AttestLayerAttestLayer
Request Qualification

Terms of Service (v2026-02-27)

These Terms of Service apply only to partners.attestlayer.com partner programs, reserved-capacity or partner order flows, partner-managed delivery workflows, and related partner support or billing requests. Direct-buyer purchases, the public verifier, the public registry, and the root corporate site are governed by their own site-specific terms or by a written agreement.

1. Scope

partners.attestlayer.com is the partner-facing commercial surface for managed-response, reserved-capacity, and approved partner-led workflows. You upload a ZIP or individual files (PDF/DOCX/XLSX/PNG/JPG/CSV/JSON/TXT). The engine returns a deterministic PASS or FAIL result.

  • On PASS: you receive kit.zip plus supporting artifacts such as passfail.json, mapping.json, classification_report.json, normalized_tree.zip, and optional diff.json. Activation and Monthly Coverage add the same production-ready package layer around that proof core.
  • On FAIL: you receive fail_report.json with the exact blocker list.
  • We do not answer questionnaires, issue compliance opinions, or certify controls.
  • We do not invent evidence. Missing items produce FAIL or UNSUPPORTED markers.

If a signed order form, invoice term, reserved-capacity schedule, or negotiated enterprise document states more specific partner commercial terms, that more specific document controls the subject it addresses to the extent permitted by law.

2. Partner authority and downstream responsibility

  • You represent that you are authorized to bind the partner organization and to submit or route the relevant workflow material.
  • Unless AttestLayer separately contracts with an end customer in writing, the partner remains the primary commercial counterparty for billing, support routing, downstream notices, and downstream commitments.
  • You remain responsible for ensuring you have the right to submit customer or third-party material through the partner workflow.

3. Deterministic PASS / FAIL

Every submission receives exactly one deterministic outcome:

  • PASS — required artifact groups present and valid. A kit is prepared and verified.
  • FAIL — one or more required groups missing or invalid. A fail report is issued.

There is no partial PASS. There is no “pending review.” The engine is fully automated.

4. Credits & billing

Credit definition:

1 credit = 1 verified PASS kit issued.

Billing rules:

  • FAIL burns US$0 credits (no burn).
  • PASS burns 1 credit only when Verify PASS succeeds and the kit is issued.
  • PASS + Verify FAIL burns US$0 credits (no burn). If verification fails due to an AttestLayer system error, the kit is re-issued and no credit is burned.

FAIL handling:

  • Each FAIL returns a blocker list explaining what stopped issuance.
  • Additional FAIL resubmits may be rate-limited for reliability (never charged).
  • Pilot is evaluation-only and does not include a correction cycle or repeat issuance.

Fail-closed issuance:

If credits are 0, PASS issuance is blocked (BILLING_REQUIRED) and no kit is issued until credits are available.

5. Delivery SLA and make-good

The SLA clock begins at PASS (pass_at), not at upload.

Activation:

  • Activation-10 / Activation-25: 24 hours after PASS
  • Activation-50 / Activation-100: 12 hours after PASS

Pilot:

  • Evaluation only. No SLA applies.

MMC Lane:

  • Tier 1 (MMC-25K): 12 hours after PASS
  • Tier 2 (MMC-50K): 8 hours after PASS
  • Tier 3 (MMC-100K): 6 hours after PASS
  • Tier 4 (MMC-250K): 4 hours after PASS

Make-good:

If we miss the stated SLA after PASS, the system automatically applies credit back + 10% bonus credits. No ticket required.

6. Payment terms

Partner account purchases and recurring partner commitments may use one or more approved billing paths depending on the plan or order:

  • Card or ACH (Stripe) where self-serve or approved for the partner lane.
  • Invoice, wire, annual billing, or procurement-led setup where offered on the applicable order path.

Invoice / ACH / wire: access activates after cleared payment, typically 1–3 business days, though some bank or AP workflows can take up to 5 business days.

MMC Lane:

  • Invoice (Net-5) unless otherwise agreed in a signed MSA/order form.
  • MMC auto-renews monthly. Cancel anytime before the next billing date; cancellation takes effect at the end of the current billing period.

Monthly Coverage Subscription Terms

  • Monthly Coverage is a recurring subscription that renews automatically each billing cycle.
  • Self-serve Monthly Coverage (Coverage-25 and Coverage-50 card path) is billed automatically by card. Card payments activate immediately after successful checkout.
  • Larger recurring agreements (Coverage-50 invoice path, Coverage-100) may be handled through approved custom billing arrangements — invoice, wire, annual billing, or procurement-led setup.
  • Monthly Coverage may be cancelled anytime before the next billing date by email to billing@attestlayer.com.
  • Cancellation takes effect at the end of the current billing period.
  • No prorated refund is provided for partial months.
  • Unused monthly credits do not roll over.

Activation Upgrade and Conversion Rules

  • Activation purchases are prepaid and non-cash-refundable.
  • If a buyer upgrades from Activation-10 to Activation-25 within 30 days of the Activation-10 purchase, 100% of the Activation-10 purchase price is applied to the Activation-25 purchase price.
  • The original Activation-10 credits do not stack separately after upgrade; the purchase-price credit replaces the unused Activation-10 balance.
  • If a buyer executes an MMC order within 90 days of an Activation purchase, eligible unused paid Activation balance converts 1:1 into MMC credits at MMC execution.
  • No double counting applies: the same balance cannot be credited twice through both an upgrade step-up and an MMC conversion.
  • Activation credits are not redeemable for cash.

If a checkout page, order form, or signed order document includes more specific commercial terms, those specific commercial terms govern for that transaction, except where prohibited by law.

7. Partner responsibilities and acceptable use

  • You must submit only material you are entitled to submit and that is lawful for AttestLayer to process.
  • You must not misrepresent AttestLayer outputs as a broader certification or legal conclusion than the output actually supports.
  • You remain responsible for downstream customer communications, representations, and any obligations you owe under your own partner or reseller relationship.
  • You may not abuse the service, bypass access controls, overload the service, or use the service in violation of law.

8. Confidentiality & retention

All partner intake data is confidential. We do not share, sell, or re-use it.

Retention:

  • Uploads: up to 24 hours (automatic deletion)
  • Hosted deliverable links: 30 days (links expire; automatic deletion)
  • Downloaded copies: kept by you/your customer outside our control

White-label:

Default is white-label. Deliverables contain no AttestLayer branding unless you opt into co-brand. For MMC lanes, a neutral download domain or CNAME may be supported.

9. Intellectual property and branding

The partner retains rights in the materials it submits or is authorized to submit. AttestLayer retains rights in its service, verifier tooling, site content, software, and branding. White-label or co-branded delivery is permitted only to the extent stated in the applicable partner program or written agreement.

10. Security

  • Encryption at rest: AES-256 (platform-managed). CMEK is available for Enterprise Reserved Capacity lanes.
  • Signing: Ed25519. Hashing: SHA-256.
  • Transport: HTTPS/TLS in transit.
  • Artifacts are cryptographically committed after issuance (signed receipts + Merkle inclusion proofs). Any re-issuance generates a new receipt.
  • Payments are handled by Stripe; AttestLayer does not store full card numbers.
  • Subprocessors: https://partners.attestlayer.com/subprocessors
  • Vulnerability disclosure: https://partners.attestlayer.com/vulnerability-disclosure

11. Disclaimers, suspension, and termination

Except where a signed agreement says otherwise, the partners surface and related partner workflows are provided on an as-is and as-available basis. AttestLayer may suspend, rate-limit, or terminate access where needed for nonpayment, abuse prevention, legal compliance, or security.

AttestLayer is not an audit opinion, legal advisor, compliance certification body, or substitute for the partner's own downstream diligence and contractual obligations.

12. Limitation of liability

To the maximum extent permitted by law, AttestLayer is not liable for indirect, incidental, special, consequential, exemplary, or punitive damages arising from or related to partner-surface services. Any direct liability relating to a claim under these terms is capped at the fees paid for the specific partners.attestlayer.com service giving rise to the claim during the 12 months before the event giving rise to that claim.

13. Governing law and venue

These terms are governed by the laws of Quebec and the federal laws of Canada applicable there, without regard to conflict-of-law rules. Unless mandatory law requires otherwise, disputes relating to partners.attestlayer.com partner transactions will be brought in Montreal, Quebec.

14. Contact

contact@attestlayer.com (general); billing@attestlayer.com (billing); security@attestlayer.com (security)

Toll-free: 1-866-739-0570

HQ: 360 rue Saint-Jacques, Suite G101, Montréal, Québec H2Y 1P5, Canada

Not legal advice. Not an audit opinion. Not a compliance certification. AttestLayer packages evidence and produces verification artifacts only.