Terms and Conditions

Part 1

General Terms

This Part applies to every service we provide.

1. Parties and Definitions

These Terms are entered into between you (the “Client”) and the service provider:

In these Terms: “CoreLedger”, “we”, “us” or “our” means CoreLedger – F.Z.E; “Services” means the accounting, bookkeeping, tax, payroll, reporting, compliance, advisory or other services we agree to provide, CoreLedger Verify and CoreLedger Go, as described in the relevant invoice, quotation, proposal, order, order confirmation, plan or written correspondence; “Engagement” means the supply of any Services to the Client; and “Fees” means the amounts payable for the Services. The Client and CoreLedger are referred to collectively as the “Parties” and individually as a “Party”. A term defined in a Part has that meaning in that Part.

2. Acceptance of These Terms

The Client is deemed to have read, understood and accepted these Terms, and they become legally binding on the Client, upon the earliest of:

• payment, in whole or in part, of any invoice issued by CoreLedger that refers to these Terms;
• any written or electronic instruction by the Client for CoreLedger to commence or continue the Services;
• the Client’s continued use of, or acceptance of the benefit of, the Services;
• any other act of acceptance set out in the Part for a particular service (for example, signing in to a service or creating an account).

Each invoice we issue refers to these Terms and states where they are published. In accordance with the UAE Federal Decree-Law No. (50) of 2022 promulgating the Commercial Transactions Law, the Federal Decree-Law No. (25) of 2025 promulgating the Civil Transactions Law, and the Federal Decree-Law No. (46) of 2021 on Electronic Transactions and Trust Services, acceptance may be given by conduct (including payment) and in electronic form, and such acceptance is valid, binding and enforceable without a handwritten signature. The Parties agree that an electronic record of acceptance (including the record of payment of an invoice) satisfies any requirement that their agreement, including these Terms, be made or evidenced in writing. A person who accepts these Terms on behalf of a company confirms that they are authorised to do so.

3. Fees, Invoicing and Payment

• Fees are those stated in the applicable invoice, quotation, proposal, order or plan. The Part for a particular service may set further rules on when and how its Fees are paid.
• Unless expressly stated to be inclusive, all Fees are exclusive of VAT and any other applicable taxes, levies or duties, which the Client shall pay in addition.
• Invoices are payable in full, without set-off, deduction or withholding, by the due date stated on the invoice.
• We may charge late-payment interest on overdue amounts at 1.5% per month (or the maximum permitted by UAE law, if lower), accruing daily from the due date until payment.
• If any invoice is overdue, we may, without liability and without prejudice to our other rights, suspend or withhold all or part of the Services and any deliverables (including filings and access to work product) until all outstanding amounts are paid in full.
• Fees are non-refundable to the extent they relate to Services already performed or to time already incurred. Pre-paid Fees for Services not yet performed are refundable only as expressly provided in these Terms.
• We may revise our Fees and rates from time to time; revised Fees apply to Services invoiced after the revision.

4. Confidentiality

Each Party shall keep confidential all non-public financial and business information received from the other Party in connection with the Services and shall not disclose it to any third party without the other Party’s prior written consent, except where disclosure is required by law, regulation, a court or a competent authority, or to our professional advisers, subcontractors or affiliates who are bound by equivalent confidentiality obligations. These obligations continue for five (5) years after the Engagement ends. Nothing in this clause restricts our use of anonymised or aggregated data, or our rights under clause A6 (Marketing).

5. Data Protection

We process personal data in accordance with the UAE Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data (PDPL) and our Privacy Policy, which forms part of these Terms. The Client confirms it has the right to share with us any personal data it provides and that it does so in compliance with applicable data-protection law.

6. Anti-Money-Laundering and Compliance

We are subject to UAE AML, counter-terrorist-financing and sanctions obligations and to our AML Policy. We may carry out customer due diligence and ongoing monitoring, request information at any time, and decline, suspend or terminate the Services and/or make any report required by law. We shall have no liability to the Client for any action taken, or Service withheld or delayed, in order to comply with these obligations, and we are not required to notify the Client of any report made to the authorities.

7. Intellectual Property and Work Product

All methodologies, templates, models, software, know-how and materials we own or develop remain our property. On full payment of all Fees relating to the relevant deliverable, we grant the Client a non-exclusive, non-transferable licence to use that deliverable for its own internal business purposes. Until all Fees are paid in full, all deliverables and work product remain our property and we may withhold them. The Client retains ownership of its own pre-existing materials and data supplied to us.

8. Limitation of Liability

The following limitations apply to the maximum extent permitted by UAE law:

• We are not liable for any indirect, incidental, special or consequential loss, or for any loss of profit, revenue, business, goodwill, data, savings or opportunity, however arising.
• Our total aggregate liability arising out of or in connection with the Services, whether in contract, tort (delict) or otherwise, is limited to the total Fees actually received by us from the Client for the specific Service giving rise to the claim during the three (3) months immediately preceding the event giving rise to the claim.
• We are not liable for any loss arising from: information, documents or instructions that are inaccurate, incomplete, misleading or provided late by the Client; the Client’s failure to act on our advice or deliverables; the acts, omissions, systems, charges, decisions or delays of any third party (including banks, the Federal Tax Authority and other authorities, software providers, auditors and couriers); or any cause beyond our reasonable control.
• Any claim must be notified to us in writing within three (3) months of the date on which the Client became aware, or ought reasonably to have become aware, of the circumstances giving rise to it, and in any event no later than six (6) months after the relevant Service was performed, failing which the claim is waived.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under UAE law, including liability for fraud, for wilful misconduct, or for gross negligence.

9. Indemnity

The Client shall indemnify and hold us harmless against all claims, losses, liabilities, fines, costs and expenses (including reasonable legal fees) we incur arising out of or in connection with: the Client’s breach of these Terms; any inaccurate, incomplete or unlawful information, document or instruction provided by the Client; or any claim by a third party (including any authority) arising from the Client’s acts, omissions or affairs, save to the extent directly caused by our gross negligence or wilful misconduct.

10. Term, Suspension and Termination

• The Engagement begins when these Terms are accepted (clause 2) and continues until completed or terminated. The Part for a particular service sets how that service may be ended on notice.
• We may suspend or terminate the Engagement with immediate effect on written notice if the Client fails to pay any amount when due, breaches these Terms, or where required for legal or compliance reasons.
• On termination the Client shall pay for all Services performed up to the date of termination together with expenses incurred. Where we terminate for the Client’s breach or non-payment, all outstanding Fees become immediately due.
• Clauses that by their nature should survive termination, including Fees due, Confidentiality, Data Protection, Intellectual Property, Limitation of Liability, Indemnity, and Governing Law and Jurisdiction, survive.

11. Force Majeure

We are not liable for any delay or failure to perform caused by events beyond our reasonable control, including acts of God, natural disaster, epidemic or pandemic, war, terrorism, civil unrest, governmental or regulatory action, change in law, failure of utilities, telecommunications or third-party systems, or interruption of banking or payment infrastructure.

12. Amendments to These Terms

We may amend these Terms from time to time by publishing an updated version on our website. The version of these Terms in force at the time the relevant invoice is paid or the relevant Service is accepted governs that Service. Continued use of the Services after an update constitutes acceptance of the updated Terms. Where the Part for a particular service requires us to give advance notice of a change, we give that notice. Earlier versions remain available through the links at the top of these Terms.

13. General

• Entire agreement. Subject to the precedence rules set out at the beginning of these Terms, these Terms (Part 1 together with the Part for each service the Client uses) constitute the entire agreement between the Parties in respect of the Services and supersede all prior understandings, whether oral or written.
• Assignment. The Client may not assign or transfer its rights or obligations without our prior written consent. We may assign or subcontract our rights and obligations to an affiliate or successor.
• Notices. Notices are valid if sent by e-mail to the address each Party normally uses to communicate with the other, or to contact@coreledger.org for notices to us. The Part for a particular service may set further addresses for notices.
• Severability. If any provision is held invalid or unenforceable, the remaining provisions continue in full force, and the invalid provision is replaced by a valid one that most closely reflects the original intent.
• Waiver. No failure or delay in exercising any right is a waiver of it.
• Language. These Terms are published in English and Russian. In the event of any inconsistency, the English version prevails.

14. Governing Law and Jurisdiction

These Terms, and any dispute or claim arising out of or in connection with them or the Services (including non-contractual disputes), are governed by and construed in accordance with the laws of the United Arab Emirates.

The Parties irrevocably agree, and by accepting these Terms agree in writing for the purposes of Article 13(8) and 13(9) of the ADGM Founding Law (Abu Dhabi Law No. (4) of 2013, as amended) and the ADGM Courts Regulations, that the courts of the Abu Dhabi Global Market (ADGM) shall have exclusive jurisdiction to settle any such dispute or claim, notwithstanding that the Parties may have no other connection with the ADGM. The Parties confirm that their acceptance of these Terms in electronic form (including by payment of an invoice referring to these Terms, by signing in to one of our services or by creating an account) constitutes the written agreement required to confer jurisdiction on the ADGM Courts.

If, for any reason, the ADGM Courts decline jurisdiction or are held not to have jurisdiction over a particular dispute, that dispute shall be subject to the exclusive jurisdiction of the competent courts of the Emirate of Ajman and the federal courts of the United Arab Emirates, applying the laws of the United Arab Emirates.

Part 2

Accounting, Tax and Advisory Services

This Part applies, together with Part 1, to the accounting, bookkeeping, tax, payroll, reporting, compliance, advisory and other professional services we provide under an invoice, quotation, proposal or written correspondence. In this Part, “Services” means those services.

A1. Scope of Services

We will provide the Services described in the applicable invoice, quotation, proposal or written correspondence with reasonable skill and care. The Services are limited to what is expressly described; anything not expressly included is excluded.

• We may rely on the information, documents and instructions supplied by the Client without independently verifying them, and we are not responsible for their accuracy or completeness.
• Our role is to assist the Client; the Client remains responsible for its own records, for the decisions it takes, and for the timely fulfilment of its own statutory and regulatory obligations (including filings, payments and disclosures), except where we have expressly agreed in writing to perform a specific filing.
• Any deadline, timeline or turnaround we indicate is an estimate given in good faith and is conditional on the Client providing complete and accurate information in good time. We are not liable for delays caused by the Client or by third parties.
• We do not provide legal advice, audit or assurance services, investment advice, or any regulated service we are not licensed to provide. Where such services are required, we may help the Client engage an appropriately qualified third party at the Client’s cost.
• We may decline to provide, or may suspend, any Service, and may decline to act on any instruction, at our discretion, in particular where doing so could breach applicable law or our professional or compliance obligations.
• We may use subcontractors, affiliates or third-party software and tools in performing the Services and remain responsible for the Services as set out in these Terms.

A2. Client Obligations

The Client agrees to:

• pay the Fees and reimburse expenses in accordance with these Terms;
• provide complete, accurate and up-to-date information, documents and instructions in good time, and promptly notify us of any change;
• grant the access we reasonably require (including to accounting software, bank statements and records) to perform the Services;
• provide all data and documents we require to comply with the Know-Your-Customer (KYC), anti-money-laundering (AML) and counter-terrorist-financing laws of the UAE, and keep them current;
• review the deliverables we provide and notify us of any apparent error without undue delay;
• not engage our personnel outside the scope of the Engagement, nor solicit them for employment, during the Engagement and for twelve (12) months afterwards, without our written consent.

The Client is solely responsible for any consequence of incomplete, inaccurate, misleading or late information, or of failing to act on our advice or deliverables.

A3. Fees and Payment

• Unless stated otherwise, recurring Services are payable monthly in advance, and other Services are payable on issue of the invoice. Invoices for recurring Services are payable in any event before the 5th day of the relevant calendar month.
• Services not covered by the agreed scope are charged separately at our prevailing hourly rates (currently AED 250.00 per hour) or at a separately quoted price.
• Any Fee quoted or agreed (including a price agreed in correspondence) is based on the scope, volume and complexity of the work as described and represented by the Client at the time of agreement. Where the actual scope, volume or complexity proves materially greater than was described, or where the Client understated, omitted or misrepresented it during negotiation, we may revise the agreed Fee to reflect the actual work. We will notify the Client of the revised Fee before continuing the affected Services; the Client’s instruction to proceed, or continued use of the Services, constitutes acceptance of the revised Fee.

A4. Expenses and Disbursements

The Client shall reimburse reasonable out-of-pocket expenses and third-party disbursements incurred in connection with the Services, including software subscriptions necessary to provide the Services, translation fees, fees of specialists engaged for the Engagement, and government or regulator fees and charges. Where practicable we will agree material expenses with the Client in advance. Reimbursement is made against electronic copies of supporting documents.

A5. Penalties Caused by Our Error

Where penalties, fines or statutory charges are imposed on the Client solely and directly as a result of our gross negligence, material error or wilful misconduct in performing the Services, we will compensate the Client for the amount of those penalties, fines or charges, provided the Client supplies official documents evidencing them, and subject always to the aggregate limit of liability in clause 8.

A6. Marketing and Communications

The Client consents to (i) our use of the e-mail address provided to send informational and marketing materials about our services, from which the Client may unsubscribe at any time; and (ii) our use of the Client’s name, trade name or logo on our website and promotional materials to identify the Client as a client of CoreLedger. The Client may withdraw this consent by written notice; withdrawal does not affect processing carried out before withdrawal.

A7. Duration and Notice

• Recurring Services continue on a rolling monthly basis.
• Either Party may terminate the Engagement, or any recurring Service, on one (1) month’s prior written notice.

Part 3

CoreLedger Verify

This Part applies, together with Part 1, to CoreLedger Verify, the supplier verification service that we provide at verify.coreledger.org: the subscription Portal in which businesses check their suppliers, the forms through which suppliers provide their details, and the Supplier Passport pages that we publish for our accounting clients. For the Service: clause V10 replaces clause 3 (Fees); clause V11 replaces clauses 4 (Confidentiality) and 5 (Data Protection); clause V12 replaces clause 7 (Intellectual Property); clause V14 replaces clauses 8 (Limitation of Liability) and 9 (Indemnity); clause V15 replaces clause 10 (Termination); clause V16 replaces clause 12 (Amendments); and the force majeure rule in clause V17 replaces clause 11. Where a Client has signed a separate agreement with us for the Service, that agreement prevails to the extent of any conflict, and these Terms apply to everything it does not address. A Supplier Passport is part of the accounting services we provide to the company concerned; that engagement remains governed by its own agreement or by Part 2, and this Part governs the publication and use of the page.

V1. About this Part

This Part applies to three groups: Clients and their Users, who use the Portal on a subscription; Suppliers, who provide information through a Supplier Link or for which a Supplier Passport is published; and Visitors, who open the public pages of verify.coreledger.org. Where a clause applies to one group only, it says so.

Acceptance. A Client accepts these Terms when it signs or accepts an Order, pays an invoice for the Service or when its first User signs in to the Portal, whichever happens first. Each User accepts them by signing in, a Supplier by submitting its details through a Supplier Link, and a Visitor by using a Supplier Passport page. A person who acts for a company confirms that they are authorised to do so.

V2. Definitions

• “CoreLedger”, “we”, “us” or “our” – CoreLedger – F.Z.E.
• “Service” – CoreLedger Verify at verify.coreledger.org: the Portal, the Supplier Links and forms, the Supplier Passport and the public information pages.
• “Portal” – the subscription service for buyers at verify.coreledger.org/portal, in which a Client keeps a register of its suppliers, follows their verification and takes its decisions.
• “Client” – a business that subscribes to the Portal to check its own suppliers (the buyer).
• “Order” – the commercial proposal, quotation, agreement or invoice that sets the Client’s plan, price, billing period, supplier limit and subscription period.
• “User” – an individual to whom the Client gives access to its Portal account, with the role of owner, member or viewer.
• “Supplier” – a business whose details are checked through the Service: a supplier that a Client has invited through the Portal, or a CoreLedger accounting client for which a Supplier Passport is published.
• “Supplier Link” – the personal link that we send to a Supplier on behalf of a Client so that it can provide its details and documents.
• “Supplier Data” – the information, documents and declarations that a Supplier provides, the information about a Supplier that a Client provides, and the results of the Checks on them.
• “Checks” – the automatic and manual checks described in clause V3.
• “Verification Record” – the dated PDF report from the Portal that shows what was checked for a Supplier, when, by which method and with what result, and the Client’s decision.
• “Supplier Passport” – a page at verify.coreledger.org/<code> with the details and documents of a CoreLedger accounting client, opened from its link, QR code or code.
• “Verification Pack” – the dated PDF that a Supplier Passport issues to a named company.
• “Visitor” – anyone who opens a Supplier Passport page or another public page of the Service.
• “Party” – CoreLedger, or the Client, Supplier or Visitor bound by these Terms.
• “FTA” – the Federal Tax Authority of the United Arab Emirates; “Decision No. 13” – FTA Decision No. 13 of 2026, which sets out how a buyer has to check its suppliers in order to recover input VAT.

V3. The Service

V3.1 The Portal

In the Portal the Client:

• adds its suppliers one by one or by importing a list, with the supplier name, a contact person, an email address and the expected annual value of supplies; the annual value sets the risk tier and therefore the level of Checks;
• invites each Supplier: we send the Supplier Link by email on the Client’s behalf and up to two reminders if the form is not completed;
• sees the status of every Supplier, the result of every Check with its date, method and evidence, and the changes that a Supplier makes;
• decides whether to approve or reject each Supplier, records the checks of individual invoices, and downloads Verification Records, the register of suppliers and archives of documents.

The Supplier fills in its details through the Supplier Link, uploads its documents and signs the declaration set out in clause V7. We then carry out the Checks:

• automatic Checks, run by the Portal: completeness of the documents requested and whether each file is the document requested; the check digit of the TRN and its match with the VAT registration certificate; the FTA digital seal on the original VAT registration certificate; the validity of the trade licence; the check digits of the IBAN and of the signatory’s Emirates ID;
• manual Checks, carried out by CoreLedger analysts: the licence entry in the register of the issuing authority, a review of public media and reviews and, for enhanced Checks, the bank confirmation letter. Each manual Check is recorded with its date, the analyst’s conclusion and the evidence relied on, for example a copy of the register entry. For the review of public media and reviews the Portal first searches the web for negative mentions of the Supplier company (news, regulators, courts, fraud warnings, complaints and reviews) and lists what it finds with links to the sources; a CoreLedger analyst reviews the findings.

Risk tiers. Each Supplier has one of the risk tiers of FTA Decision No. 13 of 2026: exempt, standard or enhanced (supplies of AED 375,000 or more over 12 months). The Client may set a higher tier than the value of supplies requires. The system only raises a tier, for example when the invoices recorded for a Supplier exceed a threshold or its key details change often.

Monitoring. Every week the Portal checks licence expiry dates and changes in the register entries that we have recorded, and 12 months after the last review it returns each Supplier for a full review. When a licence expires, a key detail changes or a review falls due, the Client’s approval of that Supplier is withdrawn until the Checks are completed again, and the Client is notified by email. The Client or the Portal can ask a Supplier to update its details through the same Supplier Link.

V3.2 The Supplier Passport

For companies to which we provide accounting services, we can publish a Supplier Passport: a page with the company’s details and documents that its customers open from a link or a QR code, for example on its invoices, and from which they download a Verification Pack. The Supplier Passport is described in clause V8 and is free of charge for the company and for Visitors.

V4. What the Service does not do

• It is not a guarantee. Supplier Data comes from the Supplier. We check it as at the date of each Check, using the methods described in clause V3. We do not guarantee that a Supplier exists in the form it presents, is honest, solvent or compliant, that its documents are authentic beyond what those methods can reveal, or that the information remains accurate after the date of the Check. If a Supplier changes something and does not tell us or the Client, the Service will not show it until the next Check.
• It is not a certificate or an endorsement. Statuses such as “Verified”, “Reviewed” or “Provided” mean that a step has been completed, not that CoreLedger approves or recommends the Supplier.
• It is not advice and it does not bind the FTA. The Service is not legal, tax or accounting advice. Whether input tax may be recovered is decided under the law and by the FTA; a Verification Record or a Verification Pack is evidence of the checks carried out and does not bind the FTA.
• It concerns VAT only. The Checks are designed to support the supplier due diligence that Decision No. 13 requires for the recovery of input VAT. They do not address Corporate Tax, customs, licensing or other obligations of the Client.
• It does not include sanctions, PEP or anti-money-laundering screening of Suppliers. Such screening is a separate service and is provided only if agreed in writing.
• The check of each supply remains with the Client. The checks of an individual supply – its commercial rationale, the price, its consistency with the Supplier’s licence, title to the goods and the payment route – depend on the transaction. The Portal compares each invoice with the verified record (TRN, payment account, VAT) and what was supplied with the Supplier’s licensed activities, and lets the Client record the checks against each invoice, but the judgement is the Client’s.
• The decision is the Client’s. The decision to approve or reject a Supplier, to deal with it and to claim input tax is taken by the Client alone, and the Client remains responsible for its tax returns.

We consult public registers and other official sources only through the access that their operators make available to the public, and we do not bypass access restrictions. Where a register cannot be consulted, the Check stays pending or is recorded with that reason.

V5. Accounts, Users and security

• We open the Client’s account and its first User, the owner, on the basis of the Order. The owner adds and removes Users and assigns their roles: owner (all functions, the team and security settings), member (suppliers, invitations, documents, invoices and decisions) or viewer (read only).
• Users sign in with a one-time code that is sent to their email address and is valid for 10 minutes, and they may add a second factor with an authenticator app. The owner may require the second factor for all Users of the account.
• Each User account is personal and must not be shared. The Client keeps the list of Users current, removes the access of people who leave and makes sure that Users protect their email accounts and authenticator devices.
• The Client is responsible for everything done through its account by its Users and must tell us at once at contact@coreledger.org if it suspects unauthorised access. We may suspend a User’s access if we suspect that the account has been compromised.
• We never ask for passwords, payments or bank details by email. A request to change payment details that appears to come from us, a Client or a Supplier must be confirmed independently before it is acted upon.
• CoreLedger analysts have access to the Client’s account to carry out the Checks, to provide support and to keep the Service secure. They sign in through CoreLedger’s internal system with its own second factor, and their access ends when their role ends.

V6. Client obligations

The Client must:

• give accurate supplier names, contact persons, email addresses and expected annual values, and keep them current. The annual value sets the risk tier: an understated value leads to fewer Checks than Decision No. 13 may require, and that is the Client’s responsibility;
• invite only businesses that are, or are expected to become, its suppliers, and use the Service only to check them;
• have a lawful basis to provide us with the contact details of its Suppliers and to have us contact them on its behalf, and give any notice that the law requires for this;
• when importing a list from a file, include only the information needed for the Service, as in our template;
• review the results and the evidence before deciding on a Supplier;
• keep its own copies of Verification Records, documents and other evidence for the period required by UAE tax law, using the exports that the Portal provides. The Service is a tool for keeping evidence, not a substitute for the Client’s own records;
• pay the fees under clause V10 and comply with clause V9.

V7. Supplier obligations

A Supplier that provides information through a Supplier Link must:

• provide information and documents that are true, complete, current and genuine, and upload the VAT registration certificate as the original PDF downloaded from EmaraTax, without scanning or re-saving it;
• provide them only through a person authorised to act for the company, and make sure that the people whose personal data appear in them, such as the authorised signatory, have been informed;
• tell the Client of any change in its details and, when asked to update them, do so through the same Supplier Link;
• keep the Supplier Link within the company: anyone who has the link can view and change the form until it is submitted. The link is valid for 60 days; a new one can be requested from the Client.

When it submits, the person acting for the Supplier signs the following declaration, which is recorded with that person’s name, role and the time of submission:

“I confirm that the information and documents provided are true, complete and current, that I am authorised to provide them on behalf of the company, and that the company will inform the buyer of any change. I agree that CoreLedger processes this information and shares it, with the documents, with the buyer that invited the company, so that the buyer can verify the company as its supplier under FTA Decision No. 13 of 2026.”

The Service is free of charge for Suppliers. A Supplier’s commercial relationship is with the Client, not with CoreLedger. The Client sees everything that the Supplier submits through its link and the results of the Checks. If several Clients invite the same Supplier, each invitation is handled separately, and each Client sees only what was submitted through its own link.

Once a Supplier has submitted, its record stays in the Client’s register as evidence of the Checks, and the Client cannot delete it.

V8. Supplier Passport

• Who has one. A Supplier Passport is published only for a company to which CoreLedger provides accounting services, at its request or with its consent. The company may ask us to withdraw it at any time; a withdrawn page tells Visitors that it is no longer available.
• What it shows. The company’s details from its documents – legal name, trade licence, VAT registration and TRN, address, activities and authorised signatory – and copies of its documents: the trade licence, the VAT registration certificate, the memorandum of association, proof of address and a bank confirmation letter, each shown unless the company hides it, and the identity document of the authorised signatory, which is always shown. Passports and identity documents of owners, directors and other persons, other than the authorised signatory, are never shown.
• Where the details come from. The details and documents are provided by the company and compiled and reviewed by CoreLedger as its accountants. The date of our last review is printed in each Verification Pack. Clause 4 applies in full: we do not guarantee the details, and a change that the company has not told us about will not appear on the page.
• Access. Supplier Passport pages are not listed anywhere and are closed to search engines; a page opens only from its link, QR code or code. Where the company has switched on identification, the Visitor states the name of its company before the details, documents or a Verification Pack are released; where the company has limited access to its invoiced customers, only a matching company gets access. The Visitor must give its true company name. We record which company opened the page or downloaded a document or a Verification Pack, and when, and the company whose page it is can see that record.
• Verification Packs. A Verification Pack is a dated PDF issued to the named company, with the details, the checklist and copies of the documents as they stood at that moment; it is not changed afterwards. Its code can be entered at verify.coreledger.org to confirm that CoreLedger issued it and to see what it contained.
• Use. A Visitor may download and keep the documents and Verification Packs to check the company as a supplier and as evidence for its own tax records, and may give them to its auditors, tax agents, advisers and the authorities. It may not publish or sell them, use them for marketing or collect them by automated means.
• Payment details. Bank details shown on a page do not change by email. A Visitor who receives a request to pay to a different account must confirm it with the company by phone before paying.

V9. Acceptable use

No one may use the Service to:

• gain or attempt to gain access to accounts, Supplier Links, codes or data that are not theirs, including by guessing or trying codes and links;
• copy or collect content from the Service by automated means, or test, probe or overload it;
• upload malicious code, or files that are not the documents requested;
• give false information about themselves or their company, or impersonate another person or company;
• send unlawful or abusive content, or use the Service to put pressure on Suppliers or anyone else.

We limit the number of requests and may block access that breaches this clause, without notice where security requires it.

V10. Fees, plans and invoicing

• The Client’s plan – its name, price, billing period (a year or a month), supplier limit and subscription period – is set in the Order. A trial period applies only if the Order provides for it.
• Prices are in UAE dirhams and exclusive of VAT; VAT is added where it applies.
• Fees are invoiced in advance for each subscription period and are payable by the due date on the invoice, without set-off or deduction. We may charge late-payment interest of 1.5% per month on overdue amounts, or the maximum permitted by UAE law if that is lower.
• The supplier limit is the number of Suppliers that the register may hold. When it is reached, new Suppliers cannot be added until the plan is changed. Suppliers that have submitted stay in the register and count towards the limit. To change the plan, the Client contacts its CoreLedger manager; a new plan applies from the date agreed in an updated Order.
• Unless the Order provides otherwise, the subscription renews for a further period of the same length unless either Party gives written notice at least 30 days before the end of the current period. We tell the Client of any change in price at least 30 days before it applies.
• If an invoice is not paid by its due date, we may suspend the account after giving notice (clause V15). Fees paid for a subscription period are not refunded, except where we end the subscription early for a reason that is not the Client’s fault or because of our own breach, or where the law requires a refund.
• Work outside the plan, such as additional manual Checks or support beyond the plan, is quoted and invoiced separately.
• The Supplier Passport is free of charge for the companies that have one and for Visitors.

V11. Data protection and confidentiality

V11.1 General

We process personal data in accordance with Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data (PDPL), to the extent it applies, and our Privacy Policy, which forms part of these Terms. This clause describes how personal data is handled in the Service.

V11.2 Who is responsible for what

• Supplier Data in the Portal. We process the personal data contained in Supplier Data – the names and contact details of supplier contact persons, the name and identity document of the authorised signatory and similar data in the documents – on behalf of the Client, to verify the Client’s suppliers, on the instructions given by these Terms and by the Client’s use of the Portal. The Client is responsible for the lawful basis on which it provides supplier contact details to us. The Supplier’s declaration records its agreement to the processing.
• Our own records. We act on our own account for the data of Users, our records of the Checks we carried out and of the Verification Records we issued, security logs and our correspondence. We use them to provide and secure the Service, to keep evidence of our work, to establish, exercise or defend legal claims and to comply with the law.
• Supplier Passport. We publish a Supplier Passport as part of our accounting services to the company concerned and with its consent, and we are responsible for the publication and for the records of who requested documents and Verification Packs.

We use personal data only for these purposes. We do not sell Supplier Data, and we do not use contact details that a Client gives us for our own marketing.

V11.3 Where data is stored

• The Portal – Client accounts, Supplier Data, documents, Check results, Verification Records and their backup copies – is hosted on servers in the United Arab Emirates (Oracle Cloud Infrastructure, Dubai region).
• Supplier Passport pages, their documents and Verification Packs, and the public information pages of verify.coreledger.org are served from CoreLedger’s own systems hosted in the European Union (France). Requests to them pass through our server in the United Arab Emirates.
• Our analysts sign in to the Portal through CoreLedger’s internal system in the European Union; only the analyst’s name and email address pass between the two systems, and Client and Supplier Data are not copied into it.
• Our analysts may work remotely from outside the United Arab Emirates. Their access to the Portal does not move the stored data out of the United Arab Emirates.

V11.4 Service providers

We use a small number of service providers, each of which receives only what it needs for its task:

• hosting providers of the servers described above;
• an email delivery provider, which receives the recipient’s email address and the content of the message in order to deliver sign-in codes, invitations, reminders and notices. Messages do not contain Supplier documents;
• an AI model provider (Anthropic, through the Claude API, including its web search), used in three cases only. When a Client imports a supplier list from a file, it reads the list to recognise its columns and correct formatting errors, and the Client sees and confirms the result before anything is saved; only the contents of the uploaded list are sent – such as supplier names, contact names, email addresses and amounts, and any other columns the file contains. For the review of public media and reviews, it searches the web for the Supplier company; only company details are sent – its names, the issuing authority and number of its licence, its registered address and licensed activities, and no details of any individual. To compare an invoice with the Supplier’s licence, it reads the description of the goods or services supplied, as entered for the invoice, and the Supplier’s licensed activities; only these two texts are sent – not the invoice file, amounts, TRN, bank details or names of individuals. Supplier documents are not sent to any AI provider; they are read automatically on the Portal’s server in the United Arab Emirates;
• a web analytics provider (Google Analytics) on the public information pages and in the Client’s account, subject to the visitor’s cookie choices and set up so that the page addresses sent to it do not contain supplier codes or record numbers. There is no analytics on Supplier forms or Supplier Passport pages.

Some of these providers are located outside the United Arab Emirates. We use them on terms that require them to protect the data and to use it only to provide their services to us, and we make transfers with the safeguards that the PDPL requires.

V11.5 Security

Data is encrypted in transit; email addresses, bank details, identity numbers and Supplier details are also encrypted in storage. Each Client’s data is kept separate from every other Client’s, access to it is limited to the people who need it, and actions in the Portal are logged. No system is completely secure; if we become aware of a breach that affects a Client’s Supplier Data, we will tell the Client without undue delay and give it the information it needs.

V11.6 Confidentiality

Each Party keeps confidential the non-public information it receives from the other in connection with the Service. A Client’s list of suppliers, its decisions and its notes are its confidential information: we do not disclose them to Suppliers or to other Clients. A Party may disclose confidential information where the law, a court or a competent authority requires it, or to its professional advisers who are bound by confidentiality. These obligations continue for five years after the subscription ends.

V11.7 Requests and cookies

Requests about personal data may be sent to privacy@coreledger.org. Where a request concerns Supplier Data that we hold for a Client, we pass it to the Client and help it to respond.

The public information pages and the Client’s account use cookies and browser storage as described in our Privacy Policy: a cookie that stores the visitor’s cookie choices, analytics cookies subject to those choices and, in the Client’s account, the sign-in session in the browser’s storage. A Supplier Passport page sets one cookie, for up to seven days, to remember the company name that the Visitor gave.

V12. Intellectual property

• The Service, its software, checks, templates and the design of its reports belong to CoreLedger or its licensors.
• The Client keeps all rights in the information it provides, and each Supplier in its information and documents. They grant us the right to host, copy and process them to the extent needed to provide the Service and to keep evidence under clause V15.
• The Client may copy Verification Records and archives and give them to the FTA, its auditors, tax agents and advisers for its own purposes, and a Visitor may use a Verification Pack in the same way. Neither may alter a Verification Record or a Verification Pack and present it as issued by CoreLedger.
• We may use anonymised and aggregated statistics that do not identify any Client, Supplier or person to improve the Service, and we may use suggestions and problem reports freely.

V13. Availability and changes to the Service

We aim to keep the Service available at all times but do not guarantee uninterrupted operation. We may interrupt it briefly for maintenance, updates or security. Public registers, the FTA’s systems, banks, email delivery and other third parties may be unavailable or slow, which may delay Checks. Any turnaround that we indicate for manual Checks is an estimate. We may improve and change the Service; we will not remove a function that is essential to the Client’s plan without telling the Client in advance.

V14. Liability and indemnity

The following applies to the maximum extent permitted by UAE law:

• We are not liable for indirect, incidental, special or consequential loss, or for loss of profit, revenue, business, goodwill, data or opportunity, however arising.
• We are not liable for tax, for input tax that is not allowed, or for penalties or interest assessed against the Client, except to the extent that they result from our failure to carry out with reasonable skill and care a Check that a Verification Record states was carried out; that liability is subject to the limit below.
• We are not liable for loss arising from Supplier Data that is false, forged, incomplete or out of date, except to the extent that the defect would have been revealed by a Check that we stated was carried out and did not carry out with reasonable skill and care.
• We are not liable for the Client’s decisions, for its dealings with Suppliers, for the acts, systems, decisions or delays of third parties, including Suppliers, registers, the FTA, banks and service providers, or for causes beyond our reasonable control.
• Our total liability to a Client arising out of or in connection with the Service is limited to the fees that the Client paid us for the Service in the twelve (12) months before the event giving rise to the claim. Our total liability to a Supplier or a Visitor, and in connection with a Supplier Passport, is limited to AED 1,000.
• A claim must be notified to us in writing within three (3) months of the date on which the claimant became aware, or ought reasonably to have become aware, of its circumstances.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under UAE law, including liability for fraud, wilful misconduct or gross negligence.

Indemnity. The Client indemnifies us against claims, losses and costs (including reasonable legal fees) arising from its breach of these Terms, including the absence of a lawful basis to provide supplier contact details to us. A Supplier is responsible to the Client and to us for the truth of the information and documents it provides and indemnifies us against claims arising from information or documents that are false or forged. No indemnity applies to the extent that the loss is caused by our gross negligence or wilful misconduct.

V15. Term, suspension and termination

• The subscription runs for the period set in the Order and renews under clause V10.
• Either Party may end the subscription at the end of a period by notice under clause V10, or at any time by written notice if the other Party commits a material breach and does not remedy it within 14 days of being asked to. We may also end it where the law or our compliance obligations require it.
• We may suspend the account for non-payment, a breach of these Terms, a security risk or where the law requires it, and we tell the Client. During a suspension Users cannot sign in, and monitoring and reminders stop; Supplier Links already sent stay open, so that the information Suppliers submit is not lost. The data is kept, and access is restored when the reason is resolved.
• A Client can delete a Supplier from its register only before the Supplier has submitted.
• Export. Until the subscription ends, the Client can download the register of suppliers, the Verification Records and the archives of documents at any time. For 30 days after it ends, we provide the same export at the Client’s written request.
• Deletion and retention. After that period we delete or anonymise the Client’s data in the Portal within 90 days, except records that we are required by law to keep, and our record of the Checks we carried out and of the Verification Records we issued, with the evidence on which they were based. We keep that record for five (5) years after the subscription ends, so that we can confirm at the lawful request of the Client or an authority what was checked and when, and establish or defend legal claims. Backup copies are overwritten within 30 days.
• Supplier Passport. A Supplier Passport is withdrawn when the company asks or when our accounting engagement with it ends. Verification Packs already issued remain verifiable by their code.
• Clauses that by their nature continue after the subscription ends – including fees due, clauses V11, V12 and V14, this clause and clause 14 – survive.

V16. Changes to these Terms

We may update these Terms. The version and the effective date are shown at the top of this page. We give Clients at least 30 days’ notice of a material change by email to the account owner or in the Portal; a Client that does not agree may end the subscription before the change takes effect, and continued use after that date is acceptance. For Suppliers and Visitors, the version published when they use the Service applies.

V17. General

• Entire agreement. These Terms, the Order and the Privacy Policy are the entire agreement on the Service, subject to the precedence rules at the top of these Terms.
• Our role. We act as an independent service provider. We send invitations and reminders to Suppliers on behalf of the Client, but we are not the Client’s agent in any other respect and we do not take part in its dealings with Suppliers.
• Notices. We send notices to the email address of the account owner or in the Portal. Notices to us go to contact@coreledger.org, and requests about personal data to privacy@coreledger.org.
• Force majeure. Neither Party is liable for failure or delay caused by events beyond its reasonable control, including outages of public registers, of the FTA’s systems and of internet and hosting infrastructure, provided it takes reasonable steps to limit their effect.

Part 4

CoreLedger Go

This Part applies, together with Part 1, to your subscription to CoreLedger Go, the self-service accounting product available at go.coreledger.org. For the Subscription: clauses G5 and G6 replace clause 3 (Fees); clause G10 replaces clauses 4 (Confidentiality) and 5 (Data Protection); clause G12 replaces clause 7 (Intellectual Property); clauses G8 and G13 replace clause 8 (Limitation of Liability); clause G14 replaces clause 10 (Termination); clause G15 replaces clause 12 (Amendments); clause G16 replaces clause 11 (Force Majeure); and clause 9 (Indemnity) does not apply. Any other Services we provide to you (for example a one-off catch-up of past periods, payroll or advisory work) are not part of the Subscription and are governed by Part 2 or by a separate signed agreement.

G1. Definitions

In this Part:

• “Client” means the person for whom the Go account is opened: a company or other legal entity, or a natural person, meaning a freelancer working under a freelance permit or licence, or an individual without a licence (for example, a person letting property). Where you sign up on behalf of a company, you confirm that you are authorised to bind it.
• “Go” or the “Platform” means the CoreLedger Go web application and the services delivered through it.
• “Subscription” means your paid access to Go under one of the Plans; “Plan” means a tariff described in clause G5.
• “Documents” means invoices, receipts, bank statements and other records you upload; “Records” means the transactions, journal entries, reports and other data Go produces from them.
• “Return” means a VAT return or a Corporate Tax return filed with the Federal Tax Authority (“FTA”).

G2. Acceptance

You accept these Terms (Part 1 and this Part) by ticking the acceptance box and creating a Go account. Clause 2 applies to that acceptance.

G3. Your Account and Due Diligence

• You must be at least 18 years old, conduct business or earn income in the United Arab Emirates, and give accurate and complete information when you sign up and afterwards.
• CoreLedger is a designated non-financial business and profession under UAE anti-money-laundering law and must identify its clients. You agree to complete our customer due diligence (KYC) questionnaire and provide the documents it asks for. You may use Go for a limited period while you complete it, as shown in the application; after that period, access is limited until the questionnaire is submitted. We file Returns on your behalf only once your due diligence has been approved.
• You are responsible for keeping your login credentials secure and for everything done through your account. Tell us at once at contact@coreledger.org if you suspect unauthorised access.

G4. The Service

• What Go does. You upload Documents; Go reads them with automated, AI-assisted recognition and proposes the transaction, its category and the journal entry. Where something is unclear, Go asks you a question rather than guessing.
• A person always decides. AI output is a draft. A CoreLedger accountant reviews the draft entries for each period and confirms them; nothing is posted to your books, and no Return is filed, on the strength of AI output alone.
• What you get. A chart of accounts and a double-entry ledger, a document archive, a tax calendar for your VAT and Corporate Tax periods, profit-and-loss and balance-sheet reports, exports of your Records, and the Plan inclusions in clause G5.
• Limits. The Go and Go VAT Plans cover up to 35 invoices a month, incoming and outgoing together (our own invoices for the Subscription do not count); the Go Dormant Plan covers up to 10 transactions a year. If your volume regularly exceeds your Plan, we will propose a suitable Plan or a separate quotation.
• Switching to Go. If you come to us from another accountant or accounting system, we move your books into Go free of charge: the opening balances at the date you switch, your chart of accounts, and the transactions of your current financial year from the export of your previous system (for example QuickBooks, Zoho Books, Xero or a spreadsheet), and we upload the documents you hold into your archive. You authorise us to request these exports from your previous provider on your behalf. Earlier years are kept as an archive, not re-entered. Reconstructing records that were never kept is not a migration; it is a catch-up of past periods.
• What is not included. Payroll, fixed-asset registers, inventory accounting, audit or assurance, group consolidation, legal advice, and the reconstruction of past periods that were not kept in Go. Catch-up of past periods is offered separately under Part 2.

G5. Plans and Fees

Prices are in UAE dirhams and include VAT.

• Go Freelance: AED 49 per month. For natural persons: freelancers and individuals without a licence. No Returns are included; a Return, where one is needed, is charged as for the Go Plan.
• Go Dormant: AED 468 per year, payable annually in advance only. For dormant companies with up to 10 transactions a year. The nil Corporate Tax return is included.
• Go: AED 99 per month. For companies that are not registered for VAT. The Corporate Tax return is charged at AED 500 when it is filed.
• Go VAT: AED 249 per month. For VAT-registered clients. Quarterly VAT returns and the Corporate Tax return are included.

On every Plan: Corporate Tax registration with the FTA is free of charge, switching from your previous provider is free (clause G4), connection to electronic invoicing is included (clause G7), and Penalty Protection applies (clause G8). VAT registration is charged at AED 1,000. Any free trial is as shown at sign-up. We may change our prices by giving you at least 30 days’ notice; a new price applies from your next billing period after the notice.

G6. Billing, Renewal and Cancellation

• Payment. Subscriptions are charged in advance by card through our payment provider, Stripe. We never see or store your full card number; we keep only the card brand and its last four digits.
• Renewal. Your Subscription renews automatically at the end of each billing period (a month, or a year for Go Dormant) until you cancel.
• Cancellation. You can cancel at any time in the billing portal linked from Go. Cancellation takes effect at the end of the paid period; fees already paid are not refunded for a partly used period, except where the law requires otherwise.
• Return fees. A fee for a Return that is not included in your Plan becomes due when the Return is filed. You can pay it in Go, or allow us, by a separate consent in your billing settings that you can withdraw at any time, to charge it to the card on file.
• Changing Plan. You can choose your Plan in Go before a card subscription is running. After that, ask us and we will switch you from your next billing period.
• Failed payments. If a payment fails, we will tell you and retry. If it remains unpaid, we may suspend access to Go (your data is kept) until the account is brought up to date.

G7. Returns, Registrations and Electronic Invoicing

• Returns. We prepare your Returns from your confirmed Records and file them with the FTA once you have approved them and given us the access we need on the EmaraTax platform. Paying the tax itself remains your responsibility.
• Your deadline to us. To file on time we need all Documents for the period, and answers to our questions, no later than 10 business days before the FTA deadline. Material received later is handled on a best-efforts basis.
• Registrations. If you are not yet registered for Corporate Tax, we register you with the FTA free of charge on your instruction and with the documents the FTA requires. We register you for VAT on request, for the fee in clause G5.
• Electronic invoicing. UAE law will require most businesses, including natural persons who invoice businesses or government entities, to issue and receive invoices electronically through an accredited service provider, under the phased timetable set by the Ministry of Finance. As part of your Subscription we connect you to an accredited service provider of our choosing and help you obtain the tax identification number this requires. The provider’s own terms may also apply to you. The obligation to issue compliant e-invoices remains yours; our role is to make it practical.
• Thresholds. Go shows your turnover against the VAT registration threshold and, for natural persons, the Corporate Tax threshold. It is a tool to help you act in time, not advice that you do or do not need to register.

G8. Penalty Protection

If the FTA imposes an administrative penalty on you solely and directly because of an error by CoreLedger (a calculation error in a Return we prepared, an error in a Return or registration we filed, or our failure to file a Return we had agreed to file by its deadline), we will pay the penalty or reimburse you for it, on the following conditions:

• your Subscription was active and fully paid when the Return was due;
• you provided complete and accurate Documents and information, and answered our questions, by the deadline in clause G7, and approved the Return when we asked you to;
• you notify us in writing within 30 days of receiving the FTA’s notice, send us the official notice, and cooperate with any reconsideration request we file on your behalf; any amount the FTA later waives or refunds is returned to us.

Penalty Protection does not cover: the tax itself or interest and penalties for late payment of tax you did not pay; periods before your Subscription began or Records not kept in Go; penalties arising from your instructions or from inaccurate, incomplete or late information; penalties arising from a change in law or in the FTA’s interpretation after the Return was filed; and obligations outside the Subscription (for example payroll and WPS, customs, licensing, anti-money-laundering or economic-substance obligations). Our total payments under Penalty Protection are limited to AED 10,000 per Client per calendar year. Penalty Protection is our sole liability for FTA penalties.

G9. Your Responsibilities

• Upload complete, legible and genuine Documents promptly, keep your originals, and answer our questions.
• Review the reports and Returns we prepare and tell us if anything looks wrong before you approve them.
• Tell us promptly about changes that affect your obligations: a VAT registration, a new licence or activity, turnover approaching a threshold, or a change of owner or director.
• Pay your taxes and keep your licences and registrations valid.
• Use Go lawfully, upload only Documents you are entitled to share, and do not attempt to access other clients’ data or to disrupt the Platform.

G10. Data and Confidentiality

• We keep your information confidential and use it only to provide the Subscription and meet our legal obligations. How we handle personal data in Go is described in section 15 of our Privacy Policy, which forms part of these Terms.
• Documents often contain personal data of other people, such as your customers, suppliers or employees. You confirm that you are entitled to share it with us for bookkeeping and tax purposes; we process it on your behalf and on your instructions as set out in the Privacy Policy.
• Your Documents and Records belong to you. You can export your Records at any time, including as a spreadsheet.

G11. Availability and Support

We aim to keep Go available at all times but do not guarantee uninterrupted operation; we may suspend it briefly for maintenance, updates or security. Support is provided through the application and by email during UAE business hours. We may improve or change features from time to time; we will not remove a feature that is essential to your Plan without telling you in advance.

G12. Intellectual Property

The Platform, its software and content are owned by CoreLedger or its licensors. We grant you a non-exclusive, non-transferable right to use Go for your own business during your Subscription. You grant us the right to host, process and copy your Documents and Records to the extent needed to provide the Subscription.

G13. Limitation of Liability

The following limitations apply to the maximum extent permitted by UAE law:

• We are not liable for any indirect, incidental, special or consequential loss, or for any loss of profit, revenue, business, goodwill, data or opportunity, however arising.
• Apart from Penalty Protection, which is subject to its own limit in clause G8, our total aggregate liability arising out of or in connection with the Subscription is limited to the Subscription fees you paid us in the twelve (12) months before the event giving rise to the claim.
• We are not liable for loss arising from inaccurate, incomplete or late information, Documents or instructions from you; from the acts, systems, decisions or delays of third parties (including banks, the FTA, the accredited e-invoicing provider and payment providers); or from causes beyond our reasonable control.
• Any claim must be notified to us in writing within three (3) months of the date you became aware, or ought reasonably to have become aware, of its circumstances.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under UAE law, including liability for fraud, wilful misconduct or gross negligence.

G14. Suspension and Termination

• You may close your account at any time by cancelling your Subscription and asking us to close it.
• We may suspend or terminate your Subscription on written notice if you do not pay, breach these Terms, do not complete due diligence, or where the law or our compliance obligations require it.
• Handover. When you leave, close your company or go into liquidation, we hand over your books free of charge: the ledger and reports in a spreadsheet and the archive of your Documents, to you or, on your written instruction, to your new accountant, auditor or liquidator.
• After your account is closed you can export your Records for 30 days. We then delete your data, except records we are required by law to keep, which we retain for the periods set out in the Privacy Policy.

G15. Changes to This Part

We may update these Terms. We will give you at least 30 days’ notice of a material change affecting the Subscription by email or in the application. If you do not agree, you may cancel before the change takes effect; continuing to use Go after that date means you accept the updated Terms.

G16. Force Majeure

Neither Party is liable for failure or delay caused by events beyond its reasonable control, including outages of the FTA’s systems, of the accredited e-invoicing provider or of internet and hosting infrastructure, provided it takes reasonable steps to limit the effect.

G17. Notices

We send notices about the Subscription to the email address of your Go account or in the application; you send notices to contact@coreledger.org.