Pilot data practices.

We query the submitted economic identifier against named public sources and retain versioned evidence to make reports reproducible. We record source costs, timing, status, payment outcome and pseudonymous usage counts. We do not request payer private keys, consumer bureau files or hidden natural-person identities.

Operational logs omit request bodies and payment credentials. A private payment journal retains authorization coordinates and a credential hash for replay protection and reconciliation; it does not retain signatures. Discovery/referrer labels are caller-supplied and unverified. Retention, disputes, controller roles and final legal terms require operator review before broader launch.