Skip to content
AttestLayerAttestLayer

Commercial Summary

Channel-facing summary of the partner commercial model, including negotiated lane behavior and downstream delivery assumptions.

For a security, legal, or procurement reviewer, use the Vendor Review Summary.

At a glance

  • Channel: partner-facing, downstream-buyer, and white-label compatible lanes.
  • Product model: deterministic PASS or FAIL from partner- or buyer-supplied exported evidence only.
  • Credit model: 1 credit = 1 verified PASS kit issued.
  • FAIL economics: FAIL burns 0 credits and includes 1 free resubmit within 7 days for the same submission.
  • SLA trigger: starts at PASS, not upload.
  • SLA remedy: automatic credit back plus 10% bonus credits if AttestLayer misses the published SLA after PASS.
  • Retention: uploads up to 24 hours; hosted links, branding rules, and delivery windows may follow the active plan or signed agreement.

Security and data handling

  • Region: Google Cloud northamerica-northeast1, Montréal, Canada.
  • Encryption: TLS in transit, platform-managed AES-256 at rest.
  • Artifact integrity: Ed25519 signatures and SHA-256 manifests.
  • Registry entries contain hashes and timestamps, not customer names.
  • Subprocessors are published on the public subprocessors page.

Commercial rules

  • Reserved Capacity, custom billing cadence, partner branding, and white-label terms follow the active MSA or order form.
  • Monthly Coverage renews automatically each billing cycle until cancelled before the next billing date.
  • Unused Monthly Coverage credits do not roll over.
  • Partner lanes may include invoice, wire, annual, or custom procurement workflows not offered on the public direct-buy path.
  • More specific order documents and signed agreements control for the covered transaction.

Who this page is for

  • Partners qualifying a lane for downstream client delivery.
  • Procurement or ops teams checking what is governed publicly versus by MSA or order form.
  • Teams reviewing partner, reseller, or white-label structures instead of the public self-serve path.

Full policies: Terms · Privacy · Refund · Security · Subprocessors · Vendor Review Summary