{"type":"BuyerProtectionEvidenceIndex","schemaVersion":"2026-08-19","publishedAt":"2026-08-19T00:00:00.000Z","stage":"pre_pilot","scope":"Public product, security, data, reliability, developer and procurement evidence for BuyerProtection.","documents":[{"id":"security-overview","title":"Security overview","version":"2026-08-19","status":"published_product_controls","url":"https://buyerprotection.com.au/security"},{"id":"service-status","title":"Current component status","version":"2026-08-19","status":"live_component_evidence_since_2026_08_03","url":"https://buyerprotection.com.au/api/v1/service-status"},{"id":"data-processing-summary","title":"Data processing and service connections","version":"2026-08-19","status":"published_summary_counterparty_dpa_required","url":"https://buyerprotection.com.au/data-processing"},{"id":"service-provider-register","title":"Versioned service-provider and data-transfer register","version":"2026-08-15.1","status":"published_factual_register_legal_review_required","url":"https://buyerprotection.com.au/.well-known/buyerprotection/service-providers.json"},{"id":"data-lifecycle-register","title":"Versioned data lifecycle and deletion-capability register","version":"2026-08-17.1","status":"published_technical_register_legal_schedule_required","url":"https://buyerprotection.com.au/.well-known/buyerprotection/data-lifecycle.json"},{"id":"privacy-summary","title":"BuyerProtection privacy policy and request path","version":"2026-08-19","status":"published_policy_legal_review_required","url":"https://buyerprotection.com.au/privacy"},{"id":"privacy-rights-desk","title":"Privacy Rights Desk control lifecycle","version":"2026-08-15","status":"implemented_owner_scopes_live_exercise_required","url":"https://buyerprotection.com.au/contact?intent=privacy"},{"id":"procurement-manifest","title":"Procurement capability manifest","version":"2026-08-19","status":"published","url":"https://buyerprotection.com.au/.well-known/buyerprotection/procurement.json"},{"id":"public-readiness","title":"Public programme readiness","version":"2026-08-03","status":"live","url":"https://buyerprotection.com.au/api/v1/public-readiness"},{"id":"developer-contract","title":"OpenAPI contract","version":"1.25.0","status":"published","url":"https://buyerprotection.com.au/openapi.json"},{"id":"merchant-assurance-contract","title":"Merchant Assurance contract","version":"2026-08-13","status":"implemented_purpose_bound_access","url":"https://buyerprotection.com.au/.well-known/buyerprotection/merchant-assurance.json"},{"id":"product-changelog","title":"Product changelog","version":"2026-08-19","status":"published","url":"https://buyerprotection.com.au/changelog"},{"id":"guarantee-boundary","title":"Guarantee boundary summary","version":"2026-08-03","status":"published_summary_live_issuance_contract_required","url":"https://buyerprotection.com.au/guarantee/terms"},{"id":"complaints-path","title":"Complaints path","version":"2026-08-19","status":"live","url":"https://buyerprotection.com.au/complaints"},{"id":"accessibility-path","title":"Accessibility path","version":"2026-08-19","status":"live_review_path_independent_audit_available","url":"https://buyerprotection.com.au/accessibility"},{"id":"security-assessment-verification","title":"Independent security-assessment status","version":"2026-08-15","status":"candidate_bound_independent_review","url":"https://buyerprotection.com.au/api/v1/security-assessment-status"}],"productionEvidencePath":[{"id":"contracting-entity-pack","state":"counterparty_review","nextEvidence":"Bind GOV ASSIST PTY LTD trading as TRUSTEDSITE, ABN 97 697 294 410, to signing authority, IP chain, MSA, liability allocation and insurance evidence."},{"id":"independent-penetration-test","state":"independent_review","nextEvidence":"Freeze the release candidate, complete the independent assessment and publish signed finding and retest evidence."},{"id":"dpa","state":"counterparty_review","nextEvidence":"Execute the counterparty DPA with agreed roles, datasets, locations, periods, transfers and deletion duties."},{"id":"provider-dpa-pack","state":"legal_review","nextEvidence":"Bind the factual provider register to executed provider terms, controller and processor roles, Australian transfer review and the counterparty DPA."},{"id":"retention-and-deletion-schedule","state":"legal_review","nextEvidence":"Approve final periods, legal bases, provider propagation, backup expiry and the accountable rights playbook."},{"id":"sla-bcp-dr-pack","state":"independent_exercise","nextEvidence":"Agree the SLA, complete off-site recovery and supplier-exit exercises, and bind the measured RTO and RPO."},{"id":"measured-customer-outcomes","state":"measured_cohort","nextEvidence":"Run an authorised cohort and independently reconcile each published commercial outcome against its baseline."}],"contacts":{"security":"https://buyerprotection.com.au/contact?intent=security","privacy":"https://buyerprotection.com.au/contact?intent=privacy","procurement":"https://buyerprotection.com.au/contact?intent=procurement","complaints":"https://buyerprotection.com.au/contact?intent=complaints","accessibility":"https://buyerprotection.com.au/contact?intent=accessibility"},"boundary":"Public evidence is inspectable at the stated URL. Independent assurance, counterparty agreement and institutional approval attach through their own recorded decision paths."}