AttestLayerAttestLayer

Vendor Review Summary

Internal-review packet for partner lanes, downstream buyer delivery, and white-label review. This is not an upsell page.

How this differs from an upsell

An upsell tries to expand scope or move the buyer into a larger commitment. This page is a reviewer handoff for procurement, security, legal, or operations teams that need a compact, low-friction summary before approving a lane that is already under discussion. It is designed to remove blockers in vendor review, not to increase cart value.

Partner service boundary

  • Partner-facing lanes for downstream buyer delivery, white-label use, and Reserved Capacity workflows.
  • Automated evidence-kit issuance from partner- or buyer-supplied exported files.
  • Deterministic PASS or FAIL evaluation.
  • Signed verification kits with public or offline verification support.

What this site is not

  • Not just the public direct-buy card checkout path.
  • Not a promise that every lane has identical retention, branding, or billing terms.
  • Not an audit firm.
  • Not a compliance certification body.
  • Not a penetration testing service.
  • Not a substitute for partner, buyer, legal, or audit review.

Data handling in review terms

  • Primary region: Google Cloud northamerica-northeast1, Montréal, Canada.
  • Uploads retained up to 24 hours, then automatically deleted.
  • Hosted links, white-label delivery choices, and retention windows may follow the active plan or signed agreement.
  • Registry entries contain hashes and timestamps, not customer names.
  • Partner and downstream buyer data may be used for billing reconciliation, fulfillment routing, and delivery support.
  • Payment and invoice records are retained for standard accounting and tax periods.

Commercial mechanics for this site

  • 1 credit = 1 verified PASS kit issued.
  • FAIL burns 0 credits.
  • Each FAIL includes 1 free resubmit for the same submission within 7 days.
  • SLA clock begins at PASS, not upload.
  • Standard SLA remedy after PASS miss: automatic credit back plus 10% bonus credits.
  • Reserved Capacity, invoicing cadence, and white-label terms may be governed by MSA or order form instead of public checkout defaults.

Controls and review artifacts

  • TLS in transit and platform-managed AES-256 at rest.
  • Ed25519 signatures and SHA-256 manifests for issued artifacts.
  • Published security, privacy, refund, terms, and subprocessors pages.
  • Public vulnerability disclosure route and security contact.

What the reviewer does next

If the reviewer only needs a lane-level vendor screen, this page is enough. If they need commercial or legal detail, they continue to the detailed policies and the governing MSA or order form.

Review pack: Terms · Privacy · Refund · Security · Subprocessors · Commercial Summary