Skip to content

Help — upload rules

How do I upload files into a workspace?

Supported upload methods, size and format guidance, and what not to upload.

Where uploads happen

Uploads happen inside an AttestLayer workspace after the workspace has been provisioned. The workspace UI is available in the browser; no client install is required.

Supported formats

PDF, ZIP, JSON, signed manifests, and standard log exports are supported. There is no required schema for supplied records. Files are content-addressed by SHA-256 inside the workspace.

Size guidance

Individual file size up to 100 MB and total workspace bundle size up to 2 GB cover most direct-buyer submissions. If a submission exceeds these guidelines, contact contact@attestlayer.com before uploading.

What not to upload

  • Passwords, private keys, root credentials, API secrets, raw production secrets.
  • Personal data not necessary for the named reviewer.
  • Records the team does not have the right to share with the named reviewer.
  • Malware, exploit payloads, or content engineered to compromise AttestLayer or its subprocessors.

After upload

Once supplied records are uploaded and the packet rules are selected, AttestLayer issues PASS/FAIL inside the validity window of the purchased offer.