Policy scope and precedence

Central rule

If a later dated GO authorizes a valid direct-buyer order, the policies presented with that approved checkout would govern the order. The attestlayer.com root policies govern the corporate informational site. Verify and Registry policies govern their bounded public read-only surfaces. A separately signed enterprise order or DPA does not create technical customer-processing authority and controls only where it expressly says so after all release gates pass.

Direct-buyer policies

Terms, Direct-Buyer DPA, Privacy, Refunds, Acceptable Use, Retention, and Subprocessors are presented for public review as a prospective policy set, not as an active self-service offer.

Public verification surfaces

Verify and the issuer-key endpoint are bounded public read-only surfaces for explicitly synthetic or separately evidenced historical material. Package integrity and issuer-receipt checking are separate from currently unavailable Registry checkpoint-continuity assurance.

Separately signed enterprise terms

A separately negotiated enterprise order, master agreement, or DPA changes a self-service policy only where that signed document expressly identifies the affected term and order.

Legal-review boundary

These pages are current public information and prospective contract text, not current customer-processing operational commitments. AttestLayer does not represent that they have been approved by a buyer's counsel or independently certified as sufficient for every jurisdiction or transaction. AttestLayer does not provide legal advice.