Terms & Conditions

Version: 1.0.0 · Effective: 2026-02-21

Terms and Conditions for the Use of the Sudanese Digital Identity

Article 1: Definitions

In these terms, unless the context otherwise requires, words and phrases shall have the meanings assigned to them in the Electronic Transactions Act of 2007 and its amendments, the Digital Identity Regulation of 2025, and the Cyber Security Act of 2025, in addition to the following definitions:

TermDefinition
The ApplicationThe Sudanese Digital Identity application for smartphones.
The PlatformThe national digital platform for managing identity and associated services.
The AccountThe unique digital account granted to the user after completing the registration and verification process.
Digital SignatureA secure electronic signature issued using a signature tool linked to a certified digital identity.
ServicesAll governmental and commercial services provided through the platform that require the use of digital identity for access or authentication.

Article 2: Scope and Acceptance

These terms govern your use of the Sudanese Digital Identity, including the application, the platform, and the services.

By registering for or using any of the services, you acknowledge that you have read, understood, and agree to be bound by these terms, as well as all relevant applicable Sudanese laws and regulations.

If you are acting on behalf of a legal entity (company, institution), you warrant that you have the legal authority to bind that entity to these terms.

Article 3: Identity Issuance and Trust Levels

Digital identity is issued through certifiers licensed by the National Electronic Authentication Authority.

Identities are classified into three levels of trust based on the strength of verification:

LevelDescription
Basic LevelOnline verification of basic data.
Intermediate LevelElectronic or in-person verification with official documents.
High LevelIn-person verification with biometric verification (fingerprint, facial recognition).

The trust level determines the scope of services you can access and the documents you can sign electronically.

Article 4: User Obligations and Responsibilities

The user undertakes the following:

1. Ensuring Data Accuracy: Providing correct and complete information and documents upon registration and during use. Any forgery exposes the perpetrator to accountability under Article 28 of the Electronic Transactions Act.

2. Protecting Authentication Tools: Maintaining the confidentiality and integrity of all authentication methods (password, PIN code, the application itself, smart card) and not disclosing them to any party. The user is solely responsible for all activities that occur under their account.

3. Immediate Reporting: Notifying the service provider (the certifier) and the Authority immediately in the event of device loss, theft of login data, or suspicion of any unauthorized use of the account.

4. Lawful Use: Using the identity and services only for legitimate purposes, and not using them in any way that violates the law or infringes upon the rights of others.

5. Updating Data: The user is responsible for updating their personal data when it changes (such as address, phone number) through the specified channels.

Article 5: Legal Validity of Transactions and Signatures

A digital signature issued using a certified digital identity that meets the requirements of the Electronic Transactions Act shall have full legal validity and be considered equivalent to a handwritten signature on paper documents (Article 8 of the Electronic Transactions Act).

Electronic transactions completed using the digital identity are valid and binding on the parties and have the power of evidence before judicial and administrative authorities.

Article 6: Data Protection and Privacy

The processing of user data is subject to the Privacy Policy approved by the Authority, which constitutes an integral part of these terms.

The system collects only the data necessary for the specified purpose (data minimization principle), and primary data is stored within Sudan.

Personal data is not shared with external parties except in the following cases:

a. With the explicit consent of the user during the completion of a specific transaction.

b. To service providers necessary for the operation of the system (under strict confidentiality agreements).

c. Based on a judicial or legal order issued by a competent authority.

Article 7: Suspension, Cancellation, and Termination

The service provider (the certifier) has the right to suspend or cancel the digital identity immediately in cases including:

a. Discovery of incorrect registration information.

b. Suspicion of a security breach or fraudulent use.

c. Non-compliance with these terms.

d. A request from the competent authority.

The user has the right to request the cancellation of their digital identity through official channels.

The Authority has the right to terminate or suspend the service generally or for a portion of users for reasons related to national cyber security or maintenance, with appropriate notice where possible.

Article 8: Limitation of Liability and Warranty

The Authority and licensed entities exert reasonable effort to secure and ensure the reliability of the service, but they do not guarantee that the service will be free from malfunctions, errors, or interruptions.

The Authority or the certifiers shall not be liable for any indirect, consequential, or incidental damages arising from the use or inability to use the service.

The primary responsibility for the security of login data and transactions rests with the user.

Article 9: Amendments to the Terms

The Authority reserves the right to amend these terms and conditions at any time. Users will be notified of material amendments via the application, platform, or registered email. Your continued use of the service after the effective date of the amendments constitutes your acceptance of them.

Article 10: Governing Law and Dispute Resolution

These terms shall be governed by and construed in accordance with the laws of the Republic of Sudan.

The General Court in Khartoum shall be the competent court to hear any disputes arising from these terms or the use of the service, unless a special law provides otherwise.

Parties must attempt an amicable settlement of the dispute before resorting to the judiciary.

Article 11: Contact Information

For grievances or inquiries regarding the use of the digital identity:

National Electronic Authentication Authority

AddressBlue Nile St-TPRA Tower-Khartoum-sudan
Phone+249187173301
EmailHamid.y@nadc.gov.sd
Websitehttps://www.nadc.gov.sd/en/