Terms of Use

What these terms cover

These terms apply to the attestlayer.com root website, including company pages, trust pages, policy pages, public informational material, and corporate contact routes served on that domain.

They do not replace the service-specific terms on buy.attestlayer.com, partners.attestlayer.com, verify.attestlayer.com, registry.attestlayer.com, or any separate written order or commercial agreement.

Acceptable use

You may use AttestLayer's first-party public surfaces only for lawful purposes and in a way that does not abuse, disable, or interfere with the service.

• Do not attempt unauthorized access, credential attacks, or service disruption.
• Do not upload unlawful material or material you are not entitled to submit.
• Do not use public web surfaces to scrape, copy, or benchmark the service in a way that bypasses normal access controls.
• Do not perform security testing outside the rules described on the Vulnerability Disclosure page.

Your responsibilities

You are responsible for the accuracy of the information you provide through the root site and for the lawful use of any company, trust, or contact workflow made available on this domain.

• You should not use the root site to submit secrets, private keys, credentials, or unrelated customer artifacts.
• You remain responsible for how you interpret and use public informational material made available on this domain.
• You remain responsible for reviewing the separate terms of any service-specific domain you later choose to use.

Commercial, delivery, and service-specific terms

Root-domain pages describe the company, trust posture, and policy library. The root site does not operate checkout, accept customer source files, create an entitlement, or deliver a customer package.

• A direct Buyer Review Pack purchase is governed by the terms and policies presented on buy.attestlayer.com and by its order confirmation.
• A partner, enterprise, or invoiced engagement is governed by its signed order form, invoice terms, or other executed agreement.
• Verification and registry surfaces may expose public material without creating a paid service relationship on their own.

Intellectual property and disclaimers

AttestLayer retains rights in its site content, software, verification tooling, and branding. You retain rights in correspondence sent to the root site. Any service that accepts customer data is governed by service-specific terms or an executed agreement defining the limited rights needed to process and deliver that service.

Except where a signed agreement states otherwise, AttestLayer provides the public site and related materials on an as-is basis. AttestLayer is not an audit opinion, legal advice service, compliance certification body, or substitute for a client's own review obligations.

Common legal provisions

Order of precedence. If a signed order form, master services agreement, invoice, or other written commercial document executed between AttestLayer and a counterparty addresses a subject covered by these terms, that more specific written document controls the subject it addresses, to the extent permitted by law. Service-specific terms published on buy.attestlayer.com, partners.attestlayer.com, verify.attestlayer.com, registry.attestlayer.com, or any other AttestLayer surface control the workflows served from that surface.

Limitation of liability. To the maximum extent permitted by law, AttestLayer is not liable for indirect, incidental, special, consequential, exemplary, lost-profits, or punitive damages arising from or related to use of the attestlayer.com root site or related public informational material, even if advised of the possibility of such damages. Any direct liability of AttestLayer relating to the root site is capped at the greater of one hundred Canadian dollars (CA$100) or the amount actually paid by you to AttestLayer for the specific root-site service giving rise to the claim during the twelve (12) months before the event giving rise to that claim. This cap does not limit liability that cannot lawfully be limited.

Warranty disclaimer. The attestlayer.com root site and related public material are provided on an as-is and as-available basis. To the maximum extent permitted by law, AttestLayer disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, accuracy, completeness, uninterrupted availability, and any warranty that the site or its content will meet a specific client, procurement, security, audit, certification, insurance, regulator, payment, or legal outcome.

Customer and visitor responsibilities. You remain responsible for your own legal, regulatory, audit, certification, insurance, procurement, and security decisions, and for any onward representations you make to your own counterparties, customers, regulators, or auditors. You will not characterize AttestLayer outputs more broadly than the output actually supports. You will not upload secrets, credentials, payment card numbers, private keys, or unrelated customer artifacts through root-site contact or inquiry forms.

Confidentiality of inquiry data. Substantive information that you submit through root-site contact, trust, procurement, partnership, or security inquiry channels and that is reasonably understood to be confidential will be treated as confidential by AttestLayer and used only to respond to that inquiry, operate and secure the service, or meet legal obligations. This obligation does not apply to information that is publicly known, lawfully received from a third party without confidentiality restriction, independently developed, or required to be disclosed by law or competent authority.

Suspension. AttestLayer may suspend, rate-limit, restrict, or terminate access to root-site features or related public surfaces where reasonably needed to protect the service, respond to abuse or security risk, comply with legal or regulatory obligations, or address non-payment or violation of these terms.

No emergency reliance. The attestlayer.com root site is not designed for, and must not be relied on as, an emergency, life-safety, medical, fraud-prevention, regulatory-filing, or time-critical compliance system. Visitors and counterparties must use appropriate emergency, regulatory, legal, financial, medical, or security channels for time-critical or safety-critical matters.

Governing law and venue. These terms are governed by the laws of the Province of Quebec and the federal laws of Canada that apply there. The courts of the judicial district of Montréal, Quebec, have exclusive jurisdiction, unless applicable law requires otherwise or a signed agreement says otherwise.

Changes, suspension, and contact

AttestLayer may update these terms as the service changes. Material updates will be posted on attestlayer.com. Continued use after an update takes effect means you accept the revised terms.

AttestLayer may suspend or limit access where needed to protect the service, respond to abuse, meet legal obligations, or prevent security harm.

Questions about these terms can be sent to contact@attestlayer.com.

Record-only boundary

Standard AttestLayer workflows are designed around records the customer is authorized to provide without endpoint installation or production credentials. Package verification can establish integrity and issuer-receipt authenticity; it does not establish the truth or completeness of supplied records, control effectiveness, compliance, certification, legal sufficiency, or customer approval.