Evidence Vault for Stripe

1. Install the App

Install CertNode Evidence Vault from the Stripe App Marketplace. The app adds three views to your Stripe Dashboard:

• Home Overview, Dashboard stats, billing preview, recent evidence
• Payment Detail, Per-payment evidence checklist on each payment page
• Settings, Enable/disable collection, setup status, pricing info

2. Enable Evidence Collection

Navigate to the Evidence Vault settings page in your Stripe Dashboard and toggle “Enable Evidence Collection” on. Evidence capture begins immediately on all new successful payments.

3. Add collect.js (Recommended)

For the full evidence stack, add the collect.js script to your checkout page. This captures device fingerprint and IP address, data that Stripe does not include in payment events. One line, no wiring — it passively associates the signal with the payment for you.

Place this before your Stripe Elements or Checkout code. It runs silently with no visible UI.

What It Collects

• Device fingerprint, canvas, WebGL, screen resolution, timezone, installed fonts, audio context
• IP address, resolved server-side at collection time

How It Works (one line, no wiring)

Drop the single script tag on your checkout page and you're done. collect.js generates a device fingerprint hash, then passively watches your Stripe.js calls (it never modifies them), sees the PaymentIntent / PaymentMethod id, and securely sends the device + IP signal to CertNode. The Vault webhook joins it to the payment at capture time and stores it alongside 3DS/AVS/CVC data. No metadata wiring required.

Place it on the page before your Stripe Elements or Checkout code. Works with Stripe Elements, Checkout (redirect), and server-created PaymentIntents alike.

Advanced: attach metadata yourself (classic fallback)

Optional. If you create PaymentIntents fully server-side and would rather attach the signal to the PaymentIntent directly, the classic API still works and takes precedence over the passive path:

<!-- collect.js is already on the page -->
<script>
  const md = await new Promise((r) => CertNode.onReady(r));
  // → { device_fingerprint, ip_address, certnode_collected_at }
  // Pass md to your server and set it as PaymentIntent metadata
</script>