AttestLayerAttestLayer

Terms of Service (v2026-02-27)

These Terms of Service are legally binding when you purchase, access, or use AttestLayer services. A formal MSA is available upon request for MMC lanes.

1. Scope

AttestLayer provides automated evidence-kit issuance for managed-response teams. You upload a ZIP or individual files (PDF/DOCX/XLSX/PNG/JPG/CSV/JSON/TXT). The engine returns a deterministic PASS or FAIL result.

  • On PASS: you receive kit.zip (manifest, receipt, artifacts, offline verifier, mapping).
  • On FAIL: you receive fail_report.json with a machine-readable resubmit checklist.
  • We do not answer questionnaires, issue compliance opinions, or certify controls.
  • We do not invent evidence. Missing items produce FAIL or UNSUPPORTED markers.

2. Deterministic PASS / FAIL

Every submission receives exactly one deterministic outcome:

  • PASS — required artifact groups present and valid. A kit is prepared and verified.
  • FAIL — one or more required groups missing or invalid. A fail report is issued.

There is no partial PASS. There is no “pending review.” The engine is fully automated.

3. Credits & Billing

Credit definition:

1 credit = 1 verified PASS kit issued.

Billing rules:

  • FAIL burns $0 credits (no burn).
  • PASS burns 1 credit only when Verify PASS succeeds and the kit is issued.
  • PASS + Verify FAIL burns $0 credits (no burn). If verification fails due to an AttestLayer system error, the kit is re-issued and no credit is burned.

Buyer-safe resubmit (reliability, not billing):

  • Each FAIL includes 1 free resubmit within 7 days.
  • Additional FAIL resubmits may be rate-limited for reliability (never charged).

Fail-closed issuance:

If credits are 0, PASS issuance is blocked (BILLING_REQUIRED) and no kit is issued until credits are available.

4. SLA

The SLA clock begins at PASS (pass_at), not at upload.

Activation:

  • Activation-10 / Activation-25: 24 hours after PASS
  • Activation-50 / Activation-100: 12 hours after PASS

MMC Lane:

  • Tier 1 (MMC-25K): 12 hours after PASS
  • Tier 2 (MMC-50K): 8 hours after PASS
  • Tier 3 (MMC-100K): 6 hours after PASS
  • Tier 4 (MMC-250K): 4 hours after PASS

Make-good:

If we miss the stated SLA after PASS, the system automatically applies credit back + 10% bonus credits. No ticket required.

5. Payment Terms

Activation:

  • Card or ACH (Stripe). Invoice available upon request.

Invoice / ACH / wire: access activates after cleared payment, typically 1–3 business days, though some bank or AP workflows can take up to 5 business days.

MMC Lane:

  • Invoice (Net-5) unless otherwise agreed in a signed MSA/order form.
  • MMC auto-renews monthly. Cancel anytime before the next billing date; cancellation takes effect at the end of the current billing period.

Monthly Coverage Subscription Terms

  • Monthly Coverage is a recurring subscription that renews automatically each billing cycle.
  • Card payments activate immediately after successful checkout.
  • Invoice / ACH / wire payments activate after cleared payment, typically 1–3 business days, though some bank or AP workflows can take up to 5 business days.
  • Monthly Coverage may be cancelled anytime before the next billing date by email to billing@attestlayer.com.
  • Cancellation takes effect at the end of the current billing period.
  • No prorated refund is provided for partial months.
  • Unused monthly credits do not roll over.

Activation Upgrade and Conversion Rules

  • Activation purchases are prepaid and non-cash-refundable.
  • If a buyer upgrades from Activation-10 to Activation-25 within 30 days of the Activation-10 purchase, 100% of the Activation-10 purchase price is applied to the Activation-25 purchase price.
  • The original Activation-10 credits do not stack separately after upgrade; the purchase-price credit replaces the unused Activation-10 balance.
  • If a buyer executes an MMC order within 90 days of an Activation purchase, eligible unused paid Activation balance converts 1:1 into MMC credits at MMC execution.
  • No double counting applies: the same balance cannot be credited twice through both an upgrade step-up and an MMC conversion.
  • Activation credits are not redeemable for cash.

If a checkout page, order form, or signed order document includes more specific commercial terms, those specific commercial terms govern for that transaction, except where prohibited by law.

6. Confidentiality & Retention

All partner intake data is confidential. We do not share, sell, or re-use it.

Retention:

  • Uploads: up to 24 hours (automatic deletion)
  • Hosted deliverable links: 30 days (links expire; automatic deletion)
  • Downloaded copies: kept by you/your customer outside our control

White-label:

Default is white-label. Deliverables contain no AttestLayer branding unless you opt into co-brand. For MMC lanes, a neutral download domain or CNAME may be supported.

7. Security

  • Encryption at rest: AES-256 (platform-managed). CMEK is available for Enterprise Reserved Capacity lanes.
  • Signing: Ed25519. Hashing: SHA-256.
  • Transport: HTTPS/TLS in transit.
  • Artifacts are cryptographically committed after issuance (signed receipts + Merkle inclusion proofs). Any re-issuance generates a new receipt.
  • Payments are handled by Stripe; AttestLayer does not store full card numbers.
  • Subprocessors: https://partners.attestlayer.com/subprocessors
  • Vulnerability disclosure: https://partners.attestlayer.com/vulnerability-disclosure

8. Contact

contact@attestlayer.com (general) • billing@attestlayer.com (billing) • security@attestlayer.com (security)

Toll-free: 1-866-739-0570

HQ: 360 rue Saint-Jacques, Suite G101, Montréal, Québec H2Y 1P5, Canada

Not legal advice. Not an audit opinion. Not a compliance certification. AttestLayer packages evidence and produces verification artifacts only.