No Wallet, No Escrow, No Custody Statement

Effective: 2026-06-02 Applies to: Attest, an ECTD product. Clarifies what Attest does and does not do with money, wallets, and stored value.

---

The statement in plain English

Attest does not handle, custody, or move customer money. Stripe is the merchant of record for every Attest sale. Attest is not a wallet, not an escrow service, not a money-transfer service, not a stored-value provider, and not a payment-rail operator.

1. How money actually flows

1. You click a Stripe Payment Link on getattest.com.au.
2. Stripe collects your payment (card, Link wallet, Apple Pay, etc.) and processes it on its own infrastructure.
3. Stripe deposits the net proceeds (after Stripe fees) into the ECTD-controlled Stripe account on Stripe's standard payout schedule.
4. Attest receives a signed webhook from Stripe confirming the purchase and writes a record into the Supabase audit ledger.

At no point does the money sit in an Attest-controlled wallet, escrow account, or stored-value balance. At no point does Attest see card numbers, CVVs, or full payment instruments — those are handled by Stripe under Stripe's PCI-DSS compliance.

2. What this means for Australian regulation

Because Attest does not custody, move, or store value:

• AUSTRAC reporting-entity obligations do not apply to Attest. Stripe, as the payments provider, is the reporting entity for transactions it processes.
• Australian Financial Services Licence (AFSL) requirements do not apply to Attest's deliverable business. Attest sells structured assessments, not financial services.
• PCI-DSS applies to Stripe for its handling of card data. Attest's surface never receives or stores card data.

If our business model ever changes to require any of the above (e.g. if we ever introduce a credit balance, agent prepay wallet, or escrow service), we will:

• Update this statement to reflect the new posture
• Register with the relevant regulator before going live
• Notify affected customers

3. What this means for buyers

• You pay Stripe, not Attest. Your statement will show a Stripe-routed merchant descriptor for ECTD.
• Refunds are processed back through Stripe to your original payment method.
• Chargebacks and disputes are handled per Stripe's standard process (we strongly prefer that you contact us first — see Refund Policy).

4. What this means for agent buyers

When an autonomous agent buyer pays via a Stripe Link wallet, Shared Payment Token, or future agent-rail flow:

• The agent's principal is Stripe's customer of record on the transaction
• Attest receives the standard checkout.session.completed webhook with the principal's identifying metadata
• Attest does not see or hold the agent's wallet credentials, SPT issuance details, or any underlying funding source
• If a refund is needed, it flows back via Stripe to the same wallet that paid

5. What we will never offer (under this entity)

Without first registering as the relevant kind of regulated entity, Attest will not:

• Hold a customer credit balance, prepay account, or float
• Operate an escrow holding funds between two third parties
• Issue stored value, gift cards, or transferable credits
• Settle agent-to-agent payments where Attest is the intermediary
• Operate as a payment rail itself

If a future Attest product is going to do any of the above, it will be operated by an entity registered for that activity, with its own legal documents and its own clear separation from this deliverable business.

6. Why we publish this

Three reasons:

• Customers should know what they are paying into and what they are not.
• Regulators, payment partners, and acquirers should be able to read our posture without ambiguity.
• Future-Attest discipline: stating the line publicly makes it harder to drift across it accidentally.

7. Contact

hello@getattest.com.au — Attest, an ECTD product, Queensland, Australia.