsible for the security of its Customer Environment and for safeguarding its Access Credentials and API keys in accordance with Section 2.5 and Section 4.4 of the MSA. All Transactions submitted under Customer’s Access Credentials are deemed authorized by Customer, and Customer is responsible for all fees associated therewith. Customer shall promptly notify TokenWorks of any suspected compromise of its Access Credentials.
1. DPA. Data parsed from identification documents constitutes Customer Data and may include Personal Data. To the extent TokenWorks processes Personal Data on behalf of Customer in connection with the Product, the DPA applies and controls with respect to such processing, in accordance with the order of precedence set forth in the MSA.
2. Customer Warranties. Customer represents and warrants that it has provided all legally required notices to, and obtained all necessary rights, permissions, and consents from, the individuals whose identification documents are submitted to the Product, sufficient to permit the processing contemplated by this Addendum, the MSA, and the DPA.
3. Fraud-Pattern Data. Customer acknowledges and agrees that TokenWorks may use barcode structural and format information derived from Transactions — including anomalous format patterns associated with suspected fraudulent documents — to maintain, develop, train, and improve the Product and TokenWorks’ fraud detection systems and shared fraud-pattern databases, in accordance with Section 4.2 of the MSA and the DPA and to the extent permitted by applicable Law.
4. No Consumer Reporting. As set forth in Section 12.5 of the MSA, TokenWorks is not a consumer reporting agency and the Product output is not a consumer report under the FCRA. Customer shall not use the Product or its output in any manner that would cause TokenWorks to be deemed a consumer reporting agency or the output to constitute a consumer report.
1. As Is. EXCEPT AS EXPRESSLY SET FORTH IN SECTION 7.2 OF THE MSA, THE PRODUCT AND ALL PRODUCT OUTPUT ARE PROVIDED “AS IS” AND “AS AVAILABLE,” AND ALL DISCLAIMERS SET FORTH IN SECTION 7.3 OF THE MSA APPLY TO THE PRODUCT.
2. No Warranty of Fraud Detection. WITHOUT LIMITING THE FOREGOING, TOKENWORKS DOES NOT REPRESENT, WARRANT, OR GUARANTEE THAT THE PRODUCT (INCLUDING BCD+) WILL DETECT, IDENTIFY, OR FLAG ANY OR ALL FRAUDULENT, COUNTERFEIT, ALTERED, EXPIRED, REVOKED, OR OTHERWISE INVALID IDENTIFICATION DOCUMENTS, OR THAT PRODUCT OUTPUT WILL BE ACCURATE, COMPLETE, OR ERROR-FREE. CUSTOMER ASSUMES ALL RISK ASSOCIATED WITH FALSE NEGATIVES (FRAUDULENT DOCUMENTS RETURNING A “VALID FORMAT” OR OTHER NON-ADVERSE RESULT) AND FALSE POSITIVES (GENUINE DOCUMENTS RETURNING A “FAILED” OR “WARNING” RESULT).
3. Parsing Accuracy. Parsed data fields reflect the data encoded in the submitted barcode as issued (or as altered) by the encoding party. TokenWorks does not verify parsed data against any government or third-party records under this Addendum and makes no warranty as to the truth, accuracy, or currency of the underlying encoded data.
4. No Legal Compliance Warranty. TokenWorks does not warrant that use of the Product will satisfy any legal, regulatory, or contractual obligation of Customer, including any obligation to verify age or identity under federal, state, provincial, or local law.
1. Indemnification. Customer’s indemnification obligations under Section 8 of the MSA apply to the Product and extend, without limitation, to any and all claims, damages, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) Customer’s or any Authorized User’s use of, or reliance on, the Product or any Product output; (b) any decision or action taken or not taken by Customer based in whole or in part on a Failed, Warning, or Valid Format result, including the acceptance of a fraudulent identification document or the rejection, denial of service, detention, accusation, or reporting of any individual; (c) Customer’s submission of data to the Product, including any violation of Section 5 of this Addendum; (d) Customer’s failure to provide legally required notices or obtain legally required consents; and (e) Customer’s violation of any applicable Law in connection with its use of the Product.
2. Limitation of Liability. All limitations and exclusions of liability set forth in Section 9 of the MSA apply to this Addendum and the Product. In accordance with Section 9 of the MSA, the aggregate liability cap applies per product addendum and, with respect to the Product, shall not exceed the total fees paid by Customer to TokenWorks for the Product in the twelve (12) months immediately preceding the claim (or one hundred dollars ($100) if no fees have been paid). Without limiting the foregoing, in no event shall TokenWorks be liable for any losses, damages, fines, penalties, chargebacks, theft, fraud losses, or third-party claims arising from Customer’s acceptance of a fraudulent identification document or rejection of a genuine identification document.
1. Pilots. TokenWorks may, at its sole discretion, offer Customer a free trial or pilot evaluation of the Product (a “Pilot”), which may include a limited number of complimentary Transactions. During a Pilot, the Product is provided “AS IS” with all faults and without warranty, support, or service level commitments of any kind. To continue using the Product after a Pilot ends, Customer must subscribe to a paid Service Plan; otherwise, access will be terminated. TokenWorks may charge Customer’s payment method on file if Customer continues to access and use the Product beyond the Pilot without subscribing.
2. Test Keys. TokenWorks may provide Customer a designated test key or test credentials (a “Test Key”) for quality assurance, integration testing, and user acceptance testing. The Test Key is the sole permitted means of submitting synthetic or simulated data (notwithstanding Section 5.1) and may not be used for production Transactions or any commercial purpose.
TokenWorks may modify this Addendum at any time by posting the modified Addendum on tokenworks.com, idscanner.com, or idcloudparser.com, or by providing written notice to Customer via email at the email address associated with Customer’s account. Such modifications shall become effective upon Customer’s continued use of the Product following the posting or receipt of notice of the modification. Customer may not modify this Addendum or any terms thereof.
Any disputes arising out of or related to this Addendum, the Product, or the MSA shall be governed by and resolved in accordance with all terms, conditions, and procedures set forth in the MSA, including the executive negotiation, binding arbitration, class action waiver, and jury trial waiver provisions contained therein. This Addendum is governed by the laws of the State of New York, without regard to its conflicts of law principles, as set forth in the MSA.
For questions, support, or to provide notice under this Addendum, please contact TokenWorks by email at support@tokenworks.com, through the contact forms at tokenworks.com or idscanner.com, or through the TokenWorks Portal.
