These Terms govern access to and use of the OneJuly compliance platform, including Onboard360. Practice Users are also subject to their practice’s SaaS Agreement. Client Portal Users are bound by these Terms only after affirmative acceptance.
1. Who these Terms apply to
OneJuly Compliance Pty Ltd (OneJuly, we, us or our) operates the OneJuly compliance platform, including Onboard360 (Platform). These Terms govern access to and use of the Platform.
There are two main types of user:
- Practice User — you work at, or act for, a practice or organisation that subscribes to the Platform. Your practice has entered into a SaaS Agreement with OneJuly. These Terms form part of the rules governing your use of the Platform, and your practice is responsible for ensuring its authorised users comply with them.
- Client Portal User — you have been invited by a practice to provide information or complete an onboarding, identity verification or compliance activity. You are not a party to the practice’s SaaS Agreement. These Terms apply directly to you once you affirmatively accept them.
If you do not accept these Terms, do not use the Platform. If you are a Client Portal User and do not wish to accept them, contact the practice that invited you to discuss another available way to provide the requested information.
2. Acceptance
You accept these Terms by taking an affirmative step to indicate acceptance before first using the Platform.
Where we make a material change to these Terms that affects a Client Portal User, we may require that user to accept the updated Terms before continuing to use the Platform. For Practice Users, changes are also governed by the applicable SaaS Agreement.
If you accept these Terms on behalf of a practice or other organisation, you represent that you are authorised to do so.
3. Other documents that apply
- Our Privacy Policy explains how OneJuly handles personal information.
- A separate collection notice may be presented when personal information is collected from you.
- A separate consent is obtained before biometric verification is initiated.
- For a practice, the SaaS Agreement governs the subscription, fees, service levels, data retention and other commercial terms. If these Terms conflict with the SaaS Agreement in relation to a practice, the SaaS Agreement prevails to the extent of the conflict.
4. Your right to use the Platform
Subject to these Terms and, for a Practice User, the applicable SaaS Agreement, we grant you a personal, non-exclusive and non-transferable right to access and use the Platform for its intended purpose:
- if you are a Practice User, to carry out your practice’s authorised client onboarding, identity verification and compliance activities in accordance with its subscription; and
- if you are a Client Portal User, to provide information and complete the onboarding or verification activities requested by the practice that invited you.
You obtain no ownership right in the Platform, our software, documentation, branding, domain names or any workspace address allocated to a practice.
5. Accounts and credentials
- You must provide accurate account information and keep it reasonably current.
- Your credentials are personal to you. You must not share them or allow another person to use your account.
- You must enable and maintain multi-factor authentication where the Platform requires it.
- You are responsible for activity conducted through your account to the extent it results from your use of, or failure to reasonably protect, your credentials.
- You must promptly tell OneJuly or the relevant practice if you know or reasonably suspect that your credentials have been compromised.
A practice is responsible for administering its own authorised users, including promptly removing access that is no longer required.
6. Information you provide
The Platform supports identity verification, customer onboarding and regulatory compliance activities. Information provided through it may be relied on by the practice that requested it.
You must not knowingly:
- provide false, misleading or materially incomplete information;
- upload an identity document that is not yours or that has been unlawfully altered;
- impersonate another person or complete verification on another person’s behalf unless the Platform expressly supports that process and you are authorised to do so; or
- attempt to defeat, manipulate or circumvent an identity, document, screening or live photo click.
Providing false information or using another person’s identity may be unlawful. We may take reasonable steps to protect the Platform, preserve relevant security records and notify the inviting practice or an appropriate authority where required or permitted by law.
7. Acceptable use
You must not:
- use the Platform other than for its intended and authorised purpose;
- access, or attempt to access, any workspace, account, record or information you are not authorised to access;
- copy, reproduce, modify, reverse engineer, decompile or create derivative works from the Platform, except to the extent the law does not permit that restriction;
- use automated means to scrape, index, harvest or extract data from the Platform except through an interface expressly made available by OneJuly for that purpose;
- resell, sublicense or make the Platform available to another person except as expressly authorised;
- introduce malicious code or knowingly upload a malicious or infected file;
- probe, scan or test the security of the Platform without our prior written authorisation;
- interfere with the operation or security of the Platform or impose an unreasonable load on it;
- remove or obscure proprietary notices; or
- use the Platform in breach of law or to infringe another person’s rights.
7.1 Security vulnerabilities
If you believe you have identified a security vulnerability, please report it promptly using the support channel made available in the Platform. Do not access, copy, alter or disclose another person’s information, and give us a reasonable opportunity to investigate before making public disclosure.
8. Information you should not upload
Unless the Platform specifically requests, supports or authorises the information for the relevant workflow, you must not intentionally upload or enter:
- tax file numbers;
- full payment card numbers or card security codes;
- health information;
- criminal record information, other than information lawfully returned or requested as part of an approved screening or compliance workflow;
- personal information about a person who has no reasonable connection to the matter or workflow;
- material that is unlawful, defamatory or infringes another person’s rights; or
- a suspicious matter report, or information that would disclose that a suspicious matter report has been or may be made, unless the Platform expressly supports the relevant workflow and the practice has determined that the disclosure is permitted by law.
Practices remain responsible for determining whether information they place in the Platform may be subject to AML/CTF tipping-off or other confidentiality restrictions.
We may refuse to process, quarantine or restrict access to material where reasonably necessary to protect the Platform, comply with law or enforce these Terms.
9. Uploaded files
Uploaded files may be scanned for malicious content. We may quarantine, reject or block access to a file that is detected as malicious, fails security scanning or is of an unsupported type.
We may retain a detected malicious file, or information about it, for as long as reasonably necessary for security investigation, incident response or legal purposes.
We may temporarily restrict upload functionality where repeated malicious or unsafe uploads create a security risk.
10. Screening and verification results
Screening and verification results may use third-party data sources and automated matching technologies.
Results are decision-support outputs, not final decisions. Matching may produce false positives or false negatives. A practice must review relevant results and make its own assessment where required by its professional, contractual or legal obligations.
If you are a Practice User, you must not use third-party screening or verification data obtained through the Platform to:
- build or contribute to an unrelated or separate data product or database;
- redistribute, resell or publish the data except where legally required or expressly authorised;
- use the data for a purpose unrelated to the compliance or verification purpose for which it was obtained; or
- retain third-party data beyond the period permitted by the applicable licence, law or your legitimate compliance requirements.
We may replace a third-party data or verification provider where reasonably necessary, including where the replacement provides materially equivalent functionality, security and data-protection standards.
11. OneJuly does not assume your professional or regulatory obligations
The Platform is a technology and decision-support tool. It does not itself discharge or transfer any legal, professional, regulatory or AML/CTF obligation of a practice.
- OneJuly does not act as your AML/CTF compliance officer, lawyer, accountant, financial adviser or other professional adviser merely by providing the Platform or support services.
- Nothing produced by the Platform, and no general technical or product support provided by OneJuly personnel, is legal, accounting, tax, financial or professional advice.
- Each practice remains responsible for determining whether it is a reporting entity, identifying the designated services it provides, designing and maintaining its AML/CTF framework, assessing risk, reviewing Platform outputs, making decisions about its clients, meeting reporting obligations and keeping records required by law.
The Platform is a working system and must not be treated as a practice’s sole statutory record repository or business-continuity backup. Practices must export and retain records for the periods required by applicable law and in accordance with the SaaS Agreement.
12. Availability and changes to the Platform
We aim to keep the Platform available and secure, but we do not promise that it will be uninterrupted or error-free. Access may be affected by maintenance, faults, security events, third-party provider outages or events outside our reasonable control.
We may make reasonable changes to features, workflows or technical components to maintain security, comply with law, improve functionality or respond to changes in third-party services. For a practice, any material adverse change and associated rights are governed by the SaaS Agreement.
Features identified as beta, pilot or early access are provided for evaluation and may change or be withdrawn. They should not be used as the sole means of meeting a legal or regulatory obligation unless expressly stated otherwise.
13. Suspension and termination of access
We may suspend or restrict access where we reasonably consider it necessary to:
- respond to a material or repeated breach of these Terms;
- protect an account that appears to have been compromised;
- prevent suspected fraud, unlawful activity or misuse;
- protect the security, integrity or availability of the Platform or information held through it;
- give effect to a practice’s lawful instruction to remove a user, or because the relevant practice subscription has been suspended or ended; or
- comply with law, a court order or a lawful requirement of a regulator or government authority.
Where practicable, we will give notice of a suspension and the reason for it. We may act without advance notice where immediate action is reasonably required for security, fraud prevention, legal compliance or protection of another person’s information.
If a suspension results from a remediable breach and the relevant issue is resolved, we will restore access where reasonably practicable. A Practice User’s rights on suspension or termination are also subject to the SaaS Agreement.
14. Intellectual property and information you provide
OneJuly and its licensors own the Platform, software, documentation, templates, workflows, branding and associated intellectual property. Nothing in these Terms transfers ownership of that intellectual property to you.
You retain any rights you have in information you provide through the Platform.
You grant OneJuly a limited right to host, store, process, transmit, back up and display that information only as reasonably necessary to operate, support, secure and maintain the Platform, provide the requested services, comply with law and exercise our rights under the applicable agreements.
We do not sell information provided through the Platform. We do not use customer content, identity documents or biometric information to train artificial intelligence or machine-learning models.
If you voluntarily provide feedback or suggestions about the Platform, we may use that feedback to improve our products and services, provided we do not thereby acquire ownership of the information you provide or your personal information.
15. Privacy
Our Privacy Policy, available on the OneJuly website, explains how OneJuly collects, holds, uses, discloses and protects personal information, including information about overseas processing and authorised support access.
A separate collection notice may be presented when personal information is collected, and express consent is obtained before biometric verification is initiated.
Where a practice invited you to use the Platform, that practice generally determines why your information is collected and how it is used. Requests to access or correct information held primarily on behalf of the practice should generally be made to that practice. You may also contact OneJuly’s Privacy Officer at privacy@onejuly.com.au.
16. Liability and consumer rights
Nothing in these Terms excludes, restricts or modifies any consumer guarantee, right, remedy or other protection under the Australian Consumer Law or any other law that cannot lawfully be excluded, restricted or modified.
16.1 Practice Users
If you are a Practice User, the liability allocation between OneJuly and your practice is governed by the SaaS Agreement. These Terms do not expand or reduce the liability rights and limitations agreed between OneJuly and the practice under that agreement.
16.2 Client Portal Users
If you are a Client Portal User, OneJuly remains responsible for its own obligations under applicable law. To the extent permitted by law, OneJuly is not responsible for:
- a decision, instruction, act or omission of the practice that invited you to use the Platform;
- the legal or professional advice given to you by that practice or another third party;
- inaccuracy or incompleteness in information supplied by you, the practice or an external data source, except to the extent OneJuly is legally responsible for the relevant issue; or
- a temporary interruption caused by an event outside OneJuly’s reasonable control, provided OneJuly complies with any non-excludable obligations that apply.
Nothing in this section limits liability for fraud, wilful misconduct or any liability that cannot lawfully be limited or excluded.
17. Changes to these Terms
We may update these Terms from time to time to reflect changes to the Platform, law, security requirements or our operating arrangements.
The current version will be made available through the Platform or OneJuly website and will state its effective date.
Where a change materially affects a Client Portal User’s rights or obligations, we will take reasonable steps to give notice before the change takes effect and may require renewed acceptance before further use. For Practice Users, the SaaS Agreement governs how changes take effect and any associated rights.
18. General
- These Terms are governed by the laws of Victoria, Australia. Subject to any non-excludable rights you may have, the parties submit to the courts of Victoria and courts entitled to hear appeals from them.
- If a provision of these Terms is invalid or unenforceable, it will be read down to the extent necessary or severed, and the remaining provisions continue to operate.
- A failure or delay in enforcing a right is not a waiver of that right.
- You may not transfer your rights under these Terms without our written consent. We may assign these Terms to a related body corporate or a successor in connection with a merger, restructure or sale of all or a substantial part of our business, provided the assignment does not materially reduce your rights under these Terms.
- Provisions that by their nature are intended to continue after your access ends, including sections 6, 8, 10, 11, 14, 15, 16 and 18, continue to apply.
19. Contact
OneJuly Compliance Pty Ltd
ACN 698 932 663
Unit 207, 111 Overton Road
Williams Landing VIC 3027
Australia
Privacy enquiries and complaints: privacy@onejuly.com.au
For Platform support or security issues, use the support channel made available within the Platform. If you cannot access the Platform, you may contact us at privacy@onejuly.com.au. If you are a Client Portal User, you may also contact the practice that invited you.