Effective date: May 2026

These Terms of Use govern your access to and use of the Kyboa website, platform, reports, screening tools, monitoring tools, data outputs, APIs and related services.

The services are provided by Kyboa Pte. Ltd., registered in Singapore with UEN 202620917G, with registered office at 2 Venture Dr, #19-21 Vision Exchange, Singapore 608526.

For legal notices or questions about these Terms, contact [email protected].

1. Acceptance of these Terms

By accessing the website, creating an account, using the platform, running a screening, viewing a report, using an API key, or otherwise using Kyboa, you agree to these Terms.

If you use Kyboa on behalf of a company, organisation or other legal entity, you confirm that you have authority to bind that entity to these Terms. In that case, references to “you” and “your” mean that entity and its authorised users.

Kyboa is intended for business and professional use only. It is not intended for personal, household or consumer use.

2. Additional agreements and order forms

We may enter into a separate order form, service agreement, statement of work, data processing agreement, API agreement or other written agreement with you.

Any such agreement will apply in addition to these Terms. If there is a conflict between these Terms and a signed written agreement, the signed written agreement will prevail to the extent of the conflict.

Unless otherwise agreed in writing, pricing, plan limits, quotas, billing periods and included features are as shown on our website, in the platform, in an invoice, or in any agreed commercial document.

3. The Kyboa service

Kyboa provides tools to support KYC, KYB, sanctions screening, PEP screening, adverse media discovery, web discovery, customer due diligence, entity monitoring, review workflows, reporting and audit record keeping.

Kyboa helps users collect, organise, screen, review and document relevant information. Kyboa does not replace your own compliance policies, professional judgement, regulatory obligations, legal obligations, internal approvals, escalation procedures or human review.

4. Accounts and authorised users

You are responsible for all activity under your account and by your authorised users.

You must ensure that only authorised personnel access the platform, that login credentials are kept secure, and that user access is removed when no longer required.

You must notify us promptly if you become aware of unauthorised access, compromised credentials, misuse of the platform, or any security incident affecting your account.

5. Trials and demo access

Kyboa may provide trial, demo or pilot access at its discretion. Trial access may be time-limited, feature-limited, quota-limited or otherwise restricted.

Unless we expressly agree otherwise, trial access does not include premium registry credits.

We may modify, suspend or end trial access at any time. Trial access is provided for evaluation only and should not be relied on as a production compliance system unless we expressly agree otherwise.

6. Customer data and lawful use

You are responsible for the accuracy, legality and appropriateness of all data, names, identifiers, files, records and other information that you enter, upload, import, transmit or otherwise submit to Kyboa.

You confirm that you have obtained, hold and use any customer, employee, director, shareholder, beneficial owner or other personal data lawfully, and that you have the necessary authority, consent, legitimate interest, contractual basis, regulatory obligation or other permitted basis to submit that data to Kyboa and use the resulting outputs.

You are responsible for ensuring that your use of Kyboa complies with all laws, regulations, internal policies and contractual obligations applicable to you, including data protection, privacy, AML, CFT, sanctions, financial crime, anti-bribery and sector-specific compliance requirements.

You must not submit data that you have no lawful right to possess, process, disclose or screen.

7. Data processing and privacy

Our handling of personal data is described in our Privacy Policy.

For personal data submitted by customers for screening, monitoring, reporting or related platform functions, Kyboa generally acts as a data intermediary processing that data on the customer’s behalf. For website use, account administration, platform security, support, analytics, legal compliance and service operations, Kyboa may process personal data for its own purposes as described in the Privacy Policy.

You are responsible for providing any required notices to individuals, obtaining any required consents, and ensuring that Kyboa’s processing of customer-submitted personal data is lawful in the relevant jurisdiction.

8. Acceptable use

You must use Kyboa only for lawful business and professional purposes.

You must not use Kyboa to:

  • violate any law, regulation, sanctions rule, data protection requirement or third-party right;
  • conduct unlawful surveillance, harassment, doxxing, intimidation or discriminatory profiling;
  • screen individuals or organisations where you do not have a lawful or legitimate basis to do so;
  • submit false, misleading, unauthorised or unlawfully obtained data;
  • attempt to bypass security controls, usage limits, access restrictions or billing controls;
  • reverse engineer, scrape, copy, resell, sublicense or commercially exploit the platform except as expressly permitted;
  • introduce malware, overload systems, interfere with service operation or attempt unauthorised access;
  • use outputs to make unlawful, discriminatory or unfair decisions;
  • use Kyboa in a way that could expose Kyboa, its providers or its customers to legal, regulatory, security or reputational risk.

9. Sanctions and high-risk users

We may refuse, suspend or terminate access if we reasonably believe that a customer, user, beneficial owner, related party, transaction or use case may breach sanctions laws, AML/CFT obligations, export control rules, applicable law, provider restrictions, or our internal risk policies.

We may also refuse to provide services to any person or organisation at our discretion, to the fullest extent permitted by law.

10. Screening outputs require human review

Kyboa provides tools to surface, organise, score, classify and document screening-related information. Kyboa does not make final decisions for you.

All screening results, matches, alerts, reports, risk ratings, confidence levels, labels, scores, reason codes, adverse media outputs, web discovery outputs and review decisions are aids to human review. They are not legal advice, regulatory advice, compliance sign-off, final clearance, or a determination that a person or entity is safe, unsafe, sanctioned, not sanctioned, high-risk, low-risk, guilty, innocent, approved or rejected.

You are responsible for reviewing all outputs, applying your own policies, conducting any additional checks required by law or regulation, and deciding whether to accept, reject, freeze, report, escalate, monitor or otherwise act on a subject.

11. No compliance or legal advice

Kyboa does not provide legal, regulatory, financial, compliance, audit, investigative or professional advice.

You should obtain advice from qualified professionals where required. You remain responsible for determining your regulatory obligations and for deciding whether your screening, due diligence, monitoring, reporting and record-keeping processes satisfy those obligations.

12. Data source and matching limitations

Kyboa uses third-party and public data sources, screening datasets, registry data sources, web discovery services, news discovery services and other providers. These sources may be incomplete, inaccurate, delayed, unavailable, inconsistent, withdrawn, changed or subject to provider limitations.

Screening may be affected by name variations, transliteration, spelling differences, aliases, local-language records, missing identifiers, false positives, false negatives, data-source errors, source update delays, provider outages, jurisdictional limitations and user input quality.

Kyboa does not guarantee that any screening will identify every relevant sanctions, watchlist, PEP, adverse media, enforcement, registry, ownership, beneficial ownership or other risk indicator.

Absence of a match does not mean absence of risk.

13. Risk ratings, reports and audit records

Kyboa may generate risk ratings, confidence levels, review states, reports, exports, audit records and other outputs based on data available at the time of screening.

Reports and audit records are point-in-time records. They reflect the information, data sources, provider responses, system configuration and user inputs available at the time they were generated.

You are responsible for interpreting reports and determining what follow-up, escalation, evidence collection, reporting or enhanced due diligence is required.

14. Entity monitoring and alerts

Kyboa may provide entity monitoring, recurring screening, alerting and review workflow features.

Monitoring and alerts depend on configured cadence, available credits or quotas, source availability, provider updates, system availability and platform configuration. Alerts are designed to help surface changes or potential issues for review; they are not guaranteed to be immediate, complete or exhaustive.

You remain responsible for maintaining your own monitoring schedule, reviewing alerts, escalating findings and complying with any regulatory reporting deadlines.

15. Review decisions

Kyboa may allow users to record review decisions, notes, dismissals, confirmations or other operational classifications against screening results.

Review decisions are user-maintained workflow records. They do not alter the underlying third-party data source, remove the need for future review, or constitute legal or regulatory advice from Kyboa.

You are responsible for ensuring review decisions are accurate, current, properly authorised and consistent with your policies.

16. API access

If API access is provided, it is for your internal business use only unless we agree otherwise in writing.

You must not:

  • share, publish, sell, sublicense, expose or transfer API keys;
  • provide Kyboa outputs as a resale, bureau, pass-through, white-label or third-party screening service without written permission;
  • allow unauthorised third parties to access the API directly or indirectly;
  • attempt to bypass rate limits, security controls, usage restrictions or commercial limits;
  • use the API to overload, disrupt, scrape, benchmark, reverse engineer or attack Kyboa or its providers.

You are responsible for securing API keys, monitoring API use, and promptly notifying us of suspected compromise.

We may rate-limit, rotate, suspend or revoke API keys where required for security, operational, legal, commercial or risk-management reasons.

API outputs are subject to the same review, data-source, liability and usage limitations as the web platform.

17. Fees, billing, quotas and taxes

Fees, plan limits, quotas, included screenings, billing periods and other commercial terms are set out on our Pricing page, in the platform, in invoices, or in any written agreement with you.

Unless stated otherwise, fees are in US dollars and exclude applicable taxes, duties, bank charges, withholding taxes, payment processing fees or similar charges. You are responsible for such amounts where applicable.

Subscription billing is normally aligned to the first day of each calendar month. Monthly screening quotas and included credits reset on the first day of each calendar month unless otherwise stated.

Unused monthly plan quotas do not roll over unless expressly stated.

18. Premium registry credits

Certain registry-enhanced KYB features may require premium registry credits.

Unless otherwise agreed:

  • premium registry credits may be purchased in minimum packs of 20 credits;
  • each credit costs USD 7.50;
  • 20 credits cost USD 150;
  • credits may be purchased in multiples of 20;
  • there is no volume discount unless expressly agreed;
  • credits do not expire while your account remains active and in good standing.

A premium registry credit may be consumed when a premium registry lookup, report or related request is successfully requested, submitted, accepted or processed through the platform, even where the returned data is limited, incomplete or no matching record is available, unless Kyboa determines otherwise.

Premium registry data is used to support KYB, screening, due diligence and monitoring workflows. It is not provided as a standalone registry resale service.

19. Cancellation and refunds

You may cancel your subscription by giving notice to Kyboa. Unless otherwise agreed, cancellation takes effect at the end of the current billing month.

Refunds are handled on a case-by-case basis.

If you have prepaid for more than one month and wish to cancel the service, we will refund the unused prepaid period on a prorated basis, unless another written agreement applies.

Monthly subscriptions cancelled during a billing month are not automatically refunded for the remaining part of that month, although Kyboa may offer a refund at its discretion.

Where possible, refunds will be made to the original payment method. If that is not possible, Kyboa may use another reasonable method.

We offer demo and trial access where appropriate so that prospective customers can evaluate whether the platform fits their needs before purchase.

20. Customer exports, deletion and retention

The platform may provide export tools for screening history, reports, entities or related records. You are responsible for downloading any records you need before cancellation or termination.

After termination, you may request export or deletion of your account data, subject to technical feasibility, legal obligations, audit requirements, security requirements, backup retention and legitimate business needs.

Kyboa may retain certain records, including audit logs, screening artifacts, reports, invoices, support records, security logs and legal records, where retention is required or appropriate for compliance, dispute resolution, fraud prevention, regulatory, accounting, tax, audit, backup or legitimate business purposes.

Retention periods are further described in our Privacy Policy.

21. Confidentiality

Each party may receive non-public business, technical, commercial or operational information from the other party.

Each party must protect the other party’s confidential information using reasonable care and must not use or disclose it except as required to provide or use the services, comply with law, enforce rights, or as otherwise permitted in writing.

Confidentiality obligations do not apply to information that is publicly available, already known without restriction, independently developed, or lawfully received from a third party.

22. Intellectual property

Kyboa and its licensors own all rights in the platform, website, software, designs, workflows, templates, reports, documentation, know-how, trademarks, branding and related materials, except for customer data and third-party materials.

You are granted a limited, non-exclusive, non-transferable right to use Kyboa for your internal business purposes in accordance with these Terms and your plan or agreement.

You must not copy, modify, reverse engineer, resell, sublicense, create derivative products from, or otherwise exploit Kyboa except as expressly permitted.

23. Feedback

If you provide feedback, suggestions, ideas or improvement requests, you grant Kyboa a perpetual, worldwide, royalty-free right to use them without restriction or compensation.

24. Third-party services and external links

Kyboa may integrate with, rely on, link to or display information from third-party services, datasets, registries, websites, APIs, search services, infrastructure providers or other external sources.

We are not responsible for third-party services, third-party content, external websites, external availability, external accuracy or third-party terms, except to the extent required by applicable law.

25. Availability, maintenance and support

Kyboa is provided on a commercially reasonable efforts basis. We do not guarantee uninterrupted availability, error-free operation, specific response times, or any service level unless expressly agreed in writing.

We may perform maintenance, updates, security work, infrastructure changes, provider changes or feature changes from time to time. We will try to minimise disruption where practical.

Support is provided on a reasonable-efforts basis unless a separate written agreement states otherwise.

26. Suspension and termination

We may suspend or terminate access, in whole or part, if:

  • you breach these Terms or any written agreement;
  • fees are overdue;
  • we reasonably believe your account has been compromised or misused;
  • your use creates legal, security, operational, provider, regulatory or reputational risk;
  • continued service may breach sanctions, AML/CFT, export control, data protection or other legal requirements;
  • we are required to do so by law, regulator, court order, provider restriction or other authority.

Termination does not affect accrued rights, payment obligations, confidentiality obligations, limitations of liability, indemnities, or provisions intended to survive termination.

27. Disclaimers

To the fullest extent permitted by law, Kyboa is provided “as is” and “as available”.

We disclaim all warranties, representations and conditions, whether express, implied, statutory or otherwise, including warranties of accuracy, completeness, availability, merchantability, fitness for a particular purpose, non-infringement, regulatory compliance, suitability for your specific use case, or that screening outputs will identify all risks.

No information provided by Kyboa should be treated as legal advice, compliance advice, regulatory advice, audit opinion, investigation finding, identity confirmation, sanctions determination, reporting instruction, or final decision.

28. Limitation of liability

To the fullest extent permitted by law, Kyboa will not be liable for:

  • indirect, incidental, special, consequential, exemplary or punitive loss;
  • loss of profit, revenue, business, opportunity, goodwill or reputation;
  • business interruption;
  • loss, corruption or delay of data;
  • regulatory fines, penalties, sanctions, enforcement action or investigation costs;
  • decisions made by you or your users;
  • failure by you to review, escalate, report, freeze, reject, monitor or otherwise act on screening outputs;
  • errors, omissions, delays or unavailability in third-party data sources, registries, datasets, APIs or providers;
  • false positives, false negatives, missed matches, name ambiguity, incomplete data or outdated source data;
  • unauthorised access caused by your failure to secure credentials, API keys or user access.

To the fullest extent permitted by law, Kyboa’s total aggregate liability arising out of or relating to the services, platform, website, API, reports, data outputs, these Terms or any related claim is limited to the greater of:

  • the fees paid by you to Kyboa in the three months immediately before the event giving rise to the claim; or
  • USD 100.

The limitations in this section apply whether the claim is based on contract, tort, negligence, breach of statutory duty, misrepresentation, restitution or any other legal theory, to the fullest extent permitted by law.

Nothing in these Terms limits liability that cannot legally be limited or excluded.

29. Indemnity

You agree to indemnify and hold harmless Kyboa, its officers, directors, employees, contractors, affiliates, service providers and licensors from and against any claims, losses, damages, liabilities, penalties, fines, costs and expenses, including reasonable legal fees, arising out of or relating to:

  • your use or misuse of Kyboa;
  • your customer data, uploaded data, submitted data or screening subjects;
  • your decisions, actions or failures to act based on Kyboa outputs;
  • your failure to review, verify, escalate, report, freeze, reject, monitor or otherwise act on screening outputs;
  • your breach of these Terms or any written agreement;
  • your breach of law, regulation, sanctions obligation, AML/CFT obligation, data protection obligation or third-party right;
  • your failure to obtain lawful authority, consent or other permitted basis for submitting or using personal data;
  • your users, authorised users, affiliates, customers, contractors or representatives;
  • your API integration, API key management or downstream use of Kyboa outputs;
  • any allegation that Kyboa’s processing of data submitted by you was unlawful because of your acts, omissions, instructions or lack of lawful basis.

30. Changes to the platform

We may change, improve, replace, suspend or remove features, workflows, data sources, providers, reports, templates, APIs, limits, pricing, plans or platform functionality from time to time.

Where a change materially affects paid customers, we will try to provide reasonable notice where practical, unless the change is urgent, security-related, provider-driven, legally required or operationally necessary.

31. Changes to these Terms

We may update these Terms from time to time. The updated version will be posted on our website or made available through the platform.

If changes are material, we will take reasonable steps to notify affected customers. Continued use of Kyboa after the effective date of updated Terms means you accept the updated Terms.

32. Notices

We may send notices by email, through the platform, by posting on the website, or by other reasonable means.

Notices to Kyboa should be sent to [email protected] unless another method is specified in a written agreement.

33. Governing law and jurisdiction

These Terms are governed by the laws of Singapore.

The parties submit to the exclusive jurisdiction of the courts of Singapore for any dispute arising out of or relating to these Terms, the website, the platform, the API or the services.

34. General provisions

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign or transfer our rights or obligations in connection with a merger, acquisition, restructuring, sale of assets, financing, corporate reorganisation or transfer of the business.

If any part of these Terms is found invalid or unenforceable, the remaining parts will continue in effect.

Failure to enforce a provision is not a waiver of that provision.

These Terms, together with any applicable written agreement, invoice, plan terms, data processing terms or order document, form the agreement between you and Kyboa for use of the services.

35. Contact

For questions about these Terms, contact:

Kyboa Pte. Ltd.
2 Venture Dr, #19-21 Vision Exchange
Singapore 608526
Email: [email protected]