Guidance

Terms of use for the GOV.UK Wallet Sandbox

Published 15 October 2026

1. Parties, acceptance and authority

1.1 These Terms govern access to and use of the GOV.UK Wallet Sandbox, the GOV.UK Wallet Test App, APIs, Synthetic Data, Sandbox Documentation and any related materials made available by GDS (together referred to as the “Sandbox’). The Sandbox is provided by the Department for Science, Innovation & Technology (“DSIT”), acting through the Government Digital Service (“GDS”).

1.2 Only an organisation registered for the time being on the Digital Verification Services Register (the “Register”) is permitted to access and use the Sandbox.

1.3 Prior to accessing and/or using the Sandbox a DVS will complete the onboarding process, as set out in the Operational Guidance Document during which its representative will confirm:

• that on behalf of the DVS they understand and acknowledge that access and/or use of Sandbox is subject to compliance by the DVS with these Terms;
• that they authorised by the DVS to provide such confirmation on its behalf and to bind the DVS to these Terms.

1.4 The DVS acknowledges and confirms that by accessing and/or using the Sandbox, a Sandbox Certificate and/or the DVS Support Hub the DVS shall be deemed to have understood and agreed to be bound by these Terms.

2. Purpose and scope

2.1 The Sandbox provides a non-production environment that allows the DVS to test the technical conformance and interoperability of its integration with the GOV.UK Wallet Test App against the applicable Technical Documentation, using Synthetic Data only. It is intended to give the DVS confidence to progress towards a separate Production Onboarding process and also provide feedback to GDS to facilitate continuing improvements. “Synthetic Data” refers to artificially created test data that does not identify, relate to or describe a real individual and is not derived from Personal Data unless GDS has expressly confirmed that the method and resulting data are permitted.

2.2 Successful use of, or testing in the Sandbox shall not provide a DVS with any expectation of preferential treatment or privileged position in any other context nor will it amount to any endorsement or approval by GDS. It will not be regarded as providing any entitlement, assurance and/or facilitation of  certification, accreditation and/or confirmation whether in relation to readiness, onboarding, access to a production service or otherwise.

2.3 Production onboarding and use will be subject to separate eligibility requirements, assessment, terms and technical controls. Non-compliance with these Terms may be taken into account in connection with approval to access Production.

3. Eligibility and relationship with the Trust Framework

3.1 The DVS may only access the Sandbox during such times as it is registered in the  Digital Verification Services Register (“the Register”). Decisions on registration within the Register are not matters over which GDS has any influence or control with the Register being independently managed from the Sandbox.

3.2 The DVS shall promptly notify GDS of any suspension decision, appeal, restriction, removal or other material change which may affect its Register status.

3.3 If the DVS is removed from the Register, it will immediately stop accessing the Sandbox. GDS may suspend or terminate access to the Sandbox and revoke or decline to renew any Sandbox certificate.

3.4 These Terms supplement and do not replace, amend, disapply or reduce any obligation applying to the DVS under the UK digital verification services trust framework or the Register arrangements. The DVS remains independently responsible for complying with those requirements.

1. Access and license

4.1 GDS grants the DVS a limited, non-exclusive, revocable, non-transferable and non-sublicensable right to access and use the Sandbox solely for the purpose, and in accordance with the requirements, limitations and obligations set out in these Terms. Without limitation the licence shall not permit any use which exceeds the purposes in clause 2 or which conflicts with the Sandbox Acceptable Use Policy.

4.2 The DVS will keep the  account, certificates, private keys and credentials it uses in connection with Sandbox secure and will restrict access to authorised persons only.

4.3 Sandbox Certificates will have a maximum validity period of 36 months unless otherwise expressly provided. Renewal of a Sandbox Certificate is at GDS’s discretion and remains subject to eligibility, compliance and current onboarding requirements.

5. Acceptable use

5.1 The Sandbox may only be used in accordance with the Sandbox Acceptable Use Policy.  The DVS shall comply at all times with the GOV.UK Wallet Sandbox Acceptable Use Policy and shall do nothing that would conflict with it.

5.2 GDS intends to provide support for the Sandbox at its discretion through the DVS Support Hub but gives no assurances or warranty as to levels or adequacy of support that will be available at any time.  The DVS shall comply with the DVS Support Hub Acceptable Use Policy whenever using the DVS Support Hub and shall at all times do nothing that would conflict with it.

6. Synthetic Data and Prohibited Data

6.1 The DVS may only use Synthetic Data supplied or expressly permitted by GDS. The Sandbox is not designed or approved for the processing of Personal Data. GDS has not agreed and has no intention of processing Personal Data on behalf of the DVS through the Sandbox. 

6.2 The DVS will not introduce any Prohibited Data (including without limitation production data, live credentials or information relating to a real individual) into the Sandbox or, (except as permitted under the separate DVS Support Hub Acceptable Use Policy), into the DVS Support Hub.

6.3 If Prohibited Data is introduced, the DVS will notify GDS promptly, stop any activity that may increase the exposure, and cooperate with containment, deletion, investigation and remediation. GDS may delete any material it considers likely to do so or be affected by such activity and exercise powers under clause 12.

6.4 The DVS may retain Synthetic Data and test outputs for legitimate testing purposes, subject to confidentiality, security, intellectual property and non-misrepresentation obligations. 

6.5 GDS may reset, replace or delete Synthetic Data and Sandbox configurations at any time.  It will provide reasonable notice via DVS Governance forums of such intention where practicable

7. Reporting and responsible disclosure

7.1 The DVS will comply without limitation with the reporting requirements as specified in the Acceptable Use Policies.

8. Confidentiality and public statements

8.1 Each party, whether GDS or the DVS (the “receiving party”) may receive confidential information belonging to the other (the “disclosing party”) which has been obtained from the disclosing party whether directly or indirectly in connection with Sandbox and/or these Terms. 

8.2 The receiving party may only use Confidential Information for the purposes set out in Clause 2 and shall not:

8.2.1 disclose it outside its organisation without the disclosing party’s prior written permission, except to personnel, contractors, subcontractors, professional advisers or auditors who need to know it and are subject to equivalent confidentiality obligations;

8.2.2 disclose, use or exploit the disclosing party’s Confidential Information without the disclosing party’s prior written consent, except for the purposes anticipated under these Terms.

8.3 The DVS remains responsible for any person to whom it discloses GDS Confidential Information. 

8.4 The recipient party will immediately notify the disclosing party if it suspects unauthorised access, copying, use or disclosure of the Confidential Information.

8.5 Notwithstanding the other provisions of this clause 8:

8.5.1 a party may disclose information where required by law, a competent authority, parliamentary accountability, audit and/or applicable public-sector disclosure obligations.  Where lawful and practicable, it should notify the other party and limit disclosure to what is required.

8.5.2 A party may also disclose information where it has previously received  it from a third party without obligation of confidentiality, where it was in the public domain at the time of the disclosure (without the party being in breach) or where the information was independently developed without access to the disclosing party’s Confidential Information. 

8.6 GDS may require the DVS to correct or remove any inaccurate or misleading statement or unauthorised use of branding promptly.

9. Intellectual property and feedback

9.1 Each party retains ownership of its intellectual property which it owned immediately prior to the launch of Sandbox (“Background IPR”). The DVS retains ownership of the software, integration implementation, architecture, code and proprietary logic that it develops in connection with its use and access to Sandbox. GDS retains ownership, on behalf of the Crown where applicable, of each element of the Sandbox as it may be developed after its launch.

9.2 “Feedback” means comments, questions, suggestions, bug reports and recommendations about the Sandbox, Test App, APIs, documentation or GOV.UK Wallet integration capability. It does not include DVS source code, the DVS’s proprietary implementation, DVS’s Background IPR, Personal Data or other material expressly agreed between GDS and the DVS to be excluded from the definition of Feedback.

9.3 The DVS grants DSIT a non-exclusive, perpetual, irrevocable, worldwide, royalty-free, transferable and sublicensable licence to use, adapt and incorporate Feedback for service, product and documentation improvement and for internal governance purposes.

9.4 If there is an IPR Claim, the responsible party will indemnify the other against all losses, damages, costs or expenses (including professional fees and fines) incurred as a result.

9.5 If an IPR Claim is made or anticipated by a party they will as soon as practicable inform the other. If such IPR Claim:

• relates to GDS breaching another entity’s IPR in the Sandbox, GDS will have the right to immediately require cessation of use of the Sandbox by the DVS and the DVS will promptly comply; or
• relates to material that DVS has introduced in access or use of the Sandbox then it will immediately cease use of Sandbox until it can satisfy GDS acting reasonably that permitting DVS to restart access and/or use of the Sandbox will not cause any breach of third party IPR.

9.6 Each Party acknowledges and agrees that it shall act in a spirit of good faith, mutual co-operation and collaboration in progressing the implementation and effectiveness and efficiency of the Sandbox to achieve the Purpose and Scope set out in Clause 2.  Pursuant to that objective, the Parties agree that they will use reasonable endeavours to agree marketing and promotion material regarding Sandbox and the activities being undertaken for their mutual benefit.

9.7 Without prejudice or limitation to any of the previous provisions DVS shall not:

9.7.1 use the name, logos, brand materials, trademarks or other marks related to HMG, GOV.UK or GOV.UK Wallet or their promotion without express written permission of GDS. 

9.7.2 make any press announcements or publicise this arrangement or its contents in any way whether for promotion,marketing or otherwise without consent of GDS which shall not be unreasonably withheld; 

9.8 Each Party acknowledges to the other that nothing in this Contract either expressly or by implication constitutes an endorsement of any products or services of the other Party and each Party agrees not to conduct itself in such a way as to imply or express any such approval or endorsement.

10. Service condition, support and changes

10.1 The Sandbox is provided free of charge on an “as is” and “as available” basis. It is a developing test environment and may be incomplete, inaccurate, interrupted, insecure, modified or unavailable.

10.2 GDS does not provide any guarantees, warranties, commitments and/or assurances as regards availability, performance, response-times or resolution-times in respect of Sandbox Current support hours and channels are described in Operational Guidance for guidance purposes only.The DVS acknowledges and accepts such limitations in choosing to access and/or use the Sandbox.

10.3 GDS intends, but subject always to clause 10.2, to make reasonable efforts during published support hours to answer reasonable integration questions, address material gaps or inaccuracies in its Technical Documentation, and notify DVSs of material product evolution. This does not guarantee a particular result, fix or timeframe.

11. Changes to these Terms and the Acceptable Use Policies

11.1 GDS may update these Terms and/or any of the Acceptable Use Policies from time to time. The version of these Terms and/or the Acceptable Use Policies applicable at any time are those published at GOV.UK. 

11.2 Each time a DVS accesses and/or uses the Sandbox they will be treated as having satisfied themselves that they understand and accept the Terms and Acceptable Use Policies applicable for the time being. Logging and monitoring of the sandbox environment will be undertaken for our security support.

11.3 Where substantial changes are made to the Terms and/or any of the Acceptable Use Policies, GDS may require express re-acceptance by an authorised DVS representative before the DVS is allowed to continue use of Sandbox and/or the DVS Support Hub and may give prior notice of the proposals with a timeframe for implementation.  Without limiting its discretion GDS will not give prior notice where it considers in its discretion that immediate action to change the Terms and/or the Acceptable Use Policies is required by law or to address an urgent security risk.

12. Suspension, termination and restoration

12.1 GDS may throttle, restrict, suspend and/or prevent access and/or use of the Sandbox whenever it considers it appropriate to do so at its discretion. Without limitation to such entitlement, the DVS acknowledges and accepts that GDS may exercise its powers under the Acceptable Use Policies. 

12.2 In addition GDS may terminate access to and/or use of Sandbox for breaches, loss of eligibility, failure to remedy, or policy, funding, operational or technical reasons.

12.3 Such decisions to throttle, restrict, suspend and/or prevent or terminate access and/or use of the Sandbox pursuant to clauses 12.1 and/or 12 .2 may be made in respect of any one or more or all of the DVSs and/or may be applied differently and/or applied for different periods relating to one or more DVSs.

12.4 Without limiting its general entitlements pursuant to this clause 12, GDS may suspend, restrict and/or terminate access and/or use to a DVS to the Sandbox by one or more DVSs at any time and whenever GDS reasonably considers it necessary to address a security, legal, integrity or service stability risk, any suspected misuse, loss of eligibility or material disruption which it considers is likely to affect the Sandbox, its Participants and/or GOV.UK One Login systems. 

12.5 The entitlements of GDS under this clause 12 may be exercised irrespective of the status of the DVS in relation to the Register or the Trust Framework. 

12.6 Where GDS is satisfied in its discretion that it is appropriate to do so, GDS may notify a DVS and require corrective action before actioning any restriction, suspension or termination of access and/or use of Sandbox by that DVS but this shall not limit its powers under this clause 12. 

12.7 The DVS may stop participating at any time. On receiving any notification from GDS pursuant to this clause 12  the DVS will promptly implement the actions required by that notice including without limitation complying with reasonable instructions to delete or return any data or materials in which GDS has the IPR, any data provided by GDS and Confidential Information of GDS.

12.8 The DVS may request a review and restoration of its ability to access and/or use Sandbox by demonstrating that it has fully addressed any cause notified to it for the action taken by GDS under this clause 12. Restoration of ability to access and/or use Sandbox for any DVS is at GDS’s complete discretion and may be subject to updated onboarding, assurance or security requirements.

13. Liability and indemnity

13.1 The DVS uses the Sandbox at its own risk and is responsible for its systems, integration, decisions, testing and reliance on Sandbox behaviour. Each DVS should put in place appropriate security measures for its own systems. GDS has, save as expressly otherwise provided in these Terms, no responsibility or liability in relation to the access to and/or use of Sandbox by a DVS and/or any consequences of such access and/or use or inability, howsoever caused, to access and/or use Sandbox.  

13.2 Without limitation to clause 13.1 GDS shall bear no responsibility for any time and/or resources expended, costs or lost opportunities (“Losses”) incurred by a DVS in connection with the development and integration of its systems for the purposes set out in clause 2, participation in Sandbox or for the purposes of Production irrespective of whether they have arisen, increased and/or wasted as a result of:

13.2.1 any delays, suspensions, limitations, fault, flaw, modification or disruption to the Sandbox for which GDS is or may have been responsible (including without limitation loss of test data or other work undertaken by DVS for the said purposes); and/or 

13.2.2 any lack of continuity or disruption in respect of transition into the [Production Phase] (whether as a result of differences between the Sandbox and the [Production Phase], any required re-engineering work by DVS,  delays in onboarding to the Production Phase, disruptions to any services during transition or otherwise);

13.3 Save as provided by clause 13.4, both DVS and GDS exclude liability to the other for indirect or consequential loss, loss of profit, revenue, goodwill, opportunity or anticipated savings arising from the Sandbox. 

13.4 Neither party excludes liability for:

13.4.1 personal injury caused by its negligence, or that of its employees, agents or Subcontractors;

13.4.2 its liability for bribery or fraud or fraudulent misrepresentation by it or its employees; and

13.4.3 any liability that cannot be excluded or limited by Law.

13.5 The DVS is responsible for the acts and omissions of its personnel, contractors, subcontractors and other persons and/or systems using and/or accessing Sandbox.

13.6 The DVS will indemnify GDS against any losses, costs, expenses, damages and liabilities arising from: 

• unlawful or unauthorised use of the Sandbox; 
• infringement of third party IPR caused by DVS software or materials; 
• unauthorised use or disclosure of third-party information; 
• materially misleading public statements or branding misuse; 
• introduction of Prohibited Data by the DVS into Sandbox. 

13.7 Save as provided in clause 13.8 the extent of the liabilities, whether in contract, tort (including negligence), breach of statutory duty, or otherwise, of either GDS or DVS to the other in respect of any losses, costs, expenses or damages (together referred to as Losses) incurred by that other (the “Relevant Party”) arising from:

13.7.1 any breach of these Terms of Use by the Relevant Party; and/or 

13.7.2 any act or omission (whether or not negligent) by the Relevant Party in relation to the provision, operation and/or use of Sandbox, shall be limited to £10,000 (ten thousand pounds) in respect of any single or series of inextricably related and/or connected breaches, or a continuous breach, act or omission causing such Losses. 

13.8 The limits of liability under clause 13.7 will not apply in the case of:

13.8.1  clause 13.4;

13.8.2 any fine or penalty incurred by GDS pursuant to Law and any costs incurred by them in defending any proceedings which result in such fine or penalty as a result of the acts or omissions of the DVS causing a breach of Data Protection Legislation; or

13.8.3 any compensation that has to be paid by GDS to a third party due to a breach by the DVS of that third party’s IPR or due to Prohibited Data being introduced by the DVS in breach of clause 6.

13.9 Each of GDS and DVS will use all reasonable endeavours to mitigate any Losses which it suffers under or in connection with Sandbox.

14. General

14.1 These Terms do not create a partnership, agency, employment relationship or commitment to enter into an agreement for access to Production.

14.2 The DVS may not transfer its rights under these Terms without GDS’s prior written permission and for the avoidance of doubt shall not be entitled to transfer its obligations.

14.3 If any part or parts of these Terms is, or are, invalid or unenforceable, the remaining provisions continue in effect. A failure or delay in enforcing a right or entitlement is not a waiver.

14.4  third parties shall have no rights to enforce any of these Terms notwithstanding the Contract (Rights of Third Parties) Act 1999. 

14.5 both GDS and DVS agree to comply with all laws, subordinate legislation, bye-law, right within the meaning of the European Union (Withdrawal) Act 2018 as amended by European Union (Withdrawal Agreement) Act 2020, regulation, order, regulatory policy, mandatory guidance or code of practice, judgment of a relevant court of law, or directives or requirements of any regulatory body with which the parties are bound to comply.

14.6 These Terms, the Sandbox Acceptable Use Policy, the DVS Support Hub Acceptable Use Policy and any document expressly identified within either of them constitute the entire agreement for Sandbox access and for use of DVS Support Hub. Where there is any ambiguity or discrepancy between documents comprised within the entire agreement they will be resolved by applying the following order of precedence of those documents:

1. Sandbox Terms of Use
2. Sandbox Acceptable Use Policy
3. DVS Support Hub Acceptable Use Policy
4. Technical and Operational Guidance

14.7 Technical and Operational Guidance explain the intentions of the Sandbox Service but do not create any guarantee or warranty as to accuracy, service performance or service levels.

14.8 These Terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Definitions 

Confidential Information

Any information, however it is conveyed, that relates to the business, affairs, developments, trade secrets, Know-How, personnel and suppliers of GDS or the DVS, including IPRs, together with information derived from the above, and any other information clearly designated as being confidential (whether or not it is marked as “confidential”) or which ought reasonably to be considered to be confidential.

Digital Verification Services (DVS)

Organisations that use information from the GOV.UK Wallet to verify facts about an individual and confirm the outcome of that verification to a third party and which are for the time being registered on the UK Digital Verification Services Trust Framework. |

Data Protection Legislation

Means:

• the UK GDPR; 
• the Data Protection Act 2018 (as may be amended from time to time) to the extent that it relates to Processing of personal data and privacy (the “DPA 2018”); 
• all applicable Law about the processing of personal data and privacy; and 
• (to the extent that it applies) the EU GDPR

DVS Support Hub

The process and tools facilitating Sandbox onboarding, operational engagement, the management of support tickets, and formal Incident reporting.

DVS Support Hub Acceptable Use Policy

The policy governing the permitted and prohibited activities applicable to DVS’s use of the DVS Support Hub.

EU GDPR

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of personal data and on the free movement of such data (General Data Protection Regulation) as it has effect in EU law;

GOV.UK Wallet

The digital wallet provided by the Government Digital Service (GDS) that lets individuals securely store and share government-issued digital credentials from their device  to prove things about themselves, (including without limitation matters such as their identity, age, or eligibility).

IPR

any intellectual property rights including copyright, rights related to or affording protection similar to copyright, rights in databases, patents and rights in inventions, semi-conductor topography rights, trade marks, rights in Internet domain names and website addresses and other rights in trade names, designs, Know-How, trade secrets and other rights in Confidential Information as well as any  applications for registration, and the right to apply for registration, for any of the rights already mentioned that are capable of being registered in any country or jurisdiction; and all other rights having equivalent or similar effect in any country or jurisdiction;

IPR Claim

Any claim, action, demand or proceeding (whether actual, threatened or anticipated) relating to alleged infringement, misappropriation or other violation of a third party’s IPR.

Operational Guidance

The practical guidance issued and updated by GDS to help a DVS onboard to and operate within the Sandbox. It explains the more practical, day-to-day aspects of Sandbox interaction, including the onboarding process, account and certificate arrangements, support hours and channels, and how GDS operates the service, which is shared directly with the DVS as part of granting access to the Sandbox.

Personal Data

Has the meaning given in the Data Protection Legislation (which by way of explanation includes not only any information that directly identifies an individual, but also information that could identify an individual when linked or combined with other data reasonably available).

Prohibited Data

Any data, information or material that is unlawful, harmful, or otherwise not permitted to be submitted, uploaded or processed under the Acceptable Use Policy. This includes, but is not limited to, data that is illegal to hold or share; Personal Data and special-category Personal Data; credential, authentication or security secrets; live identity data; malicious code or destructive content; abusive, threatening or anti social and any third-party or confidential information the user is not authorised to disclose. Data may be Prohibited Data regardless of whether it is submitted deliberately, inadvertently or in unsanitised form.

Production

The GOV.UK Wallet and associated services which will form the production state of the operational environment, system, and/or process for which Sandbox is used as a test and trial environment, and which will include real user data and to real users.

GOV.UK Wallet Sandbox

The integration platform provided by GDS for testing Wallet-to-Verifier interoperability using synthetic data. It is not a live, production, certification, performance, penetration testing, or end-to-end simulation environment.

Sandbox

Refer to all elements of the GOV.UK Wallet Sandbox, the GOV.UK Wallet Test App, APIs, Synthetic Data, Sandbox Documentation and any related materials made available by GDS in connection with GOV.UK Wallet Sandbox.

Sandbox Acceptable Use Policy

The policy governing the permitted and prohibited activities applicable to a DVS’s use of the Sandbox, issued alongside these Terms.

Sandbox Certificate

The Sandbox-only digital certificate issued by the GDS to  DVSs which are registered on the UK DVS Register and which is required to authorise transactions from a DVS with the Sandbox, and which will be issued in accordance with the Operational Guidance.

Synthetic Data

Artificially created test data that does not identify, relate to or describe a real individual and is not derived from Personal Data unless GDS has expressly confirmed in writing that the method and resulting data are permitted.

Technical Documentation

The technical specifications, integration guides, API documentation, configuration information, test flow documentation, or other technical materials issued or updated by GDS to support use of the Sandbox. This will be available at docs.wallet.service.gov.uk

Test App

The simulation application of the Wallet distributed by GDS for use in the Sandbox. |

UK Digital Verification Services Trust Framework

The set of rules, standards, requirements, certification arrangements, which the Secretary of State is required to maintain and publish pursuant to Section 32 of the Data (Use and Access) Act and which is available at https://www.gov.uk/government/collections/uk-digital-verification-services-trust-framework

“UK DVS Register” or “Register”

The register maintained by the Secretary of State under the Data (Use and Access) Act 2025 of organisations that provide digital identity and attribute services and which are certified as meeting the rules of the UK Digital Verification Services Trust Framework.

“UK GDPR”

has the meaning as set out in Section 3(10) of the DPA 2018, supplemented by Section 205(4) of the DPA 2018;