API Terms of Use

Last updated: March 2026

These terms govern your use of the ScopeMatch public API. By registering for an API key you agree to these terms.

1. Permitted use

You may use the ScopeMatch API to:

• Build applications, tools, or services that display or use accreditation data.
• Conduct research or analysis on ISO 17025 accreditation coverage across Europe.
• Power AI agents, language models, or automation workflows.
• Integrate lab data into internal dashboards, CRMs, or procurement tools.

2. Attribution requirement

Any public product, service, website, or published work that displays data sourced from the ScopeMatch API must include attribution. Attribution must be visible to end users and must link to scopematch.eu.

Acceptable attribution formats:

Attribution is not required for internal, private, or non-public use.

3. Prohibited use

You may not:

• Resell, sublicense, or redistribute raw API data as a standalone product.
• Use the API to build a competing accreditation directory or data product without written permission.
• Scrape or cache the entire dataset for bulk redistribution.
• Attempt to circumvent rate limits by using multiple API keys or IP addresses.
• Use the API in any way that violates applicable law or GDPR.

4. Rate limits and quotas

API access is subject to tier-based rate limits. Exceeding your quota returns 429 Too Many Requests. Consistent abuse may result in key suspension. See the rate limits section of the API docs for details.

5. Data accuracy

ScopeMatch data is sourced from national accreditation bodies and updated periodically. We make no warranty as to the accuracy, completeness, or currency of the data. Always verify accreditation status with the relevant national body for compliance purposes.

6. Privacy and GDPR

The API does not expose personal data. Only business contact information (e.g. info@lab.com) is included where available. You are responsible for complying with GDPR and any applicable data protection law in your own use of the data.

7. Key security

Your API key is a secret credential. Do not commit it to public repositories or embed it in client-side code. You are responsible for all requests made with your key. Contact us immediately if you believe your key has been compromised.

8. Termination

We may suspend or revoke API keys that violate these terms, without notice. We may also discontinue or modify the API at any time.

9. Contact

Questions about these terms or the API? Contact us.