These are the rules for using composer.id and the reference sandbox behind it. Use of composerID inside a Triage deployment is governed instead by your organisation’s agreement with Deployed.
Last updated 22 September 2026
By using the Site you agree to these Terms of Use and to the composerID Privacy Policy. If you do not accept them, do not access or use the Site. The Site, its Materials and the Services are intended for business users and are not for use by children under 13 years of age. 1. Sandbox credentials
Some features of the Services need credentials. Sandbox credentials are minted on request at POST /v1/sandbox/keys: there is no account, no sign-in and no information about you to supply. Each set belongs to its own tenant, is shown once and expires. You are responsible for keeping a set confidential and for all activity that takes place under it. If a set is no longer secure, stop using it and mint another, and tell us at jamie.gannaway@deployed.co if the cause is a security problem with the Services.
2. Copyright
The content of the Site, including all text, images, diagrams, software, source code samples, audio and video, links, and any compilation or arrangement of them (together, the “Materials”), is the property of Deployed or its licensors and is protected by the copyright laws of the United Kingdom and by international copyright treaties. Except as expressly permitted in these Terms, the Site and the Materials may not be modified, reproduced, distributed, transmitted, publicly displayed, performed or otherwise used, in whole or in part, without Deployed’s prior written consent.
Two permissions are given expressly. You may read, link to and quote the documentation, with attribution, for the purpose of evaluating or integrating with composerID. You may use the published OpenAPI document and JSON Schemas to build clients and integrations for composerID. Vendor documentation that the Site links to belongs to the vendor concerned and is governed by that vendor’s own terms.
3. Trade marks
“composerID”, the composerID wordmark, “Triage”, the Triage mark, “WorkAuthor”, “Deployed” and the names, logos and Site name associated with them are trade marks of Deployed in the United Kingdom and other countries (together, the “Trade Marks”). You may not display, reference or use the Trade Marks in any manner without Deployed’s prior written permission, other than a plain-text reference to the product by name. All other trade marks, service marks, product and service names and company names or logos appearing on the Site, including those of the destination platforms documented on it, belong to their respective owners; their appearance describes compatibility and does not imply endorsement, partnership or certification unless the Site says so explicitly.
4. Age of users
The Site and the Services are not directed at children under 13, and parents and legal guardians may not agree to these Terms on a child’s behalf. If Deployed becomes aware that a child under 13 has provided personal information, we will remove it from our records. Developer access and the API Terms require you to be at least 18 years of age or acting on behalf of an organisation.
5. Privacy
Your use of the Site is subject to the composerID Privacy Policy, which is incorporated into these Terms. Where the Privacy Policy and these Terms are inconsistent, these Terms prevail. Email addresses published on the Site are provided for enquiries about the Site and the Services only; collecting them for unsolicited email is not permitted.
6. Illegal and unpermitted activities
The Site and its contents are for your own business use in evaluating and integrating with composerID. You may not:
- copy, transmit, publish, distribute, display or otherwise exploit the Site, the Trade Marks, the Services or the Materials other than as these Terms permit;
- use the Site for any illegal, unauthorised or improper purpose, or in a way that breaches any applicable law or these Terms;
- modify or create derivative works of the Trade Marks, the Materials or the Services, other than the client and integration code that Section 2 allows you to build from the published specifications;
- aggregate or collect Materials to build a database or a competing documentation set;
- use a robot, spider, scraper or other automated means to access the Site beyond what a search engine or a link checker reasonably does, without our written permission;
- take any action that imposes, or that we reasonably consider may impose, an unreasonable or disproportionate load on our infrastructure;
- use any device, software or routine to interfere, or attempt to interfere, with the proper working of the Site or with any other person’s use of it;
- bypass any measure we use to prevent or restrict access to the Site, or otherwise attempt to gain unauthorised access to any part of the Site or the Services; or
- misrepresent your affiliation with Deployed, composerID or Triage, or misrepresent composerID’s capabilities or coverage to a third party.
Security researchers acting in good faith are welcome. If you find a vulnerability in the Site or the sandbox, report it to jamie.gannaway@deployed.co, avoid accessing other people’s data, and give us reasonable time to respond before any disclosure. We will not pursue good-faith research that follows these rules.
7. Developer access and the reference sandbox
The sandbox is a reference implementation of the documented API running over mock destination tenants, and it issues its own credentials. It is labelled a sandbox wherever it appears because it is one: it is not the production service, it carries no service level, and its data may be reset at any time without notice. Each credential set is its own tenant and sees only the records created with it; minting is rate-limited per network address and every set expires, so rotation is minting a new set rather than asking us for one. Do not share a set or use another person’s. Do not put real personal data, real credentials or confidential business information into the sandbox. The API Terms govern this use in full and prevail over this Section where they differ.
8. Documentation and platform claims
The Site publishes connection scorecards, coverage statuses and integration claims for third-party platforms. Each claim is verified against the vendor’s published documentation at the time of writing and the cited sources are re-checked monthly, but vendors change their products, their licensing and their documentation without telling us. Coverage status is a statement about what is documented, not a warranty that a particular tenant of a particular platform can be connected. Confirm anything you rely on against the vendor’s current documentation and your own tenant before making a decision on it.
9. Links
For your convenience the Site links to websites operated by third parties, principally vendor documentation, our documentation host and our hosting provider. Deployed has no control over those websites and is not responsible for their content or their privacy practices. We make no representation or warranty about the quality, content, nature or reliability of any third-party website or service reachable by a link from the Site. Any dealings you have with a third party found through the Site, including any terms, conditions, warranties or representations associated with them, are between you and that third party, and Deployed is not responsible or liable for any loss or damage arising from them.
10. Indemnity
You agree to defend, indemnify and hold harmless Deployed and its officers, employees and agents from all liabilities, claims, losses and expenses, including reasonable legal fees, arising from any claim or demand made by a third party due to or arising out of your use of the Site in breach of these Terms or of applicable law. Deployed reserves the right, at its own expense, to assume the exclusive defence and control of any matter otherwise subject to indemnification by you, in which case you will cooperate with us in asserting any available defences.
11. Disclaimer of warranties
The Site, the Materials and the Services (together, the “Deployed Assets”) are provided on an “as is” and “as available” basis. To the maximum extent permitted by law, Deployed makes no warranties of any kind, express or implied, about the Deployed Assets or the operation of the Site, and excludes all implied terms including any implied terms of satisfactory quality, fitness for a particular purpose, title and non-infringement. Deployed does not represent or warrant that the Deployed Assets are accurate, complete, reliable, current or error-free, that vendor documentation cited on the Site reflects the vendor’s current product, or that the Site or its servers are free of harmful components. Your use of the Deployed Assets is at your own risk. Nothing in this Section affects the statutory rights of a consumer where you are dealing with us as a consumer.
12. Limitation of liability
Nothing in these Terms limits or excludes Deployed’s liability for death or personal injury caused by its negligence, for fraud or fraudulent misrepresentation, or for any liability that cannot be limited or excluded under the law of England and Wales.
Subject to that, and to the maximum extent permitted by law: Deployed will not be liable to you, or to anyone claiming through you, for any indirect, special, incidental or consequential loss or damage, or for any loss of profit, revenue, business, goodwill, data or anticipated savings, arising out of or in connection with the Deployed Assets, whether in contract, tort (including negligence), breach of statutory duty or otherwise, even if foreseeable. Deployed’s total aggregate liability arising out of or in connection with the Site, however arising, will not exceed one hundred pounds sterling (£100). Liability arising under the API Terms or under a written agreement with Deployed is governed by that document instead.
13. Changes to the Site
Deployed may modify, suspend or discontinue the Site or any part of its content, temporarily or permanently, with or without notice, and may interrupt the operation of the Site as necessary to perform routine or non-routine maintenance, error correction or other changes. Deployed will not be liable to you or to any third party for any such modification, suspension or discontinuance.
14. Changes to these Terms
Deployed may change these Terms from time to time. When we do, we will post the revised Terms on the Site, move the date at the top of this page, and note material changes in the changelog. Changes take effect on posting. Your continued use of the Site after a change constitutes acceptance of the revised Terms.
15. Governing law and jurisdiction
These Terms, and any dispute or claim arising out of or in connection with them or their subject matter (including non-contractual disputes or claims), are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction to settle any such dispute or claim, except that if you are a consumer resident in Scotland or Northern Ireland you may also bring proceedings in the courts of your home nation. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
16. Termination
Deployed may terminate or suspend your use of the Site, including any credentials issued to you, and may remove any information you have provided to us or posted to the Site, if you breach these Terms or any rules or guidelines posted on the Site, if you breach applicable law, or where we reasonably consider it necessary to protect the Site, the Services or other users. Revoking a credential set may involve the permanent deletion of the sandbox data associated with it.
17. Force majeure
Deployed is not responsible for damage, delay or failure in performance resulting from events beyond its reasonable control, including fire, flood, power failure, failure of telecommunications or hosting providers, acts of God, war, terrorism, civil commotion, epidemic, action of any government or regulator, labour disputes, or acts or omissions of third-party carriers and service providers.
18. Copyright complaints
Deployed respects intellectual property rights. If you believe that material on the Site infringes your copyright, email jamie.gannaway@deployed.co with a description of the work, the location of the material on the Site, your contact details and a statement that you believe in good faith that the use is not authorised. We will investigate and, where appropriate, remove or disable access to the material.
19. Notices
You agree that Deployed may give you notices and other information about the Site electronically, including to any email address you have supplied to us. Notices to Deployed should be sent to jamie.gannaway@deployed.co.
20. General provisions
You agree to comply with all applicable laws and regulations in your use of the Site. These Terms, together with the Privacy Policy and any document they incorporate, constitute the entire agreement between you and Deployed with respect to use of the Site and supersede any prior understanding on that subject. A waiver by either party of a breach does not waive any later breach of the same or a different kind. If a court of competent jurisdiction finds any provision of these Terms, or part of one, unenforceable, that provision will be enforced to the maximum extent permissible so as to give effect to the parties’ intent, and the rest of these Terms will remain in full force. You may not assign or transfer your rights under these Terms; Deployed may assign them to a successor to its business. A person who is not a party to these Terms has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any of them. 
