Trust centre Architecture attestation What AGORA's architecture guarantees about payment data, the evidence for each control, and live checks run when this page was generated.
Control Result Status Evidence chains verify (R4) 8 of 8 merchant chains verified, 1706 records checked pass Tenant isolation (R8) 56 collections checked, 0 cross-tenant rows pass AI disclosure text in force (R11) This is an automated agent operated by Fondaq. pass
Attestation AGORA never receives, stores, processes or transmits primary account numbers, card verification values or full payment credentials (R1). The merchant is merchant of record and its PSP confirms every payment (R2). AGORA handles only PSP token references, handler identifiers and mandate hashes (payment-adjacent data), pinned to the merchant's region without exception.
Format agora.architecture-attestation/v1 Demo yes Generated at 2026-10-27T15:02:22.113Z Psps in use adyen, checkout_com, stripe Scope Cardholder data environment not in scope for AGORA systems Payment adjacent keys psp_ref, mandate_refs, mandate_hash, handler_id, token_ref, payment_handler, payment_token, spt_ref, delegated_payment_ref, deposit, payment_schedule_ref, insurance_member_ref Payment adjacent fields Entity Field order psp_ref order mandate_refs checkout mandate_refs checkout handler_id checkout token_ref checkout payment_handler booking deposit booking payment_schedule_ref
Controls Id Mechanism Evidence pan_guard_adapters adapters reject PAN-shaped values before processing File: server/src/modules/commerce/pan.tsPresent: falsepan_scan_ci Luhn-valid digit-run scan over code and fixtures in CI File: scripts/scan-pan.mjsPresent: falseevent_bus_pan_reject the event bus refuses envelopes with PAN-shaped values File: server/src/modules/platform/events/bus.tsPresent: falsespan_scrubber span attributes are scrubbed (PAN, credentials, payment-adjacent keys) File: server/src/modules/observe/scrub.tsPresent: falsemodel_scrubber payment-adjacent data never reaches prompts or model logs (scrubForModel) File: server/src/modules/compliance/dataclass.tsPresent: falsehandoff_redirect the handoff page redirects to the merchant's own checkout and renders no payment fields File: server/src/protocols/handoff.tsPresent: falsetoken_references_only every stored PSP reference is a token reference Check: orders.psp_ref token-shapedOk: trueOrders: 709
Checkout modes Protocol checkout 6 Handoff 25 Bookings only 11 Region pins Merchant id Region 01M58QAF02PNHVGYH0Q4V0GD26 uae-1 01M58QAF03JXMNA13J0WEZTHD9 uae-1 01M58QAF04DW9GGXFRKWNV5BR5 uae-1 01M58QAF05A31E6HSX5GCW8PEX uae-1 01M58QAF06K8SV4BBZSAA0J8W2 uae-1 01M58QAF07G94GRWQVWZQD0SY0 eu-1 01M58QAF08W11F0V0SG5SEMWQP us-1 01M5YP50H7GT9NZHN45FHQPQ4D eu-1
Signature Alg Ed25519 Kid e73dQEEa-6gd69GlVZGjB0QvKktjOFomeVq98HDUj-I Canonicalization agora-stable-json Value qAIax64nXLhgUCWyd8AW9Gsikyb1sHHL8alUVhPFmglpCXZvmj6iVltx1yVeLlBR0xrTrVDaMtkjRqCvE6vYDg Source: compliance/api.ts architectureAttestation() + live checks