Source coverage and publication rights
Venue Authority serves supported regulator records that are approved for the requested delivery channel and have not been withdrawn.
Read Source coverage and publication rightsTrust center
Inspect the controls behind each regulator-linked response.
These documents describe implemented product behavior. They are not a contractual SLA, DPA, security certification, legal opinion, or uptime guarantee.
Data flow and retention
Portfolio Proof minimizes submitted merchant data and keeps billing truth separate from behavioral data.
Read Data flow and retentionAPI-key handling and account isolation
API keys belong to an account and their plaintext value is shown once.
Read API-key handling and account isolationBilling and entitlement controls
Only a verified Stripe event can create paid capacity.
Read Billing and entitlement controlsRefresh validation and last-known-good behavior
A failed source refresh does not replace a validated serving snapshot.
Read Refresh validation and last-known-good behaviorWebhook signing and retry semantics
Venue Authority sends signed, versioned change events with stable identifiers.
Read Webhook signing and retry semanticsSubprocessors in current use
Venue Authority uses hosted providers for identity, application delivery, persistence, and payment processing.
Read Subprocessors in current useIncident support and current status
Support is asynchronous and request IDs provide the starting point for investigation.
Read Incident support and current status