Source coverage and publication rights
Venue Authority serves supported regulator records only when the delivery channel has current permission evidence.
Read Source coverage and publication rightsTrust center
Inspect the controls behind each regulator-linked response.
These documents describe implemented product behavior. They are not a contractual SLA, DPA, security certification, legal opinion, or uptime guarantee.
Data flow and retention
Portfolio Proof minimizes submitted merchant data and keeps billing truth separate from behavioral data.
Read Data flow and retentionAPI-key handling and tenant isolation
API keys are workspace-owned credentials whose plaintext value is shown once.
Read API-key handling and tenant isolationBilling and entitlement controls
Only a verified Stripe event can create paid capacity.
Read Billing and entitlement controlsRefresh validation and last-known-good behavior
A failed source refresh does not replace a validated serving snapshot.
Read Refresh validation and last-known-good behaviorWebhook signing and retry semantics
Venue Authority sends signed, versioned change events with stable identifiers.
Read Webhook signing and retry semanticsSubprocessors in current use
Venue Authority uses hosted providers for identity, application delivery, persistence, and payment processing.
Read Subprocessors in current useIncident support and current status
Support is asynchronous and request IDs provide the starting point for investigation.
Read Incident support and current status