Your responsibilities

What is yours, and what is ours

A plain summary of sections 6, 7 and 17 of the customer agreement. If the two differ, the agreement is what counts. Effective 10 September 2026.

The certificate the software produces goes out in your company's name, under your type approval, with your signature on it. The software makes it right; you make it true.

Yours

What goes in. Every figure, code and date you type or import is yours to get right. The software checks the file against the VCA's rules; it cannot know whether a mass or a dimension is the real one.
Your type approval. You must hold a valid approval for what you build, and enter its number and details correctly.
Your seal. The certificate or key used to sign your files is yours to obtain, renew and keep safe, along with the computers it lives on. We never hold it.
Your VCA account. Files go to the VCA under your own credentials, and the VCA's terms apply to you.
Checking before you issue. Look at each file before you issue or send it. If one is wrong, correct it and reissue.
Keeping your own copy for ten years. Vehicle type-approval law requires a manufacturer to keep a copy of every Certificate of Conformity for ten years from the vehicle's date of manufacture, and to issue a duplicate on request. The service helps while your account is open. The duty is yours, so export before an account closes.
Paper on request. Where an electronic certificate has not been provided, the law still requires you to provide a paper one free of charge.
Your team. Everyone you invite, and removing people who leave.

Not allowed

Producing a certificate for a vehicle you did not manufacture or complete. Producing a document that is false or misleading. Trying to reach another company's data. Reselling access. Anything else the law forbids.

Ours

To provide the service with reasonable care and skill, and to the service levels we publish.
To check every file against the UK IVI schema the VCA publish, and to sign it to the XAdES standard their guidance points to.
To keep your data in the United Kingdom, encrypted, backed up, and processed only on your instructions, as the Data Processing Agreement sets out.
To tell you within 48 hours if a security breach affects your data.
To let you export everything, at any time, and to delete it when you ask.

Neither of us

Nobody but the Vehicle Certification Agency decides whether a file is accepted. We are not affiliated with the VCA, we do not give legal, regulatory or engineering advice, and we cannot promise their requirements will not change.

Effective 10 September 2026.