Supplemental terms
No warranty
The Registry surface, its endpoints, manifests, checkpoints, signed material, JWKS, sample data, and download artifacts are provided on an as-is and as-available basis. AttestLayer disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, non-infringement, accuracy, completeness, uninterrupted availability, freedom from error, and any warranty that registry output will satisfy a specific buyer, audit, security, certification, insurance, regulator, or legal outcome.
Limitation of liability
To the maximum extent permitted by applicable law, AttestLayer, its affiliates, directors, employees, contractors, and licensors shall not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, data, goodwill, or business opportunities, arising from or connected to use of the Registry. The aggregate liability of AttestLayer for any claim related to the Registry is capped at the amounts (if any) paid by the claimant to AttestLayer for the Registry surface in the twelve (12) months preceding the event giving rise to the claim, or one hundred Canadian dollars (CAD $100) if no such amount was paid.
No registry uptime guarantee unless signed
AttestLayer makes no service-level commitment or uptime guarantee for any Registry endpoint, page, or download artifact unless a separately signed written agreement between AttestLayer and the relying party expressly states such a commitment. Status pages, observed availability, historical trends, and informational notices do not constitute a commitment.
No legal reliance
Registry content is evidence material, not legal advice, regulatory determination, audit opinion, certification, insurance underwriting, or fitness statement. Counterparties must obtain their own legal, regulatory, compliance, audit, security, and insurance advice before relying on Registry content for a decision.
Acceptable use and abuse restrictions
Use of the Registry is permitted only for verifying AttestLayer-issued packets, checkpoints, keys, receipts, and related metadata. Users must not: (a) submit automated traffic that materially degrades availability for other users; (b) attempt to forge, alter, or impersonate Registry signatures; (c) reuse Registry content to imply certification, endorsement, mandate, or approval that AttestLayer did not make; (d) scrape personal data and re-identify individuals from public metadata; (e) use the Registry to facilitate sanctions evasion, fraud, illegal activity, or violation of applicable export controls.
No compliance or certification meaning
Registry inclusion is not a compliance attestation, certification, accreditation, audit pass, regulator approval, insurer determination, or industry endorsement. Registry inclusion only means that a packet, key, receipt, checkpoint, or metadata item is discoverable or verifiable according to the Registry Policy.
Force majeure
AttestLayer is not liable for delay or failure to perform Registry operations caused by events beyond reasonable control, including acts of God, war, terrorism, civil unrest, labour disputes, government action, sanctions, internet or upstream cloud provider outages, denial-of-service attacks, cryptographic or hardware supply compromise outside AttestLayer custody, and natural disasters.
Governing law and venue
These supplemental terms are governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to conflict-of-laws principles. The exclusive venue for disputes is the courts sitting in Montreal, Quebec, subject to applicable mandatory consumer protection law.
Order of precedence
If there is any conflict between these supplemental terms and a separately signed written agreement between AttestLayer and the relying party covering the same subject matter, the signed agreement controls. Otherwise these supplemental terms control over any informational page on the Registry surface.