Token of Trust
Tap a star to rate
What Token of Trust is
Token of Trust is a verification and compliance company headquartered in the United States. Its end-user terms name the operating company as TOT, Inc. and say the service is run from the US and governed by Minnesota law. The pages describe it as customer verification and compliance for regulated ecommerce, covering age, identity, fraud, excise tax and reporting. Its adult websites and apps page sells the age check to adult sites, with the promise to meet regulatory requirements "without scaring off users or adding friction".
What it sells an operator
The age product is sold as "Age Verification For age-restricted products". The pricing page lists real-time age estimation, customizable age thresholds, document-based verification, a biometric selfie match, international document support and database checks. The adult page describes the approaches an operator can choose from: biometric age estimation, minimal-retention ID checks and database lookups. It also says the system "detects a visitor's location and applies the correct verification method automatically", so one installation can apply different rules by region and skip the step for visitors in places that do not require it. The page adds that the company tracks new and changing age verification laws and updates the customer's verification process automatically. The pricing page says each check returns an instant pass or fail signal with audit-ready evidence.
A separate identity product matches the user, the ID and a selfie, and offers a manual review fallback. A KYC and AML tier adds watchlist checks for politically exposed persons and sanctions.
In October 2026 the pricing page lists a free quota at $0 a month with 3 free verifications and sandbox API access, the age verification plan at $25 a month plus $0.50 per verification, the ID verification plan at $160 a month plus $1.22 per verification, and enterprise solutions from $500 a month.
Integration runs through connectors, an SDK, the API or a hosted app for requesting verifications. The pages list pre-built connectors for Shopify, BigCommerce, WooCommerce and WordPress, Adobe Commerce, Odoo, MedusaJS and Wix, plus a custom route. The product page describes a low-code SDK and an API. The adult page says the company integrates with "major CMS platforms and payment systems used by adult sites". The vendor claims most sites launch "in days, not weeks" and that a customer completes a flow in under 30 seconds.
The terms that decide the choice
No content rules for adult customers appear anywhere on the site. The adult page is headed "Keep your adult site live and legal with smarter age checks", which is marketing copy and not a policy. The pages do not say which kinds of adult site the company accepts, or whether any approval step applies. The end-user terms restrict user comments on the System, including sexually explicit content, but that rule covers posts made on the vendor's own system, not the operator's site.
The most important term for an operator sits in the end-user terms. Under the heading on the relationship between the user, the customer and the company, the terms say it is "solely Customer's responsibility" to inform users of the relevant policies, to obtain the rights and consents needed for lawful use of the data, to ensure the transfer and processing is lawful, and to resolve disputes with users. The vendor disclaims representations about the services and provides them as is. The terms also say content stored by a customer belongs to that customer, which makes the customer responsible for handling it.
On retention, the adult page says verification documents are stored only as long as needed to complete the review and meet compliance requirements, and it gives 30 to 90 days, with data encrypted, never shared without explicit permission and deleted once the period ends. The product page says retention varies by service and plan, "from no storage for age estimation to required compliance archives". The end-user terms say an erasure request leads to deletion within 30 days, unless a legal requirement applies.
The end-user terms also describe a Reputation Report built from a user's linked accounts. The terms say an algorithm generates it, that it is not reviewed before creation, and that the company disclaims liability for reliance on it. The pages do not say whether the age checks draw on it.
The end-user terms say the company has no obligation to investigate suspicious activity reported through a "Report Abuse" link, and may deactivate an account after an investigation at its own discretion. Card processing outside the US may carry foreign transaction fees for users, as the end-user terms say.
The end-user terms refer to a separate Customer Terms of Service or written contract that governs the business customer, and that document is not published.
Getting started and support
The free quota needs no credit card and includes sandbox API access, so an operator can test the flow before it pays. The pricing page lists developer API access and basic email support on the age assurance free quota, and sandbox API access with community support on the identity free quota. It lists no support tier for the paid age plan. The adult page describes a path of a compliance review of the current verification flow, a tailored blueprint of methods by audience and region, and help with integration, testing and launch. The product page says setup depends on the platform and the services chosen, and that the team confirms the products, shipping locations and platform before a commitment.
Company and track record
The pages name TOT, Inc. as the operating company and a United States headquarters. They do not name a founding year, a management team or the number of sites that use the service. The homepage claims verification in more than 200 countries. The company page lists GDPR, CCPA and PIPEDA alongside 256-bit SSL encryption and a pledge to never sell user data. Those are the company's own statements.
Who it suits
Age verification is the only category. Token of Trust fits an adult operator that wants a free test with sandbox access, then a monthly plan with per-verification fees for age checks, and a separate ID check for the higher-risk paths. Its location routing suits an operator that has to apply UK and US state rules side by side. The retention choices by service, from no storage for estimation to a compliance archive, give an operator a way to match storage to each check.
It fits less well where an operator needs content rules in writing, a named list of US states, or the business-side terms before it has signed; the pages cite 20+ US state laws without naming them. The company may also deactivate accounts at its discretion under the end-user terms.
The main draw is the test-first route: no card, sandbox keys and a free quota, with a choice of methods and retention settings that an operator can match to its own legal review.