Terms of Service

1. Who these terms apply to

These Terms of Service govern direct-buyer use of buy.attestlayer.com, Buyer Review Pack and multi-review capacity purchases, the Fit Check, Buyer Console, and associated delivery and verification features. They are an agreement between Services AttestLayer, operating as AttestLayer, Quebec enterprise number 2282022963, with offices at 360 Saint-Jacques Street, Suite G101, Montreal, Quebec H2Y 1P5, Canada, and the business entity accepting these terms or using the Service.

The Service is offered only to business entities acting for business purposes. It is not offered for personal, household, or consumer use.

2. Authority

By using the Service, you represent that you have authority to bind the business entity you represent and that the information you provide is accurate.

3. The Service

Buyer Review Pack is a record-only, automated workflow for live buyer reviews. Each included review slot applies to one separate eligible buyer request. The Platform may map buyer requirements to supplied records, create source-linked response statements where records support them, identify unsupported or confirmation-required requirements, generate an evidence binder index and gap report, and issue a separate canonical manifest, Ed25519 signed receipt binding the manifest SHA-256, checksums, verification materials, and ZIP for that request. Registry inclusion is separate and is not currently active for Buyer Review Pack issuance.

Capacity packs reserve two, three, or five separate review slots for the applicable 30-day order window. They are volume purchases, not subscriptions and not priority-processing or faster-processing tiers. Every separate buyer request remains subject to the applicable scope checks and receives its own package and evidence boundary.

The Service does not access customer systems, require credentials, install software, provide an audit, certify compliance, provide legal advice, perform penetration testing, provide an insurance opinion, decide whether a buyer will accept a response, or guarantee a commercial outcome.

4. Your responsibilities

You are responsible for:

• providing only records and information you are authorized to submit and share for the applicable buyer review;
• keeping each buyer request, buyer organization, request reference, due date, and source-evidence set accurate and separate;
• reviewing all Platform output before sending it to a buyer or other third party;
• deciding whether any response statement is appropriate for your business;
• obtaining any required approvals before sharing records or output;
• keeping credentials, private keys, passwords, API keys, payment-card data, source code, government identification numbers, health information, and other prohibited information out of the Service;
• ensuring that your use complies with applicable law and your agreements with third parties.

5. Fit Check, review capacity, and scope

The Fit Check is a free automated determination of whether the current buyer request, due date, request type, and record inventory fit the Buyer Review Pack scope. It does not generate a buyer-ready package and does not guarantee that later source records will support every buyer requirement. Reporting several active reviews may cause the Platform to recommend a capacity pack; it does not change evidence strictness or price work based on deal value.

Each review slot covers one buyer organization, one buyer request, one supported request profile, up to 75 buyer requirements, a buyer-request file of up to 20 MiB, up to 40 source files, and up to 20 MiB combined across the buyer request and source files per processing run. Each included review permits up to two same-request re-runs during the 30-day order window.

A successful first generation for a new request consumes one review slot. A confirmed failed generation does not consume a slot. If generation status is unknown after a timeout, you must check package history before retrying the same request reference. Re-running the same request uses its re-run allowance rather than a separate review slot. A materially different questionnaire, a different buyer organization, or a new scope is a separate request and consumes a separate slot after successful generation. Unused capacity expires at the end of the order window.

6. Source-linked statements, evidence, and classifications

The Platform creates a positive response statement only where an authorized submitted record satisfies a versioned rule in the selected request profile. Each such statement identifies its source record and source location.

Authorized evidence marked downloadable may be included in the applicable request's ZIP. Internal records are excluded and cannot support positive buyer-facing statements. Buyer questionnaires, README files, upload instructions, and Fit Check files are not treated as supporting evidence.

The Platform uses these classifications:

• Supported
• Customer confirmation required
• Not supported by submitted records

A classification is an operational service result. It is not a legal, regulatory, audit, insurance, employment, credit, medical, or certification decision.

7. Fees, taxes, and payment

The current direct-buyer review-capacity prices, excluding applicable taxes, are:

• Buyer Review Pack — one review — US$5,950;
• Two-Review Pipeline Pack — two reviews — US$10,950;
• Three-Review Pipeline Pack — three reviews — US$15,950;
• Five-Review Pipeline Pack — five reviews — US$24,950.

The selected offer and amount are displayed before payment. Card orders activate after a completed successful payment. Invoice orders activate after cleared payment. Stripe or another disclosed payment provider processes payment and invoicing. You must pay all applicable fees and taxes. If a payment is reversed, rejected, disputed, or unpaid, AttestLayer may suspend access to the affected order until the payment issue is resolved.

8. Refunds and billing

The Refunds and Billing Policy is part of these Terms. If the Platform confirms request fit and cannot produce an affected automated output solely because of an AttestLayer processing failure, the remedies in that policy apply. A confirmed failed generation does not consume a review slot.

No refund is due because a buyer request changes, a buyer rejects the package, your records are incomplete or unsupported, you decide not to use purchased capacity, capacity expires unused, or you provide information outside the fixed scope, except where applicable law or the Refunds and Billing Policy requires otherwise.

9. Customer data and privacy

You retain ownership of the records you submit. You grant AttestLayer a limited right to process those records only to provide, secure, maintain, and support the Service; prevent fraud and abuse; comply with law; and follow the customer's documented instructions expressed through authorized use of the Service.

The Privacy Notice, Data Processing Addendum, Subprocessor List, and Data Retention and Deletion Policy explain how information is handled.

10. Confidentiality

Each party must protect the other party's non-public confidential information using reasonable care and may use it only to perform or receive the Service. Confidential information does not include information that is public without breach, independently developed without use of confidential information, lawfully received from another source without confidentiality duty, or required to be disclosed by law.

11. Intellectual property and permitted use

AttestLayer owns the Service, software, profiles, templates, documentation, interface, and verification materials, excluding your submitted records and business information. Subject to these Terms and payment of applicable fees, AttestLayer grants you a limited, non-exclusive, non-transferable right to use generated output for your internal business purposes and to share each package with the buyer identified in that request.

You may not reverse engineer, copy, resell, rent, sublicense, interfere with, or attempt to bypass the Service or its security controls.

12. Availability and changes

The Service is provided over the internet and may be unavailable at times for maintenance, security, or circumstances outside AttestLayer's reasonable control. AttestLayer may update the Service, profiles, templates, and verification features to maintain security, accuracy, and reliability. Material changes to active paid orders will not reduce purchased review capacity or the applicable fixed scope without your consent.

13. Disclaimers

To the maximum extent permitted by law, the Service is provided as available. AttestLayer disclaims warranties that the Service will meet every buyer requirement, produce a specific commercial result, be uninterrupted, be error-free, or be accepted by any third party.

AttestLayer does not independently verify the truth, completeness, currentness, legality, or accuracy of every submitted record. Reviewers and customers must evaluate underlying records and their own acceptance requirements.

14. Limitation of liability

To the maximum extent permitted by law, AttestLayer's total liability arising from an affected order will not exceed the fees paid for that affected order. AttestLayer will not be liable for indirect, incidental, special, punitive, exemplary, or consequential damages, lost profits, lost revenue, lost business opportunity, loss of goodwill, or buyer rejection.

Nothing in these Terms limits liability that cannot be limited under applicable law.

15. Indemnity

You will defend and indemnify AttestLayer and its personnel against third-party claims arising from your submitted records, your use of the output, your violation of these Terms, or your violation of law or third-party rights, except to the extent caused by AttestLayer's breach of these Terms.

16. Suspension and termination

AttestLayer may suspend or terminate access where it reasonably believes that use violates these Terms, creates a security risk, involves prohibited information, threatens the Service, or is required by law. You may stop using the Service at any time. Termination does not create a refund right except as stated in the Refunds and Billing Policy or required by law.

17. Governing law and venue

These Terms are governed by the laws of Quebec and the federal laws of Canada applicable in Quebec, without regard to conflict-of-law rules. The courts located in Montreal, Quebec have exclusive jurisdiction, except where applicable law requires otherwise.

18. Changes to these terms

AttestLayer may update these Terms by posting a revised version on this page. The updated Terms apply to use after the effective date shown above. A material change to an active paid order will be communicated through Buyer Console or the business email associated with the order.

19. Contact

General questions: contact@attestlayer.com
Product and accessibility support: support@attestlayer.com
Billing questions: billing@attestlayer.com
Privacy questions: privacy@attestlayer.com
Security questions: security@attestlayer.com