Policy scope and precedence
Central rule
The policy versions identified in an accepted order govern that order; later website publication does not change those accepted versions. Page publication or document download alone does not create an order. If documents conflict, a separately signed agreement controls only where it expressly identifies the affected term and order; the DPA controls processing of Customer Personal Data; the order controls selected product, price, and capacity; and the Terms and incorporated policies control the remaining service.
Surface responsibilities
- attestlayer.com is the general corporate, informational, and routing site.
- buy.attestlayer.com and console.attestlayer.com are the direct-client purchase and secure fulfillment surfaces.
- partners.attestlayer.com is the separate partner-program site and does not provide Client Console access.
- verify.attestlayer.com, registry.attestlayer.com, and api.attestlayer.com are shared integrity, Registry, and API surfaces.
Direct-client policies
Terms, Direct-Client DPA, Privacy, Refunds, Acceptable Use, Retention, and Subprocessors form the standard direct-client policy set when incorporated into an eligible accepted order.
Public verification surfaces
Verify and the issuer-key endpoint are shared read-only verification surfaces. A PACKAGE INTEGRITY VERIFIED result confirms the stated package-integrity and signature checks. It does not certify underlying customer statements, compliance, or client acceptance. A package is not recorded in a public log.
Separately signed enterprise terms
A separately negotiated enterprise order, master agreement, or DPA changes a self-service policy only where that signed document expressly identifies the affected term and order.
Legal boundary
AttestLayer does not represent that its standard policies are sufficient for every jurisdiction or transaction and does not provide legal advice. A customer is responsible for deciding whether the standard terms fit its requirements before acceptance.