Control Publication
Public-by-default
Trust, standards, governance, and status surfaces are published for independent review.
Receiz / Legal / Compliance
Back homeTrust baseline
Compliance and Assurance
Control transparency, attestation posture, and evidence handling standards for regulated and institutional review.
Control transparencyAttestation registerEvidence workflow
Intake Acknowledgment
2 business days
Institutional evidence requests target formal acknowledgment inside two business days.
Scope Confirmation
10 business days
Evidence scope, confidentiality terms, and delivery path are confirmed through a documented intake workflow.
01
Control Model
Receiz operates a contract-first control model with public trust artifacts, deterministic standards, and governance evidence designed for independent review.
- Security controls and technical boundaries are published at /security.
- Governance roles, change classes, and periodic control testing are published at /governance.
- Runtime and incident transparency is published at /status.
02
Attestation Register
| Control / Attestation | Status | Public Evidence Route | Last Updated | Metadata Source |
|---|---|---|---|---|
| Governance artifact-signature integrity control | Active (metadata current) | /governance | June 30, 2026 | artifact-manifest.v1.json:generatedAt |
| Deterministic settlement conformance control set | Active (control cadence current) | /api/economy/conformance | June 13, 2026 | evidence-register.v1.json:generatedAt |
| Security control publication and incident posture | Active (signing key current) | /security and /status | June 30, 2026 | governance-keyring.v1.json:generatedAt |
| Independent third-party assurance report | Program active (report not currently published) | Coordinated through evidence intake process below | March 8, 2026 | evidence-register.v1.json:controls:annual-independent-assurance |
Governance artifact-signature integrity control
Status: Active (metadata current)
Public Route: /governance
Last Updated: June 30, 2026
Metadata: artifact-manifest.v1.json:generatedAt
Deterministic settlement conformance control set
Status: Active (control cadence current)
Public Route: /api/economy/conformance
Last Updated: June 13, 2026
Metadata: evidence-register.v1.json:generatedAt
Security control publication and incident posture
Independent third-party assurance report
Status: Program active (report not currently published)
Public Route: Coordinated through evidence intake process below
Last Updated: March 8, 2026
Metadata: evidence-register.v1.json:controls:annual-independent-assurance
Timestamp fields above are sourced from versioned governance artifacts under /public/governance and refresh through governance evidence/signing workflows.
Active governance signing key ID: receiz.governance.ed25519.2a7c4651102d1498
03
Evidence Routes
- Trust Center: canonical trust posture and control-route map.
- Standards: schema contracts, vectors, and deterministic error model.
- Governance: owner model, evidence register, and change governance payloads.
- Conformance Report: deterministic settlement conformance surface.
04
Audit and Evidence Request Workflow
- Submit request through Topic: Institution Review / Compliance Review.
- Include organization legal entity, use case, required framework, and requested evidence scope.
- Receiz acknowledges intake target within 2 business days and confirms scope target within 10 business days.
- Evidence is provided through public routes and, where approved, scoped private materials under confidentiality controls.
Evidence requests that require custom legal terms, on-site controls testing, or expanded questionnaires may require enterprise contracting and security-review scheduling.
05