Last updated 15/12/2023
This Services Agreement (the “Agreement”) contains the terms and conditions that govern your access to and use of the Platform and is an agreement between Certn and you, or the entity you represent (“Customer”, “You” or “Your”). This Agreement takes effect when You click the “Continue” button or checkbox presented with these terms or, if earlier, when You use any of Certn’s service offerings (the “Effective Date”). You represent to Certn that You are lawfully able to enter into this agreement. If You are entering into this Agreement and creating an Account on behalf of an entity, such as the company You work for, You represent to us that You have legal authority to bind that entity. If You are entering into this Agreement and creating the Account for an End User as the Initial User, You represent to Certn that You have legal authority to bind the End User. The End User will be liable for the actions of the Initial User and any Additional User. For avoidance of doubt, if the End User has signed a separate master services agreement with Certn (“MSA”), this Agreement will be subject to any terms agreed to within such MSA.
Certn may revise this Agreement at any time without notice to You. The revised Agreement will be effective when posted to www.certn.co, www.certnlime.ca or www.certnlime.com, as applicable (referred to collectively as the “Website”). Notwithstanding the foregoing, Certn will provide notice of any revisions that may substantially impact or restrict Your use of the Website and/or Services.
By entering into this Service Agreement and/or creating an Account, You are certifying that You, being the End User or a User acting as an agent of the End User, have direct knowledge of the facts and You certify that each time You request a Report, You will comply, obtain, and abide by the following:
Permissible Purpose. You understand and agree that You must have a legitimate need and permissible purpose for ordering Reports and utilizing the Services. If the Report is applicable to a United States resident, such purpose must be in accordance with Section 604(a) of the FCRA. To the extent the Report is applicable to individuals residing outside of North America, You understand and agree that you must have an explicit legal basis aligned with the Permissible Purpose to enable the lawful processing and transfer of Personal Information in accordance with the applicable data protection legislation, along with any guidelines, codes of practice or policies of any relevant regulatory body in the applicable jurisdiction as amended or updated from time to time related thereto. You agree to comply with the applicable Permissible Purpose requirements and any associated disclosure and authorization requirements to the Consumer, as required by the FCRA or any applicable Laws. You agree and certify that You will order and use the Reports only for the Permissible Purpose confirmed by You to Certn during the Credentialing process; You may not change the Permissible Purpose without written consent from Certn. You agree and certify that You are the business type stated in the Account, You have a need for the Report in connection with the Permissible Purpose, and You are acting in compliance with any additional provincial, state and local requirements for obtaining and using the Report (including credit or criminal information, if applicable). Each time You order or access a Report, You reaffirm the certifications in this Section 4.
To the extent You are requesting Reports within the United States or the Consumer is a resident of the United States, You acknowledge receipt of and certify that You have reviewed and fully understand the following statutory notices:
Copy of Reports. While You acknowledge sole responsibility for compliance with any federal, provincial, state and/or local regulations that require a copy of the Report be provided to the Consumer upon request, to the extent the Consumer has requested a copy through the Platform or You have communicated the request to Certn via API, or otherwise configured the Account to do so, You authorize Certn to provide on Your behalf a copy of the Report to each Consumer about whom You have requested a Report.
Disclosure and Authorization. For Reports applicable to US Consumers, You agree and certify that prior to procurement or causing the procurement of a Report for the Permissible Purpose: (a) A clear and conspicuous disclosure has been made in writing to the Consumer in a document that consists of only the disclosure, explaining that a consumer report may be obtained for the specific Permissible Purpose and such disclosure satisfies all of the requirements of the FCRA as well as any applicable state or local laws, and the Consumer has authorized in writing the procurement of the Report by End User, or (b) if Certn is providing Consumers with disclosure and authorization forms on behalf of End User, You confirm that You have reviewed, understand and signed off on the respective Certn Forms.
Investigative Consumer Reports. For Reports applicable to US Consumers, in addition to the disclosure and authorization requirements above, You agree and certify that prior to procurement or causing the procurement of an Investigative Consumer Report for the Permissible Purpose, You have (or the End User has requested that Certn, through the use of Certn Forms, has): clearly and accurately disclosed to the Consumer that an Investigative Consumer Report including information as to the Consumer’s character, general reputation, personal characteristics and/or mode of living may be made. As the End User, or an agent acting on behalf of the End User, You must be satisfied that all of the requirements of the FCRA as well as any applicable state or local laws have been met. If the Consumer makes a request to You, as the End User or as an agent acting on behalf of the End User, within a reasonable time after his/her receipt of the required disclosure, You must make a complete and accurate disclosure of the investigation requested.
Adverse Action. For Reports applicable to US Consumers, pursuant to the FCRA and applicable, state and local laws and regulations, before taking any adverse action based in whole or in part on a Report, You must adhere to certain obligations. If Certn is providing End User with access to an Adverse Action tool, End User confirms that it has reviewed and utilized the appropriate adverse action/letters based on the Consumer’s residence and place of work. In addition to the foregoing:
End User will not initiate the pre-adverse and adverse action notice process until Certn has completed all search components of the consumer and/or investigative consumer report, Certn has provided the complete Report to End User, and End User has reviewed the consumer report contents.
At a minimum, if using a Report for employment purposes, before taking any adverse action based in whole or in part on the Report, You must provide to the Consumer to whom the Report relates: (a) a pre-adverse action notice/letter stating that End User is considering taking adverse action; (b) a copy of the full and complete Report;(c) a copy of the notice titled “A Summary of Your Rights Under the Fair Credit Reporting Act” and any applicable state summary of rights; (d) a reasonable opportunity of time to correct any erroneous information contained in the Report; and contact information for Certn.
If You thereafter take any adverse action with respect to an employment decision, or the Consumer is denied tenancy or any other adverse action is taken as related to any other permissible purpose described in Section 604(a) of the FCRA, You must provide a final adverse action notice to the Consumer to whom the Report relates in compliance with the FCRA, including, but not limited to, satisfying all requirements under the FCRA if information from the Report is a disqualifying factor. Such notice shall comply with all applicable Laws, and shall include, if not already provided in the context of an employment decision, (a) a copy of the full and complete Report;(b) a description, in writing, of the rights of the consumer entitled: “A Summary of Your Rights Under the Fair Credit Reporting Act”; (c) the name, address, and phone number of Certn; (d) a statement that Certn did not make the decision to take the unfavorable action and, as such, cannot give specific reasons for it; and (e) a notice of the person’s right to dispute the accuracy or completeness of any information Certn furnished and to get an additional free report from Certn if the person asks for it within 60 days.
If using a US credit score, You certify that You will comply with the Dodd-Frank Act and all applicable regulations relating to using a credit score. For clarity, credit scores may not be accessed for employment purposes.
Before taking adverse action based on a criminal record the EEOC Criminal History Guidance recommends that You perform an individualized assessment and/or other considerations. To obtain a copy of the EEOC Criminal History Guidance please go to the following website: http://www.eeoc.gov/laws/guidance/arrest_conviction.cfm.
Equal Opportunity. You certify and understand that the End User (or You as an agent of the End User) are responsible for complying with federal, provincial, state and/or local regulatory requirements, restrictions and Laws, including but not limited to, privacy legislation, the FCRA, individualized assessments, as instructed by the Equal Employment Opportunity Commission (“EEOC”), local Ban the Box laws, fair chance and fair hiring laws, HUD guidelines, and fair chance to housing laws.
Additional Certifications. You certify and agree:
Not to use or attempt to use the Platform for unauthorized purposes or for the benefit of any unauthorized third party.
To use each Report on a one-time use basis and within thirty (30) days of the completion date.
To hold the Reports in strict confidence and not disclose the Reports, and any information therein, including credit information, unless required by Law, to any unauthorized third parties without consent.
To the extent Certn is not collecting authorization and disclosures on the End User’s behalf, that the End User shall retain copies of all written authorizations and disclosures for a period of three years and make such documentation available to Certn upon request.
To secure all hard and electronic copies of Background Information and Reports within Your offices and facilities so that unauthorized persons cannot easily access them.
To shred or destroy all hard copy Reports, and delete or render unreadable any electronic files containing Reports, after it is no longer needed and when Laws permit destruction.
That Certn may review records that are reasonably required to demonstrate compliance with the terms of this Agreement at any time upon reasonable prior notice during the Term, and for 5 years thereafter, to confirm Your compliance with this Agreement.
California. As applicable to You or the Report that You request, You hereby certify that, under the Investigative Consumer Reporting Agencies Act (“ICRAA”), California Civil Code Sections 1786 et seq., and the Consumer Credit Reporting Agencies Act (“CCRAA”), California Civil Code Sections 1785.1 et seq., if You are located in the State of California, and/or Your request for and/or use of Reports pertains to a California resident or worker, You certify to all of the following:
You will request and use Reports solely for permissible purpose(s) identified under California Civil Code Sections 1785.11 and 1786.12.
When, at any time, Reports are sought for Employment Purposes, unless a legal exception otherwise applies, You have provided a clear and conspicuous disclosure in writing to the Consumer, either through the Platform by option to use Certn Forms or through other means controlled by You, which solely discloses: (i) that an Investigative Consumer Report may be obtained; (ii) the permissible purpose of the Investigative Consumer Report; (iii) that information on the Consumer’s character, general reputation, personal characteristics and mode of living may be disclosed; (iv) the name, address, telephone number, and website of the Consumer Reporting Agency conducting the investigation; and (v) the nature and scope of the investigation requested, including a summary of the provisions of California Civil Code Section 1786.22.
When, at any time, Reports are sought for Employment Purposes, unless a legal exception otherwise applies, You agree to only request a Report if the applicable Consumer has authorized in writing the procurement of the Report through the automated Platform flow, or through other means controlled by You.
In accordance with California Civil Code Sections 1786.16(a)(5) and (b), You agree to provide a means by which the Consumer may indicate on a written form by means of a box to check, that he/she wishes to receive a copy of any Reports either through the Certn Forms provided in the Platform, or by any other means controlled by You. If the Consumer wishes to receive a copy of the Report, You shall send (or contract with another entity to send) a copy of the Report to the Consumer within three business days of the date that the Report is provided to You. The copy of the Report shall contain the name, address, and telephone number of Certn, who issued the report, and how to contact Certn.
If the Consumer asks to receive a copy of the Report directly from You, send a copy of the Report to the Consumer (or request Certn do so on Your behalf) within three business days of such request. The copy of the Report shall contain the name, address, and telephone number of the person who issued the report and how to contact such person.
Under all applicable circumstances, comply with California Civil Code Sections 1785.20 and 1786.40 in the taking of adverse action, which shall include, but may not be limited to, advising the Consumer against whom an adverse action has been taken that the adverse action was based in whole or in part upon information contained in the Report, informing the consumer in writing of Your name, address, and telephone number, and provide the Consumer of a written notice of his/her rights under the ICRA and the CCRAA.
THE FCRA PROVIDES THAT ANY PERSON WHO KNOWINGLY AND WILLFULLY OBTAINS INFORMATION ON A CONSUMER FROM A CONSUMER REPORTING AGENCY UNDER FALSE PRETENSES SHALL BE FINED UNDER TITLE 18 OF THE UNITED STATES CODE OR IMPRISONED NOT MORE THAN TWO YEARS, OR BOTH.
Vermont
You certify that You have received a copy of and understand Section 2480e of the Vermont Fair Credit Reporting Statute. If You are located in the State of Vermont, and/or Your request for and/or use of Reports pertains to a Vermont resident or worker, You certify that You will comply with the applicable provisions of Vermont law, including, without limitation, Section 2480e of the Vermont Fair Credit Reporting Statute(“VFCRA”). Specifically, End User certifies that prior to ordering credit reports, You will provide Certn with the name and contact information of its compliance officer or person responsible for credit reporting compliance at the time of Credentialing, if applicable.
New York City, New York.
You understand that the New York City Humans Rights Law (“NYCHRL”) imposes various legal requirements on covered employers and businesses. You, as the End User, or as an agent acting on behalf of the End User, shall comply with all applicable requirements under NYCHRL. Among other things, You make the following certifications with respect to NYCHRL:
End User shall not obtain or evaluate criminal history information about an applicant or employee until after a conditional offer of employment, promotion, or transfer has been extended to him or her;
End User shall not inquire about or consider criminal history that is prohibited from being considered under NYCHRL;
End User shall engage in any required individualized assessment process before taking adverse action against a consumer; and
End User shall follow all legally-required pre- and post-adverse action procedures including, but not limited to, ensuring all pre- and post-adverse action communications include all information required under the law and are sent at the appropriate times.
Notwithstanding any limitations of liability set out in this Agreement, You shall indemnify and hold harmless Certn, its affiliates, and subsidiaries and their respective officers, directors, employees, agents, and insurers from and against any and all damages, penalties, losses, liabilities, judgments, settlements, awards, costs, and expenses (including reasonable attorneys’ fees and expenses) arising out of or in connection with any third-party claims, assertions, demands, causes of action, suits, proceedings or other actions, whether at law or in equity, related in any manner to End User’s failure to comply with NYCHRL.
Massachusetts Criminal Record Information Policy. As applicable to You or the Report that You request, You hereby certify that, under the Commonwealth’s Criminal Offender Record Information (“CORI”) law, if You are located in the State of Massachusetts, and/or Your request for and/or use of Reports pertains to a Massachusetts resident or worker, You certify to all of the following:
Before asking a Consumer about their criminal records, You will provide a Consumer with copies of these records if You are in possession of such records;
That before taking adverse action based, in whole or in part, on criminal history records, You will notify the Consumer of the potential adverse employment decision by sending required pre-adverse and adverse action notices and any other applicable notices. The pre-adverse action notice will include the criminal history records, the sources of the records, a copy of Your CORI policy, and a copy of information from the state agency about the process for correcting a criminal record; and
That You will also provide the Consumer with an opportunity to dispute the accuracy of the criminal history records by waiting at least five business days before taking final adverse action.
MVR Services. If You request MVRs and/or driving records, You certify and agree:
That no MVRs shall be ordered without first obtaining the written consent of the Consumer to obtain “driving records”, evidence of which shall be transmitted to Certn unless collected directly by Certn. You certify that You will use this information only in the normal course of business (i) to obtain lawful information relating to the holder of a commercial driver’s license, or (ii) to verify information provided by the Consumer. You shall protect the privacy of the information of the Consumer in an MVR and shall not transmit any data contained in the resulting MVR via any unsecured means.
For Reports applicable to US Consumers You will order the MVRs and/or driving records in strict compliance with the US Driver’s Privacy Protection Act (“DPPA”, at 18 U.S.C. § 2721 et seq.) and any applicable state Laws.
SSN Trace. If Reports include Social Security Number Trace (“SSN Trace”), You shall not use SSN Trace results in any way, directly or indirectly, for the purpose of making employment decisions. You certify that You will not use SSN Trace information in any way that would violate the privacy obligations or any other terms and provisions of the Gramm-Leach-Bliley Act (15 U.S.C 6801 et seq.) or the DPPA (18.U.S.C. Section 2721 et seq.) or any other similar U.S. state or local statute, rule or regulation.
National/Multi-State/County Database. Certn recommends that You screen applicants at the county courthouse or online system, federal, and multi-state/nationwide database levels. If You choose not to conduct searches at these levels, Certn is not liable for any records that exist that are not included in the Report.
Reporting of Criminal History. As it relates to criminal history information in the United States, Certn only reports pending court matters and conviction records and will report a minimum of 7 years of conviction information, where allowed by any applicable fair credit reporting laws, unless End User provides additional reporting instructions in a separate document executed by the End User and the Consumer. In determining whether a criminal record is reportable, Certn does not apply any state or local laws restricting Your use of criminal history. End User assumes full responsibility for determining whether reported information may be used in the jurisdiction where the consumer lives, works, or is applying for work.
General Credit Certifications. If Reports include any credit information or verification services provided by and data originating from Equifax, You agree, acknowledge and certify, in addition to the above:
You will promptly notify Certn of any change in the End User’s location, structure, ownership or control, including but not limited to the addition of any branch(es) that will be requesting and/or accessing credit information.
You, as the End user or as an agent of the End User, will cooperate with any reasonable audit request by Certn and/or Equifax to assure compliance with the terms of this Agreement with respect to Equifax Information; provided that Certn and/or Equifax, as applicable: (i) shall give End User reasonable prior notice of any such audit; (ii) shall ensure that any such audit shall be subject to End User’s security policies and third-party confidentiality obligations; and (iii) shall conduct or cause to be conducted such audit in a manner designed to minimize disruption of End User’s normal business operations. Audits will be conducted by email whenever possible and will require End User to provide documentation as to permissible use of particular Equifax Information.
You will use commercially reasonable efforts to establish procedures and logging mechanisms for systems and networks that will allow tracking and analysis in the event there is a compromise, and maintain an audit trail history for at least three (3) months for review. In the event there is a Security Incident involving Equifax Information, You agree to fully cooperate with Equifax in a security assessment process and promptly remediate any findings.
Any failure to cooperate fully and promptly in the conduct of any audit, or End User’s material breach of the foregoing, constitutes grounds for immediate suspension of the Services or termination of the Agreement. If Equifax requests that Certn terminate this Agreement due to the conditions in the preceding sentence, End User (i) unconditionally releases and agrees to hold Equifax harmless and indemnify it from and against any and all liabilities of whatever kind or nature that may arise from or relate to such termination, and (ii) covenants it will not assert any claim or cause of action of any kind or nature against Equifax in connection with such termination.
You will indemnify and hold harmless Equifax from any liability and attorneys’ fees incurred due to End User’s violation of any of the terms of this Agreement with respect to the Equifax Information, notwithstanding any limitations of liability set out in the Agreement.
Equifax does not guarantee the accuracy or completeness of any Equifax Information. You release Equifax and its affiliate companies, agents, employees, affiliated credit reporting agencies and independent contractors from any liability, including negligence, in connection with the Equifax Information and from any loss or expense suffered by End User resulting directly or indirectly from Equifax Information.
Cloud Service. You may use a Cloud Service Provider (“CSP”) to process, transmit, or store Equifax Information. You certify that You will, and that You will contractually obligate Your CSP to, follow Equifax’s minimum requirements for cloud computing and storage, including but not limited to (i) data at rest encryption of at least AES-256 (ii) destruction in accordance with industry standards, and (iii) industry security handling standards such as DISA STIG or CIS guidance.
Equifax Audit. If Equifax reasonably believes that You have violated any requirements related to Equifax Information, Equifax may, in addition to any other remedy authorized by this Agreement, with reasonable advance written notice and at Equifax’s sole expense, conduct, or have a third party conduct on its behalf, an audit of End User’s network security systems, facilities, practices and procedures to the extent Equifax reasonably deems necessary, including an on-site inspection, to evaluate End User’s compliance with the data security requirements.
Territory. You may only store Equifax Information within the boundaries of Canada or the United States (the “Territory”). You may not access, use or store Equifax Information, at or from, or send it to any location outside of the Territory without first obtaining Equifax’s written permission.
UK Criminal Record Requirements. If You are requesting criminal record results on Consumers for employment purposes within the UK:
You agree to fully comply with the Disclosure & Barring Service (“DBS”), Disclosure Scotland (“DS”) and/or AccessNI (“ANI”), or relevant processing standards (the “Code”) and ensure all Consumers are aware of the Code at the start of the recruitment process and make available a copy of the Code to the Consumer on request;
You confirm that the End User has a written policy regarding the hiring of ex-offenders, available upon request; and
You will notify Certn of who within Your organization is entitled to receive disclosure information and will promptly notify Certn of any changes
Australian Criminal Intelligence Commission (“ACIC”) Check Requirements.
If You are requesting a Nationally Coordinated Criminal History Check, as regulated by the ACIC, you acknowledge that the check will be completed by Certn’s Australia partner, InterCheck Global Pty Ltd. (“InterCheck”), further, You acknowledge that no results will be sent to You directly until the Consumer has authorized the release of the same.
You acknowledge that ACIC checks shall only be provided through InterCheck’s platform, and not through any API integrations, unless a separate Legal Entity Consumer (as defined by the ACIC) agreement has been executed by both You and InterCheck.
9. Each party agrees that any violation of these confidentiality provisions will cause irreparable injury to the other party entitling the other party to injunctive relief or other equitable relief, in addition to, and not in lieu of, any other remedies such party may be entitled to. The disclosure of Confidential Information will be governed by this Agreement, which supersedes any previous confidentiality or nondisclosure agreement executed by or on behalf of the parties. Any such Confidential Information will be treated as if it were disclosed under this Agreement (and this Agreement were in effect) as of the date of such exchange.
Certn: compliance@certn.co or by mail to 1006 Fort St Suite 300, Victoria, BC V8V 3K4.