Trust Framework Terms

Contents

Trust Framework terms summary

The following terms (the “Amiqus Trust Framework terms”) are entered into our agreement with you (“the client”) and apply to your organisation’s (the “relying party”) use of our service to meet Identity Document Validation Technology (IDVT) requirements through use of an Identity Service Provider (ISP/IDSP) within the meaning of those terms in the UK Digital Identity and Attributes Trust Framework (the “UKDIATF”) and mentioned sector schemes.

As a certified IDSP, we are required to ask relying parties to support us through practices that reflect the principles behind the trust framework rules (UKDIATF 15.15). These terms should be read in conjunction with the parent contract schedule and are intended to confirm the role and responsibilities between the relying party and Amiqus as a certified IDSP.

Key documents

Trust Framework

For the purposes of these terms, references to the UKDIATF refer to this document version listed. Due to the pace of development in the UKDIATF and its sector schemes, it is expected that the documents referenced here will be updated regularly and the client should regularly familiarise themselves with any changes.

Sector schemes

Sector schemes refer to guidance that enables your organisation to use IDSPs to comply with your legal responsibilities, in addition to advising on how those checks are carried out. 

These terms must be read in conjunction with these documents.

Our certification

Amiqus is certified against the requirements of the Digital Identity and Attributes Trust Framework beta version in the capacity of an Identity Service Provider (ISP) for the provision of Identity Verification Services.

Amiqus’ certification (“the certification”) is conducted by a UK Accreditation Service (UKAS) accredited certification body and demonstrates conformance with all relevant requirements of the UKDIATF, except the noted exclusions. Amiqus will be subject to periodic surveillance audits and recertification.

Relying party responsibilities

Right to Work (Home Office)

The following section highlights key terms from the Right to Work guidance on the use of an IDSP. It is not exhaustive and should be read in conjunction with the RTW guidance.

  • The phrase “the employer” and “the relying party” are to be used interchangeably (RTW guidance Annex D 1.6).
  • The responsibility for completing a right to work check remains with the employer (RTW guidance Annex D 2.1, 5.1, 9.1).
  • A relying party who chooses to use an IDSP must still discharge their duties in accordance with the RTW guidance and Right to Work legislation (RTW guidance Annex D 1.8).
  • A relying party must carry out their own due diligence to satisfy themselves to a reasonable belief that their chosen IDSP has completed the check correctly in the prescribed manner (RTW guidance Annex D 5.1).
  • A relying party using an IDSP for remote digital checks should:
    • Provide appropriate training and guidance to their staff for example, on what information they must obtain from an IDSP to confirm verification of identity, what the information can be used for, and the additional steps they must take to establish eligibility to work (RTW guidance Annex D 1.9).
  • A verified identity for the purposes of a right to work check can only be obtained using an IDSP for the following documents (RTW guidance Annex D 3.1):
    • Valid British passport
    • Valid Irish passport or passport card
  • Amiqus will take reasonable steps to ensure the required steps to be taken by an IDSP are fulfilled (RTW guidance Annex D 4 and 6). Conformity with these criteria will be demonstrated by external audit and certification. 
  • The relying party must take reasonable steps to ensure they understand and execute the required steps to be taken by the employer (RTW guidance Annex D 5). This includes but is not limited to:
    • Satisfy themselves that the photograph and biographical details on the output from an identity check are consistent with the individual presenting themselves for work.
    • Retain this information securely for the duration of employment and for a further two years after the employment has ended

Rent to Rent (Home Office)

The following section highlights key terms from the Right to Rent guidance on the use of an IDSP. It is not exhaustive and should be read in conjunction with the RTR guidance.

  • The phrase “the landlord” and “the relying party” are to be used interchangeably (RTR guidance Annex D 1.6).
  • The responsibility for completing a right to rent check remains with the landlord (RTR guidance Annex D 2.1).
  • A relying party who chooses to use an IDSP must still discharge their duties in accordance with the RTR  guidance and Right Rent legislation (RTR guidance Annex D 1.8).
  • A relying party using an IDSP for remote digital checks should:
    • Provide appropriate training and guidance to their staff for example, on what information they must obtain from an IDSP to confirm verification of identity, what the information can be used for, and the additional steps they must take to establish eligibility to rent
  • A verified identity for the purposes of a right to rent check can only be obtained using an IDSP for the following documents (RTR guidance Annex D 3.1):
    • Valid British passport
    • Valid Irish passport or passport card
  • Amiqus will take reasonable steps to ensure the required steps to be taken by an IDSP are fulfilled (RTR guidance Annex D 4 and 6). Conformity with these criteria will be demonstrated by external audit and certification. 
  • The relying party must take reasonable steps to ensure they understand and execute the required steps to be taken by the landlord (RTR guidance Annex D 5). 
    • A relying party must familiarise themselves with and complete each step of their obligations under the RTR scheme in order to establish the statutory excuse (RTR guidance Annex D 5.1). 
    • This includes, not is not limited to, satisfying themselves that the photograph on the output from the identity check are consistent with the individual.

DBS (Disclosure and Barring Service)

The following section highlights key terms from the DBS guidance on the use of an IDSP. It is not exhaustive and should be read in conjunction with the DBS guidance.

  • A relying party using an IDSP for the purposes of verifying an identity as part of an application for a DBS check retains the obligation to carry out a risk assessment for each transaction (DBS guidance 2.1).
  • Amiqus will meet all requirements for certification against industry and government standards for the roles within our certification scope (DBS guidance 3).

Effective from 11/10/2022Last reviewed 04/10/2022Version 1.0