Verify Privacy Policy

What Verify processes

Verify is designed to minimize server-side handling. When you use the upload flow on the Verify home page, the kit.zip is checked locally in your browser and is not uploaded to the Verify server as part of that browser-side verification path.

• Request metadata such as IP address, browser metadata, requested URL, and timing data is processed to deliver the site and protect it from abuse.
• If you open a public verification slug, Verify serves the public-safe materials associated with that slug.
• If you download files, public keys, or the offline verification kit, standard web server and delivery logs may record that request.

What Verify does not do

• It does not create a buyer account, process payment details, or manage subscriptions.
• It does not require you to submit private credentials, private keys, or system access.
• It does not use the browser upload flow as a collection point for customer artifacts on the server side.

If you reach a paid or account-managed workflow from another AttestLayer domain, that domain's own policy governs that workflow.

How data is used and shared

Verify uses limited operational data to render pages, resolve public verification references, serve downloads, mirror public trust material, detect abuse, and maintain service reliability.

• Public trust material may be fetched from registry.attestlayer.com.
• Operational infrastructure providers and CDN-style delivery paths may process routine web request metadata.
• AttestLayer does not sell personal data collected through Verify and does not use Verify as an ad-tech surface.

Retention and contact

Verify is a public verification utility, so most data processed here is ordinary web request and security logging retained only as long as reasonably necessary for operations, security, and legal compliance. Public verification materials remain available according to the retention model of the underlying service workflow.

Questions about Verify privacy can be sent to contact@attestlayer.com. Security-specific questions can be sent to security@attestlayer.com.