Receiz / Legal / Compliance
Back home

Trust baseline

Compliance and Assurance

Control transparency, attestation posture, and evidence handling standards for regulated and institutional review.

Effective: March 8, 2026Trust Center
Control transparencyAttestation registerEvidence workflow

Control Publication

Public-by-default

Trust, standards, governance, and status surfaces are published for independent review.

Intake Acknowledgment

2 business days

Institutional evidence requests target formal acknowledgment inside two business days.

Scope Confirmation

10 business days

Evidence scope, confidentiality terms, and delivery path are confirmed through a documented intake workflow.

01

Control Model

Receiz operates a contract-first control model with public trust artifacts, deterministic standards, and governance evidence designed for independent review.

  • Security controls and technical boundaries are published at /security.
  • Governance roles, change classes, and periodic control testing are published at /governance.
  • Runtime and incident transparency is published at /status.
02

Attestation Register

Governance artifact-signature integrity control

Status: Active (metadata current)

Public Route: /governance

Last Updated: March 8, 2026

Metadata: artifact-manifest.v1.json:generatedAt

Deterministic settlement conformance control set

Status: Active (metadata current)

Public Route: /api/economy/conformance

Last Updated: March 8, 2026

Metadata: evidence-register.v1.json:generatedAt

Security control publication and incident posture

Status: Active (metadata current)

Public Route: /security and /status

Last Updated: March 8, 2026

Metadata: governance-keyring.v1.json:generatedAt

Independent third-party assurance report

Status: Program active (report not currently published)

Public Route: Coordinated through evidence intake process below

Last Updated: March 8, 2026

Metadata: evidence-register.v1.json:controls:annual-independent-assurance

Timestamp fields above are sourced from versioned governance artifacts under /public/governance and refresh through governance evidence/signing workflows.

Active governance signing key ID: receiz.governance.ed25519.8c0d360c4c119c6b

03

Evidence Routes

  • Trust Center: canonical trust posture and control-route map.
  • Standards: schema contracts, vectors, and deterministic error model.
  • Governance: owner model, evidence register, and change governance payloads.
  • Conformance Report: deterministic settlement conformance surface.
04

Audit and Evidence Request Workflow

  1. Submit request to support@receiz.com with subject Institution Review or Compliance Review.
  2. Include organization legal entity, use case, required framework, and requested evidence scope.
  3. Receiz acknowledges intake target within 2 business days and confirms scope target within 10 business days.
  4. Evidence is provided through public routes and, where approved, scoped private materials under confidentiality controls.

Evidence requests that require custom legal terms, on-site controls testing, or expanded questionnaires may require enterprise contracting and security-review scheduling.

05

Security and Vulnerability Coordination

Security issue reporting and response coordination are governed by the process published at /security. Critical security events are reflected in incident and uptime publications at /status.