generated: '2026-09-19' method: searched probe: true url: https://network.mercury-hq.com/trust certifications: [] description: >- MERCURY publishes a trust page ("Trust & reputability - what a procurement buyer, a directory, or a skeptical agent needs before transacting") that is an operator-identity and verify-it-yourself page rather than a certification portal. It names the operator (Mercury Holdings Pty Ltd, an Australian Pty Ltd with ASIC registration in progress - "ABN/ACN published here ONLY once issued"; jurisdiction Queensland; governance "Mercury Foundation - standards & governance arm ... NOT a token foundation"; contact mercuryuser@proton.me with https://mercury-x402-jed.fly.dev as fallback), the three things a reader can verify independently (offline EIP-191 receipt verification against the pinned key, USDC settlement on a public chain via the payTo wallet on BaseScan, and catalog/checkout generated from one object so they cannot drift), and a "what we do NOT do" list (no token, no faked traction - "N=0 external buyers and $0 external revenue today", no payload retention - "we do not store, resell, or train on the content you fetch"). It names NO SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR or other certification or audit, so no Compliance pointer is emitted. probe-security-programs.py did not record it because the page carries fewer than two of the keywords it requires; it is recorded here by hand because the page is real, first-party and answers the trust question directly. operator: legal_name: Mercury Holdings Pty Ltd type: Australian proprietary limited company (Pty Ltd) registration: in progress (ASIC); no ABN/ACN published jurisdiction: Queensland, Australia governance: Mercury Foundation (standards and governance arm; no token) contact: mercuryuser@proton.me verifiable_claims: - {claim: signed provenance receipts, how: 'EIP-191 ecrecover over sha256(content)‖url‖status‖fetchedAt‖nonce against the pinned key 0xACB40253BD71Bb9a5d491b2c6EFF755F2A33Fc75 (/.well-known/mercury-attestation); verifier at /x402/verify'} - {claim: on-chain settlement, how: 'shop wallet 0xe10B9d44e72A29B9c19da02981FFCd875308e3C1 on BaseScan; CDP facilitator; /treasury page shows live balances and $0.00 external earnings'} - {claim: catalog cannot drift from checkout, how: '/catalog, /openapi.json, /.well-known/x402 and the live 402 are generated from the same catalog object (checked: the 402 for /buy/fetch carried maxAmountRequired 3000, matching $0.003 in all three documents)'} data_handling: payload_retention: none stated ("We do not retain fetched content beyond returning it in the response"; /privacy) logs: minimal operational logs (timestamp, route, status) personal_data: '"We do not ask for or collect personal information" (/privacy, last updated 2026-06-04)' related_pages: - {url: 'https://network.mercury-hq.com/terms', status: 200, note: 'terms effective 2026-06-04; machine-readable with Accept: application/json'} - {url: 'https://network.mercury-hq.com/privacy', status: 200} - {url: 'https://network.mercury-hq.com/university/treasury', status: 200, note: live wallet balances and revenue (all external figures $0.00)} - {url: 'https://network.mercury-hq.com/proof', status: 200, note: 'x402 self-settlement proof: "no on-chain settlement recorded yet"'} - {url: 'https://network.mercury-hq.com/reviews', status: 200, note: ERC-8004 on-chain reviews page (wallet-connect UI)} evidence: - {source: 'https://network.mercury-hq.com/trust', status: 200, keywords: [trust, reputability, operator, verify, no payload retention, jurisdiction]} probed_absent: - {url: 'https://trust.mercury-hq.com/', status: 'no DNS'} - {url: 'https://mercury-hq.com/trust', status: 404} - {url: 'https://network.mercury-hq.com/security', status: 404} - {url: 'https://network.mercury-hq.com/compliance', status: 'not probed - no link to it anywhere'}