Terms of use · Safe Creative Platform

Last updated: 9 October 2026 · Version: 2026-10

1. Who we are and what these terms govern

1.1. Safe Creative Platform ("the Service") is the certified event registry service provided by Safe Creative, S.L. ("Safe Creative"), tax ID B99161739, with registered office at C/ Bari 55, bloque 7, 2.º, Edificio Náyade (Plaza), 50197 Zaragoza (Spain), registered in the Zaragoza Companies Registry, volume 3534, book 0, sheet 192, entry 1. It is accessible at platform.safecreative.org and through its API. Contact: through the support form in the console.

1.2. These terms govern the use of the Service, its console and its API. Between you and Safe Creative they form a contract, which you accept when you activate the Service on your account. The version you accept and the date of acceptance are recorded.

1.3. To use the Service you need a safecreative.org account; the free account is enough. The account, your identity and your tax details are governed by the safecreative.org terms. As regards the Service, these terms prevail. The Service is independent of safecreative.org plans and credits: it neither consumes nor modifies them, and they do not affect it.

1.4. For professionals and businesses only. The Service is offered exclusively to businesses, professionals and organisations that use it in the course of their business or professional activity. It is not provided to consumers. By accepting these terms you declare that you are contracting for that purpose and that you are not acting as a consumer. If you accept on behalf of an organisation, you declare that you have sufficient authority to bind it, and the organisation is bound by these terms. Safe Creative may ask you to prove your professional status, for example with your tax identification number, and may suspend the Service until you do.

1.5. Operators. If your safecreative.org account has operators, they may work in the Service with the permissions you have given them. Only you and the operators with the super-administrator role can see the credits, the purchases and the account details, buy credits and activate the Service. Everything the operators do in your account is attributed to you.

2. Definitions

Account: your safecreative.org account with the Service activated. It is the owner of the channels, the keys, the credits and the certifications.
Channel: the path through which your systems declare the events of a specific process. It has a configuration with a name, a description, a mode, a designated declarant and supplementary information.
Mode: how events are declared in a channel. In content mode you send the data and Safe Creative keeps it in custody. In hash-only mode you send only the cryptographic hash of the data, which never leaves your systems.
Designated declarant: the natural or legal person on whose behalf the events of a channel are declared, as indicated by the owner when configuring it.
Event: each declaration received by a channel.
Proof elements: what the Service generates for each event: hash, sequence number, chaining to the previous event and a reference to the sealed segment that covers it.
Acknowledgement: the response with which the Service confirms that it has received an event and assigned it its position in the sequence.
Sealed segment: the set of events of a channel received within the same time window and covered by the same qualified time stamp.
Certification: the two reports signed by Safe Creative, in Spanish and in English, on a range of events of a channel, together with their evidence archive and their verification code.
API keys: the credentials of each channel. Production keys generate events with probative value and consume credits. Test keys do not.
Credits: the prepaid unit with which the Service is paid for. They are bought in packs and are deducted for each production event and, where the price list so provides, for each certification.
Price list: the Service's pricing page, with the packs, their prices and the credits consumed by each operation.

3. What the Service does and what it does not do

3.1. What it does. The Service receives the events declared by your systems, assigns each one a sequence number within its channel, chains it to the previous events and covers it with the qualified time stamp of its segment, issued by a qualified trust service provider in accordance with Regulation (EU) No 910/2014 (eIDAS) and verifiable through open standards in any country. When you request it, the Service issues a certification that the sequence of a range is intact: what was declared, when it was received and that nothing has been altered or removed since.

3.2. Sealing by segments. The Service does not seal each event separately. It groups the production events received within each time window, of 5 minutes at most, into a segment, and obtains for it a qualified time stamp from a qualified trust service provider. Every production event is thus covered by the qualified time stamp of its segment which, being chained, comprises the event and all the previous ones. The acknowledgement returns the reception time recorded by Safe Creative; the time stamp proves that the event existed, at the latest, on the date and time of the stamp. The Service documentation explains the mechanism in detail.

3.3. It certifies declarations, not facts. Safe Creative attests what was declared and when it was received. It does not check or guarantee that what was declared is true, complete or accurate, or that it happened. The date you declare as the moment of the fact is part of your declaration. What the Service attests is the reception date, and the probative order is the order of reception.

3.4. Proof, not regulatory compliance. The Service produces third-party evidence. It does not guarantee that you comply with any regulation, and its use does not replace your legal obligations or professional advice. Nor does it guarantee how a court, an authority or a counterparty will assess the evidence in a specific case, in any country: the evidential value of a qualified time stamp and of a third-party registry depends on the rules of each jurisdiction.

3.5. Under the Safe Creative brand. Certifications are always issued with the Safe Creative brand and signature. The Service is not offered as a white-label product.

4. Channels and configuration

4.1. The configuration of a channel is sealed with its date when the channel is created and every time it changes. Each change creates a new version, no version is rewritten and certifications indicate the versions in force in the certified range.

4.2. Responsibility of whoever configures the channel. When you create or modify a channel, you designate the declarant and take responsibility for that designation and for the rest of the configuration. In the certifications, the designation appears as a statement of the channel owner, not as something verified by Safe Creative. If you designate a third party, you warrant that you have their authorisation to declare on their behalf and for their name to appear in certifications that cannot be modified.

4.3. You are responsible for choosing the appropriate mode for each channel. If the events contain personal data or confidential information, we recommend the hash-only mode.

5. API keys and security

5.1. Each API key identifies a channel and its mode (production or test). It is shown only once, when created. You must store it securely and not share it beyond the systems that need it.

5.2. Any event declared with a valid key of your channel is deemed declared by you. If you suspect that a key has been compromised, revoke it in the console. Revocation takes effect immediately, but does not affect events received before.

5.3. You must respect the API usage limits published in the documentation (request rate, bursts and maximum event size), as well as the consumption limits you configure yourself.

6. Acceptable use

6.1. You may not use the Service to:

declare unlawful content or content that infringes third-party rights;
process special categories of personal data in content mode without a legal basis that allows it;
present certifications as something other than what they are, or attribute to Safe Creative statements about the truth of what was declared;
alter, trim or rework certifications, or remove the Safe Creative brand from them;
compromise the security or availability of the Service, circumvent its limits or access data of other accounts;
probe the verification page to discover other people's certifications.

6.2. You may integrate the Service into your products and offer your own customers the certifications you obtain, provided they are presented as issued by Safe Creative and under the terms of this section, with no need for a separate agreement with Safe Creative. The relationship with your customers is yours alone: you are responsible for what you offer them and for passing on to them the conditions of these terms that affect them.

7. Test mode

7.1. Test keys let you test the complete integration at no cost: registering, querying, certifying and verifying.

7.2. Test events and certifications have no probative value. They use simulated time stamps and a technical test signature, they live in a separate chain that is never mixed with the production chain, and test certifications are marked "TEST — NO PROBATIVE VALUE". The verification page identifies them as such.

7.3. Test data is deleted automatically after 30 days without activity. Do not use it to keep anything. Test keys have daily limits on events, content and certifications, as published in the documentation.

8. Price, credits and invoicing

8.1. Prepayment with credits. The Service is paid for in advance with credits, which are bought in packs in the console. Each production event received deducts the credits set by the price list in force at the time of its reception; today, one credit per event. If the price list assigns a price in credits to the issuance of certifications, it is deducted when the request is accepted and refunded if issuance fails for a cause attributable to the Service. Safe Creative may offer packs and particular conditions by contract.

8.2. Prices, currency and taxes. Prices are shown in euros, pounds sterling or US dollars depending on the billing country of your account or, if you have no billing details, the country of your contact details. Prices are net: applicable taxes are added at payment. Each purchase generates a Safe Creative invoice with the tax details of your safecreative.org account, which you must keep up to date.

8.3. Auto top-up. You may enable auto top-up: when your credits fall below the threshold you choose, the Service will buy the pack you have indicated with the stored payment method, up to the maximum number of daily purchases published in the documentation. If a charge fails, auto top-up is disabled and we notify you. You may disable it at any time.

8.4. Price changes. Safe Creative may change the price list with at least 30 days' notice by email and in the console. Changes do not affect credits already bought or events already received.

8.5. No refunds. Credits are not refunded, unless Safe Creative terminates the contract for a cause not attributable to you (section 13.4) or the law requires it.

8.6. Cancelled purchases. If a purchase is cancelled after payment, by refund or chargeback, all the credits of that purchase are deducted, even if the balance becomes negative. With a negative balance, no certifications can be requested until you settle it with a new purchase. Events already settled with those credits do not become unpaid again.

9. Credits exhausted: unpaid events

9.1. The sequence is not interrupted for lack of credits. If you do not have enough credits when an event is received, the event is registered anyway, with all its proof elements, but in unpaid status. Its price becomes a debt of the account.

9.2. While there are unpaid events:

no certification can be requested for the account ("account without operating balance");
if the account's unpaid event limit is reached, the Service rejects new events until you buy credits. Safe Creative sets that limit.

9.3. When you buy credits, unpaid events are settled first, oldest first; if the purchase does not cover the whole debt, the remainder stays unpaid. Settling an unpaid event does not alter any of its proof elements.

9.4. The Service notifies you by email, and by automatic notification to your systems ("webhook") if you have configured it, when the first unpaid event is registered and when the limit is reached. To avoid both situations you may configure alert thresholds, auto top-up and consumption limits.

9.5. The debt for unpaid events is enforceable. If it is not settled within 60 days from the first unpaid event, Safe Creative may suspend the account (section 13.2) and claim it. Overdue amounts accrue the late-payment interest and the compensation for recovery costs established by the law governing the contract (section 17); under Spanish law, Law 3/2004 on measures to combat late payment in commercial transactions.

10. Certifications and public verification

10.1. Certifications are issued asynchronously, on request, on a range of production events of a channel. They consist of two reports signed by Safe Creative, one in Spanish and one in English, with the same verification code and the same evidence archive; both are equally authentic and each one is verified on its own. Indicative issuance times are given in the documentation.

10.2. You may share certifications with whomever you wish, always complete and unaltered.

10.3. Public verification. Anyone who holds a certification can check its authenticity and integrity on the public verification page, without an account and free of charge, by entering its code or uploading the file. The page shows only data already contained in the certification itself: issuer, date, channel, designated declarant, range, number of events, configuration versions and hash. By requesting a certification you accept that this data may be consulted with its code. The page does not record any data about who verifies, and files uploaded for verification are not kept.

10.4. Certification download links expire after 7 days, but you may regenerate them from the console or the API for as long as the certification is retained.

11. Availability of the Service

11.1. The Service is designed so that no acknowledged event is lost: the acknowledgement is issued only once the event is stored and replicated. If a choice ever has to be made between availability and durability, durability comes first, and the Service may temporarily reject events rather than confirm them without that guarantee.

11.2. Safe Creative takes reasonable measures to keep the Service continuously available. It does not guarantee uninterrupted availability, except for the service level agreed in writing with each customer in a separate agreement.

11.3. The status of the Service and the incident history are published at status.safecreative.org. Scheduled downtime is announced in advance whenever possible.

11.4. You must integrate the Service following the retry guide in the documentation. Idempotency by event reference ensures that a retry does not duplicate or charge the same event twice.

11.5. If the time-stamp provider is unavailable, the Service keeps receiving and chaining events, which remain pending a time stamp, and seals the segment once the provider is restored. The time stamp bears the date and time at which it was obtained, and the evidence reflects it. The incident is recorded.

12. Data, retention and data protection

12.1. Your data is yours. You keep all rights over what you declare. You grant Safe Creative the authorisation needed to process it for the sole purpose of providing the Service: keeping it in custody, sealing it, chaining it, certifying it and verifying it.

12.2. Retention. Production events, their content, their proof elements and the certifications are kept intact for at least 5 years from the reception of each event. Certifications you have downloaded are verifiable with their evidence archive, without the need for Safe Creative. Notifications sent, deliveries to your servers, the account activity log and operational traceability are kept for the life of the account.

12.3. Immutability. Registered events and issued certifications cannot be modified or selectively deleted without breaking the chain, which is what is certified. Before declaring personal data in content mode, or designating a natural person as declarant, you must take this feature into account.

12.4. Data protection.

With regard to your account data and the Service's operational traceability data (activations, keys, IP addresses and payments), Safe Creative is the data controller, in accordance with its privacy policy.
With regard to any personal data contained in the events you declare, you are the controller under the data protection rules applicable to you, in your country or in that of the persons concerned, and Safe Creative acts as processor on your behalf, under the data processing agreement in the annex, which forms part of these terms.

12.5. Legal requests. Safe Creative may provide the competent judicial or administrative authorities, when they so require in accordance with the law, with the data of a channel and the traceability that links it to your account: activation, keys, purchases and certifications requested. Each access to that information is recorded with its reason. We will inform you when the law allows it.

12.6. Notifications. Service notifications are sent to the email address of the account owner and to any additional recipients you configure. You are responsible for ensuring that those recipients are informed of this.

13. Term, suspension, inactivity and closure

13.1. Voluntary closure. You may stop using the Service and request closure of your account at any time. Any outstanding debt must be settled before closure.

13.2. Suspension. Safe Creative may suspend an account, a channel or a key in the event of breach of these terms, fraudulent use, overdue debt, risk to the security of the Service or a request from an authority. While the suspension lasts you may consult your data, but the Service does not register events or issue certifications, and the API rejects requests with a specific error. Suspension never alters events or chains already registered.

13.3. Inactivity. If for 365 days your account registers no events, requests no certifications and buys no credits, it is deactivated, with email warnings 30 and 7 days beforehand. A deactivated account has no access to the console or the API, but keeps its data and its credits. You may request reactivation through support, at no cost.

13.4. Termination by Safe Creative. Safe Creative may terminate the contract with 90 days' notice. If it does so for a cause not attributable to you, it will refund the amount of the credits not consumed.

13.5. After closure, issued certifications remain verifiable on the public page during the retention period of section 12.2. Unused credits are lost (section 8.5).

13.6. Export. While the account is active, you may download your events, their proof elements and your certifications in a structured format from the console or the API.

14. Intellectual property and brand

14.1. The software, the API, the documentation, the design of the certifications and the trademarks of the Service belong to Safe Creative or its licensors. These terms do not assign you any rights over them, other than the right to use the Service as provided herein.

14.2. You may state that your product uses the Service and use the Safe Creative brand for that purpose, in accordance with the brand guidelines published by Safe Creative.

15. Liability

15.1. Safe Creative is liable for providing the Service in accordance with these terms and, in particular, for the integrity and retention of acknowledged events and their proof elements.

15.2. Safe Creative is not liable for:

the truth, lawfulness or accuracy of what is declared, or the designation of the declarant;
the assessment that a court, an authority or a third party makes of the certifications;
events that never received an acknowledgement, for example because of failures in your systems or your connection, or because the retry guide was not followed;
the use of your API keys by third parties before their revocation;
the loss of credits through the cancellation of a purchase;
the deletion of test data.

15.3. Except in cases of wilful misconduct or gross negligence, Safe Creative's total liability arising from the Service is limited to five times the amount actually paid by you in the twelve months preceding the event giving rise to it, and does not include loss of profit or indirect damages.

15.4. You are liable to Safe Creative for any damage caused by your breach of these terms, and in particular for third-party claims arising from what was declared or from the designation of the declarant.

16. Changes to these terms

16.1. Safe Creative may modify these terms. When they change, the console will show you a notice with the new version.

16.2. If you do not agree, you may close your account. If you continue using the Service after the notice, you are deemed to have accepted the new version. The version accepted by each account and its date are recorded.

17. Language, governing law and jurisdiction

17.1. These terms are published in Spanish and in English. In the event of any discrepancy, the Spanish version prevails.

17.2. They are governed by Spanish law. For any dispute, the parties submit to the Courts and Tribunals of Zaragoza, Spain.

Annex. Data processing agreement

[Pending legal review: subject matter, duration, categories of data and data subjects, instructions, confidentiality, security measures, sub-processors (including the time-stamp provider, hosting and the payment gateway), assistance to the controller, notification of security breaches and the fate of the data on termination, subject to immutability (section 12.3) and retention (section 12.2).]