Platform Terms

Version 1.0. Effective 1 October 2026. These terms replace any earlier end user licence agreement for the Certifitax platform.

1. Parties, Accounts, and Roles

These terms are entered into between Medtax Solutions Inc. (“Medtax,” “we,” “us”) and each person or entity that registers an account on the Certifitax platform (“you”). They apply to every account, whether held by an individual or by an entity.

1. “Certifitax” or the “Platform” means the web application operated by Medtax through which tax certificates are generated, issued, and delivered.
2. “Account” means a registered account on the Platform, held by an individual or by an entity.
3. “Issuer” means an Account acting to generate, issue, or deliver a Certificate. “Recipient” means the person or entity named on a Certificate as the payee of the income to which it relates. An Account may act as an Issuer, as a Recipient, or as both, and may do so in respect of different Certificates at the same time.
4. “Entity Account” means an Account held in the name of a hospital, clinic, company, partnership, or other entity, as distinct from an Account held by an individual in their own name.
5. “Authorized User” means an individual permitted to access an Entity Account.
6. “Certificate” means a tax certificate, including BIR Form 2307 and BIR Form 2316, generated through the Platform.

Some provisions of these terms apply only when you act as an Issuer, and are marked accordingly. Some apply only to an Entity Account. The remainder apply to every Account.

2. Acceptance and Authority

You accept these terms by registering an Account or by using the Platform. Where you accept them on behalf of an entity, you represent that you are duly authorized to bind that entity to them, and “you” refers to that entity.

Medtax records the name and position given by the individual accepting, the date and time of acceptance, and the version of these terms and of the Data Privacy Policy then in force. Medtax does not amend a published version in place; where these terms change materially, a new version is published and acceptance is sought again.

3. Licence and Permitted Use

Subject to these terms, Medtax grants you a non-exclusive, non-transferable, revocable right to access and use the Platform during the term, solely to generate, issue, deliver, retain, and retrieve Certificates in respect of income payments you have made or received.

You may permit a third party, such as your accountant, bookkeeper, or outsourced finance provider, to access your Account as an Authorized User in order to perform these activities on your behalf. Where you act as an Issuer you remain the withholding agent, remain responsible for the Certificates issued from your Account, and remain responsible for the acts and omissions of any such Authorized User.

1. You shall not resell, sublicense, rent, or otherwise make the Platform available to any person other than your Authorized Users.
2. You shall not use your Account to issue Certificates in respect of income payments made by another entity. Where a firm acts for several clients, each client must hold its own Account, to which the firm may be granted access.
3. You shall not copy, modify, translate, reverse engineer, decompile, or create derivative works of the Platform or any part of it, except to the extent that restriction is unenforceable under applicable law.
4. You shall not use automated means to extract data from the Platform other than through functionality Medtax provides for that purpose.
5. You shall not use the Platform to store or transmit any material that is unlawful, infringing, or malicious, or to attempt to gain unauthorized access to the Platform or to another Account’s data.
6. You are responsible for keeping your account credentials confidential, and for removing an Authorized User’s access when that person ceases to be entitled to it.

4. Accuracy of Data

Applies when you issue Certificates

You are solely responsible for the accuracy, completeness, legality, and timeliness of all data you upload, encode, or generate through the Platform, including the identity and Tax Identification Number of each Recipient, the nature and amount of each income payment, the taxes withheld, and the period covered.

Medtax does not verify, audit, validate, correct, or independently confirm that data. Certificates are generated from the figures you supply, as supplied. Medtax gives no assurance that a Certificate is accurate, that the amounts shown are correct, or that you have met any withholding, remittance, filing, or reporting obligation.

You shall ensure you have a lawful basis under the Data Privacy Act of 2012 for providing Recipient personal data to Medtax for processing through the Platform, and for the issuing and delivery of Certificates to those Recipients.

For personal data you upload, encode, or generate through the Platform, you are the personal information controller and Medtax is a personal information processor acting on your instructions, as set out in the Data Privacy Policy. Medtax does not determine the purposes for which that data is processed.

You shall promptly correct, through the Platform, any error you identify in a Certificate you have issued, and shall deal directly with any Recipient request to access, correct, or object to the data appearing on a Certificate. Where Medtax receives such a request, it will refer the Recipient to you and act only on your lawful instruction.

You shall keep your registration details, including your registered name, Tax Identification Number and branch code, Revenue District Office, and registered address, accurate and current in the Platform. Certificates are generated using those details, and a discrepancy against your registration with the Bureau of Internal Revenue may cause a Recipient’s claim for tax credit to be questioned.

5. Fees and the Beta Period

Certifitax is currently offered free of charge during a beta period. No subscription fee is payable for access during that period, and Medtax will not suspend or restrict any Account’s access for non-payment while the beta period continues. Accounts held by individuals in their own name are free of charge permanently.

Medtax may end the beta period and introduce subscription fees for Entity Accounts by giving at least thirty (30) days’ written notice to the Account’s registered email address. The notice will state the fees payable and the date from which they take effect.

An Account that does not wish to continue on paid terms may stop using the Platform before that date at no charge. Certificates already issued through the Platform remain accessible to the Account that issued them and to the persons named on them for the retention period stated in the Data Privacy Policy, whether or not that Account continues to use the Platform.

6. Account Identity

An Entity Account is identified by its nine-digit Tax Identification Number together with its five-digit branch code. Each separately registered branch holds its own Account, with its own authorized signatory and its own certificate history. Accounts sharing the same nine-digit base may be presented as a group. An Account held by an individual who is not separately registered is identified by the nine-digit number alone.

Only one Account may be held for the same Tax Identification Number and branch code. Where a registration presents a Tax Identification Number and branch code already held, no new Account is created; the registrant may request access to the existing Account, which an administrator of that Account may approve.

Medtax validates the format of a Tax Identification Number and nothing more. No public service exists against which a Tax Identification Number can be confirmed, and Medtax makes no representation that any number given is registered, current, or belongs to the person giving it.

7. Refusal of Registration and Reinstatement

Medtax may decline to register an Account, and may decline to reinstate an Account whose access has previously been terminated, at its discretion. Medtax is not obliged to give reasons, and no person has a right to an Account on the Platform.

Where a registration presents the Tax Identification Number and, where applicable, the branch code of an Account whose access was previously terminated, Medtax may refuse the registration, or may permit it on conditions. Medtax may also decline to grant an individual access to any Account on the Platform where that individual was responsible for conduct that led to a termination under Section 15.

Where a registration is refused, Medtax will tell the applicant that it has been refused and how to contact Medtax about it. Refusal under this Section does not affect the retrieval of Certificates already issued to or by any Account, which continues in accordance with Section 19.

8. Authorized Signatory

Applies to Entity Accounts issuing Certificates

You designate, through the Platform, the individual whose name and position appear as your authorized signatory on the Certificates you issue. You represent and warrant that each individual you so designate is duly authorized to sign Certificates on your behalf.

Medtax does not verify, and has no obligation to verify, the authority of any individual designated as an authorized signatory, the accuracy of the position stated, or the internal approvals by which the designation was made. Medtax is entitled to rely on a designation made through the Platform until you change it there.

You are solely responsible for every Certificate issued from your Account bearing a signatory you designated, and for keeping the designation current. You shall update the Platform without undue delay where a designated signatory ceases to be authorized.

Responsibility for compliance with the withholding, signing, filing, and record-keeping obligations imposed on a withholding agent under the National Internal Revenue Code and the issuances of the Bureau of Internal Revenue rests with you. Certifitax generates and delivers Certificates from the data and designations you supply.

9. Data Protection

The Data Privacy Policy describes how personal data is collected, used, stored, shared, retained, and protected in connection with the Platform, and forms part of these terms. Where personal data is processed through the Platform, the Account supplying it is the personal information controller and Medtax is a personal information processor, as set out in that policy and in Section 4 above.

Medtax records the identity of each Authorized User and of each person granted delegated access. Such records persist independently of any single Account, and Medtax may decline to grant a person access to the Platform on the basis of conduct in connection with another Account. Medtax does not disclose the reason for such a refusal.

10. Intellectual Property

Medtax and its licensors own all intellectual property rights in the Platform, including its software, design, database structure, documentation, and the Certifitax and Medtax names and logos. These terms grant you a right to use the Platform under Section 3 and transfer no ownership.

You own the data you submit to the Platform and, where you act as an Issuer, the Certificates generated from it. You grant Medtax a non-exclusive licence to host, process, transmit, and display that data solely to provide the Platform, to deliver Certificates to the persons named on them, and to meet Medtax’s obligations under these terms and the Data Privacy Policy. That licence ends when the data is deleted in accordance with the Data Privacy Policy.

Medtax may use aggregated and de-identified information about how the Platform is used to operate, secure, and improve it. Such information will not identify any Account, Authorized User, or person named on a Certificate, and will not include the contents of any Certificate.

Where you give Medtax feedback or suggestions about the Platform, Medtax may use them without restriction and without obligation to you. Nothing in this Section gives Medtax any right in your name, marks, or Certificates beyond the licence described above.

11. Confidentiality

“Confidential Information” means non-public information disclosed by one party to the other in connection with these terms, whether or not marked as confidential. Your Confidential Information includes the Certificates you issue or are named on, the personal and financial data they contain, and your registration and payment records. Medtax’s Confidential Information includes the non-public features, security arrangements, and pricing of the Platform.

Each party will keep the other’s Confidential Information confidential, use it only as necessary to perform these terms, and disclose it only to its personnel and contractors who need it for that purpose and are bound by confidentiality obligations no less protective than these. Neither party will sell the other’s Confidential Information, use it for advertising, or use it to test or develop unrelated products.

These obligations do not apply to information that is or becomes public through no breach of these terms, was already known to the receiving party without obligation of confidence, or is independently developed without use of the disclosing party’s Confidential Information.

A party may disclose Confidential Information where required by law, by the Bureau of Internal Revenue, or by an order of a court or regulator. Where it is lawful to do so, it will notify the other party before disclosing, and will disclose no more than required.

These obligations continue for three (3) years after these terms cease to apply to your Account. Personal data remains subject to the Data Privacy Policy and to the Data Privacy Act of 2012 for as long as it is held, whether or not this Section has expired.

12. Acceptable Use

Where you act as an Issuer, you will use the Platform only to generate and deliver Certificates for income payments you have actually made and taxes you have actually withheld, and only for persons you have paid. You will not use the Platform to issue, alter, or backdate a Certificate that does not reflect a real transaction. The remainder of this Section applies to every Account.

• Not access the Platform other than through the interfaces Medtax provides, and not attempt to access another Account’s data or a Certificate you are not a party to.
• Not copy, modify, reverse engineer, decompile, or create derivative works from the Platform, except to the extent that restriction is unenforceable under applicable law.
• Not resell, sublicense, or make the Platform available to a third party as a service, except as permitted for Authorized Users and delegated access under Section 3.
• Not use the Platform to obtain, retain, or act on a Certificate naming you as Recipient that you know does not reflect a payment you received.
• Not upload malicious code, probe or test the Platform’s security without Medtax’s written consent, or interfere with its operation or with another user’s use of it.
• Not use the Platform in breach of the National Internal Revenue Code, the Data Privacy Act of 2012, or any other applicable law.

Enforcement of this Section is governed by Section 15.

13. Service Availability, Support, and Maintenance

Medtax will use commercially reasonable efforts to keep the Platform available, but does not commit to a service level during the beta period. The Platform is provided without a guaranteed uptime percentage, and Medtax does not warrant that access will be uninterrupted or error-free.

Medtax may perform scheduled maintenance that makes the Platform temporarily unavailable, and will give reasonable advance notice by email or in-Platform notice where the work is expected to cause more than brief interruption. Emergency maintenance to address a security or data-integrity risk may be performed without notice.

Support is available by email to the address in Section 22 during Philippine business hours. Medtax does not provide tax advice. Whether an amount is subject to withholding, at what rate, and what a Certificate must contain are determinations for the Issuer, and you should take your own professional advice.

Medtax will not remove your ability to retrieve Certificates you have issued or been named on except as provided in the Data Privacy Policy’s retention terms or on termination under Section 19.

14. No Duty to Monitor or Verify

Medtax provides a tool for generating and delivering Certificates. Medtax does not review, verify, audit, or validate the data any Account submits, the amounts stated on any Certificate, or whether any Certificate reflects a transaction that occurred. The generation of a Certificate through the Platform is not a confirmation by Medtax that it is accurate, complete, properly computed, or issued to the correct Recipient.

Medtax does not file, submit, or lodge any return, form, or Certificate with the Bureau of Internal Revenue or any other authority on your behalf, and has no visibility into whether you have done so. Filing, the timeliness of filing, remittance of withheld tax, and all other aspects of your tax compliance remain your sole responsibility, whether you act as an Issuer or as a Recipient.

Medtax has no obligation to monitor any Account’s use of the Platform, to detect misuse, or to identify inaccurate or fraudulent Certificates. Where Medtax does become aware of such use, the rights in Section 15 apply, but Medtax’s exercise or non-exercise of them creates no duty to have discovered the matter earlier and no duty to act in any other case.

15. Breach and Enforcement

Each of the following is a breach of these terms. Items 1 to 4 apply to you when you act as an Issuer; the remainder apply to every Account.

1. Issuing, altering, or backdating a Certificate that does not reflect an income payment actually made, or a Certificate you knew or ought to have known to be materially inaccurate.
2. Issuing a Certificate to a person you did not pay, or naming as Recipient a person other than the payee of the income concerned, or obtaining or retaining a Certificate naming you as Recipient that you know does not reflect a payment you received.
3. Submitting data to the Platform without a lawful basis under the Data Privacy Act of 2012, or in breach of your obligations as controller of that data.
4. Registering or holding more than one Account for the same Tax Identification Number and branch code, or providing false registration details, including a false Tax Identification Number, name, or authorized signatory.
5. Accepting these terms on behalf of an entity without authority to bind it.
6. Granting access to your Account to a person who is not an Authorized User or a permitted delegate, or failing to withdraw access from a person who is no longer either.
7. Accessing or attempting to access another Account’s data, or a Certificate you are not a party to.
8. Copying, modifying, reverse engineering, or creating derivative works from the Platform, except where that restriction is unenforceable under applicable law.
9. Reselling, sublicensing, or making the Platform available to a third party as a service, otherwise than as permitted under Section 3.
10. Uploading malicious code, probing or testing the Platform’s security without written consent, or interfering with the operation of the Platform or with another user’s use of it.
11. Any other use of the Platform in breach of the National Internal Revenue Code, the Data Privacy Act of 2012, or other applicable law.

Medtax does not monitor the Platform for breaches and has no obligation to do so. Medtax does not review or verify the Certificates any Account issues, and has no visibility into whether they have been filed. Medtax acts on a suspected breach only where it is brought to Medtax’s attention, whether by a person named on a Certificate, by the Bureau of Internal Revenue or another authority, by the Account concerned, or otherwise.

Where a suspected breach is brought to Medtax’s attention, Medtax may suspend or terminate the Account’s access, or the activity concerned, with immediate effect and without prior notice; may decline to reinstate the Account; may refuse a later registration presenting the same Tax Identification Number and branch code; and may decline to grant the individuals responsible access to any Account on the Platform. Where the suspected breach concerns security or system integrity rather than the contents of a Certificate, Medtax will give the Account holder the reason and will restore access once the matter is resolved.

Medtax is not obliged to act on any report, to investigate any suspected breach, or to act consistently between cases. Medtax’s exercise of any right under this Section, or its decision not to exercise one, creates no duty to have identified the matter earlier, no duty to act in any other case, and no waiver of any right in respect of the same or any other breach.

Medtax may report to the Bureau of Internal Revenue or any other competent authority any matter it is required by law to report, and may respond to any lawful request for information. Certificates already issued remain retrievable by the Account that issued them and by the persons named on them in accordance with Section 19, whether or not access has been suspended or terminated; Medtax may record that a Certificate is subject to a dispute or an enforcement action.

16. Warranty Disclaimer

The Platform is provided “as is” and “as available.” To the maximum extent permitted by applicable law, Medtax makes no warranties of any kind, whether express, implied, statutory, or otherwise, and specifically disclaims any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

Medtax does not warrant that the Platform will meet your requirements, that it will operate without interruption or error, that defects will be corrected, or that any Certificate generated through it will be accepted by the Bureau of Internal Revenue or by any other person who relies on it.

Certifitax generates Certificates from the data you supply and the determinations you make. Medtax gives no warranty as to the accuracy, completeness, or legal sufficiency of any Certificate, as to whether any amount is subject to withholding or at what rate, or as to whether your use of the Platform satisfies any obligation you have under the National Internal Revenue Code or the issuances of the Bureau of Internal Revenue. Section 14 sets out what Medtax does not check.

Nothing in this Section excludes or limits any warranty or condition that cannot be excluded or limited under applicable law, including under any consumer protection law applicable to an individual Account holder.

17. Limitation of Liability

To the maximum extent permitted by applicable law, Medtax will have no liability to you arising out of or in connection with these terms or your use of the Platform, whether the claim is brought in contract, tort, quasi-delict, statute, or otherwise. The Platform is provided free of charge during the beta period, and free of charge to individual Account holders, and this allocation of risk reflects that.

In particular, and without limiting the paragraph above, Medtax will not be liable for loss of profit, loss of revenue, loss of anticipated savings, loss of business or goodwill, loss or corruption of data, business interruption, or any indirect or consequential loss, even if Medtax was advised of the possibility of it.

Medtax will not be liable for any penalty, surcharge, interest, or assessment imposed on you by the Bureau of Internal Revenue or any other authority, or for any consequence of a Certificate being incorrect, late, or rejected, where the cause is data you or your Authorized Users supplied, a determination you made, or a filing you failed to make. Section 4 governs responsibility for the accuracy of certificate data.

Where any exclusion in this Section is held unenforceable in whole or in part, it applies to the maximum extent permitted by applicable law, and Medtax’s total aggregate liability for all claims arising out of or in connection with these terms will not exceed the greater of one hundred thousand pesos (₱100,000.00) or the total fees you paid Medtax in the twelve (12) months preceding the event giving rise to the claim.

Nothing in this Section excludes or limits liability that cannot be excluded or limited under applicable law, including liability for fraud, for gross negligence or wilful misconduct, for death or personal injury, under the Data Privacy Act of 2012, or under any consumer protection law applicable to an individual Account holder. Nothing in this Section affects any person’s rights as a data subject.

18. Indemnity

Applies when you issue Certificates

This Section applies to you only in respect of your conduct as an Issuer, and to an Entity Account in respect of its Authorized Users and delegates. An Account that has not issued a Certificate gives no indemnity under this Section.

Where you act as an Issuer, you will indemnify, defend, and hold harmless Medtax, its directors, officers, employees, and contractors from and against any claim, demand, action, proceeding, loss, liability, damage, penalty, cost, or expense, including reasonable legal fees, brought by or payable to a third party and arising out of or in connection with any of the following.

• The contents of any Certificate you issued through the Platform, including any assertion that it is inaccurate, incomplete, unsupported, or issued for a transaction that did not occur.
• Any data you or your Authorized Users submitted to the Platform as an Issuer, including personal data submitted without a lawful basis or in breach of the Data Privacy Act of 2012.
• Any determination you made as to whether an amount is subject to withholding, at what rate, or what a Certificate must contain.
• Your breach of these terms as an Issuer, including Section 4 on data accuracy and Section 12 on acceptable use.
• Any act or omission of an Authorized User of your Entity Account, or of a person to whom you granted delegated access under Section 3.
• Any claim by a person named as Recipient on a Certificate you issued, other than a claim arising solely from Medtax’s own breach of these terms.

Medtax will notify you promptly of any claim for which it seeks indemnity, and will not settle such a claim without your consent. You may assume the defence of the claim with counsel reasonably acceptable to Medtax, and Medtax will provide reasonable cooperation at your expense. Where you do not assume the defence within a reasonable period, Medtax may defend the claim and you will reimburse its reasonable costs.

Medtax gives no indemnity to you under these terms. Section 17 governs the extent of Medtax’s liability.

19. Term and Termination

These terms begin when you accept them and continue until terminated under this Section.

You may terminate these terms at any time, with immediate effect, by closing your Account or by giving written notice to Medtax. No fee or charge is payable on termination, and where fees have been introduced and paid in advance, Medtax will refund the unused portion on a pro-rata basis.

Medtax may terminate these terms or your access to the Platform at any time, with immediate effect, by notice to your registered email address. Medtax may also suspend rather than terminate access under Section 15.

On termination, your right to use the Platform to generate, issue, or deliver new Certificates ends immediately. You and every person named on a Certificate already issued through the Platform retain access to it, and the ability to retrieve and export it, for the retention period stated in the Data Privacy Policy. Medtax will not delete or withhold an issued Certificate on account of termination.

Where you request it, Medtax will provide an export of your Certificates and Account data in a machine-readable format within thirty (30) days of the request, whether or not these terms have been terminated.

Sections 10, 11, 16, 17, 18, 20, and 21, and any provision that by its nature is intended to survive, continue in force after these terms end. Medtax’s obligations in respect of personal data continue for as long as it holds that data, as described in the Data Privacy Policy.

20. Governing Law and Dispute Resolution

These terms are governed by the laws of the Republic of the Philippines, without regard to conflict of laws principles.

The parties submit to the exclusive jurisdiction of the proper courts of Makati City, Metro Manila, for any action or proceeding arising out of or in connection with these terms, and waive any objection to that venue on grounds of inconvenience. Nothing in this Section prevents either party from seeking injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

Before commencing proceedings, the party raising a dispute will give the other written notice describing it, and the parties will attempt in good faith to resolve it within thirty (30) days of that notice. This paragraph does not prevent either party from seeking urgent relief, and does not extend any limitation period.

21. General Provisions

Entire agreement. These terms, together with the Data Privacy Policy, constitute the entire agreement between you and Medtax in respect of the Platform, and supersede any prior agreement, representation, or understanding, including any earlier end user licence agreement for the Platform.

Amendment. Medtax may amend these terms. Where an amendment is material, Medtax will publish the amended terms as a new version, notify you at your registered email address, and ask you to accept the new version on your next sign-in. Continued use of the Platform after a non-material amendment constitutes acceptance of it. Medtax does not amend a published version in place.

Notices. Medtax gives notice to you at the email address registered on your Account, or by notice within the Platform, and it takes effect when sent or displayed. You give notice to Medtax at the address in Section 22. You are responsible for keeping your registered email address current.

Assignment. You may not assign or transfer these terms, or your Account, without Medtax’s written consent, except to a successor in a merger, consolidation, or sale of substantially all of your business or assets, on notice to Medtax. Medtax may assign these terms to an affiliate or to a successor in connection with a merger, acquisition, or sale of assets, on notice to you.

Severability. Where any provision of these terms is held invalid or unenforceable, it will be modified to the minimum extent necessary to make it enforceable, or if it cannot be, severed, and the remaining provisions continue in full force.

Waiver. A failure or delay by either party in exercising a right under these terms is not a waiver of it, and a waiver on one occasion is not a waiver on any other. A waiver is effective only if given in writing.

Force majeure. Neither party is liable for a failure or delay in performing its obligations, other than an obligation to pay, caused by an event beyond its reasonable control, including act of God, natural disaster, typhoon, earthquake, epidemic, act of government, civil disturbance, war, failure of a telecommunications or power network, or failure of a third-party hosting or infrastructure provider.

No partnership or agency. Nothing in these terms creates a partnership, joint venture, employment, or agency relationship between you and Medtax. Medtax does not act as your agent or representative before the Bureau of Internal Revenue or any other authority.

No third-party beneficiaries. These terms are for the benefit of you and Medtax, and confer no right on any other person, except that a person named as Recipient on a Certificate may rely on the provisions governing continued retrieval of that Certificate.

Language. These terms are made in English. Where Medtax provides a translation, the English version governs in the event of inconsistency.

22. Contact Information

Questions about these terms may be sent to Medtax Solutions Inc. at contact@certifi.tax, or by post to:

Medtax Solutions Inc.Suite 9D, Valero Tower, Valero StreetBel-Air, Salcedo VillageMakati City, Philippines 1227

Questions about personal data, including the exercise of rights under the Data Privacy Act of 2012, should be sent to the Data Protection Officer at the address given in the Data Privacy Policy.