Skip to content

Questions before you start.

Prices, timing, your documents, and what your client receives.

Buying

What exactly do I get?

You get a draft answer for every question, each one citing the line it came from. After you approve, your client gets their own file with those answers, the evidence you chose, and a signed package they can verify.

How long does it take?

Fit Check takes about two minutes. After payment, processing starts when your files are accepted and the Console shows live status. Delivery time varies by file size and request complexity; we do not publish a measured delivery time or promise a deadline before payment.

What if an answer is wrong?

Nothing goes to your client until you approve, rewrite, or exclude the row. If a delivered review is not usable, report it within 14 days and we fix that review within 3 business days or refund it.

What if a delivered review is not usable?

Report it from the review within 14 days of delivery, or email support@attestlayer.com. We fix that review within 3 business days or refund it. A fix never uses one of your reruns.

How long does processing take?

Processing starts as soon as your files are accepted. Your Console shows live status. A measured delivery time is not published yet, so a deadline is not promised before payment.

Why is the price rational?

Compare the fixed price with the hours your team would spend connecting each question to a source, the deal waiting on the questionnaire, and the cost of doing that same one-time task with internal staff, a consultant, or a platform subscription. The price does not rise with deal value, and it does not replace the tools you already pay for.

What happens if generation fails?

A confirmed failed generation does not consume a slot. If the status is unknown after a timeout, Package History is reconciled before retry so one request cannot consume capacity twice.

How much does it cost?

The price is fixed for the questionnaire you upload. Integrity Check, Buyer Review Essentials, Full Buyer Review Pack, Three-Pack, Five-Pack. Single reviews are valid for 90 days. Packs are valid for 12 months. Checkout preserves the approved recommendation, price, and scope.

Can I pay by invoice?

Yes. Every offer can be paid by card or invoice. The service starts when payment clears.

Using it

Our client requires a portal

You download the answered file and paste it into the portal. The signed package is what you attach when the portal asks for documents.

We use Vanta, Drata, Secureframe, or Sprinto

Keep that tool. Export the policies and reports you already keep there, upload them here, and get the answered questionnaire back in your client's file.

What records should I upload?

Upload the policies, audit reports, certificates, test reports, plans, and registers you are allowed to share. Mark each one as something your client may receive, or internal. Drafts, old versions, and templates are set aside.

What if I add a document later?

Reruns: 1 included, then US$450 each (up to 3). Add the records listed under “Records to add” and regenerate once within the order window.

Can I edit an answer?

Yes. You approve, rewrite, or exclude each row. The citation stays on answers that come from your records.

Your documents

Who sees my files?

Processing is automatic. The founder may open a delivered package for quality control, under the same confidentiality terms. No one else has access.

What is retained, for how long, and why?

Package access follows the purchased order window. The data-retention page states the current deletion schedule. Email privacy@attestlayer.com to request earlier deletion; deleted records cannot be restored.

Where are my files kept?

Google Cloud, Montréal (northamerica-northeast1). The working copy is deleted 14 days after delivery.

Do you use AI?

Yes, for one narrow step. An AI model (Claude, by Anthropic) picks which sentences in your records answer each question. It can't add words: every answer is a word-for-word quote that our code checks against your file, and a second, different AI model plus fixed rules must agree before a row is marked Supported. Anything uncertain is left for you to confirm.

Will my documents train an AI?

No. Anthropic doesn't use data sent through its commercial API to train models without permission, and we haven't given it.

Where is my data processed?

Your files are stored in Montréal, Canada. Only the excerpts needed to check each question are processed by Anthropic in the United States. We keep a working copy of your request and records for 14 days after delivery so reruns work without re-uploading, then delete it. Under Anthropic's commercial terms, the excerpts are deleted from Anthropic's systems within 30 days, unless a usage-policy review requires longer retention.

Your client

Can my client tell?

Your client receives your answers, in their own file, under your name. Sharing the verification link is your choice.

How does my client check the package?

They drop the ZIP on the public verifier, in the browser. They see Verified when every file is unchanged since issue and the package was signed with our published key.

What evidence does my client receive?

Only the files you marked as something they may receive, and that you included when you approved. Internal files stay in your review.

About AttestLayer

Does AttestLayer have SOC 2, ISO, a penetration test, insurance, or other external assurance?

No such assurance is presented as active unless our assurance registry lists it as active and links approved evidence. Current unavailable or in-progress items are labeled plainly in the Trust Center.

Do you have SOC 2?

No SOC 2 report, ISO certification, independent penetration test, or insurance is presented as active. The Trust Center lists current assurance status and links approved evidence when available.

Do you have insurance?

Cyber and professional liability insurance are not in place. The liability limit in the Terms applies. The Trust center lists this with the other items we do not hold.

Who runs AttestLayer?

Rabie-Abdollah Macbahi, founder and operator, in Montréal. Company details are on the company page.

What if you disappear?

The answered file and the signed package are yours to keep. Save the public key linked in the package and it verifies offline.

Legal and billing

Where are the terms?

The terms, privacy notice, data processing addendum, refunds, and retention schedule are linked from the footer and accepted at checkout.

Need a human answer?

Email support@attestlayer.com for product and file questions, or privacy@attestlayer.com for privacy requests.

See my price: free