What is CertNode Evidence Vault?
Evidence Vault automatically captures authentication data (3D Secure, AVS, CVC, device fingerprint, IP address) on every successful payment and stores it with RFC 3161 certified timestamps. When a chargeback is filed, this pre-existing evidence is ready to defend the payment.
How much does it cost?
$0 per month. $0.03 per transaction captured. $5 monthly minimum (waived if no transactions). CertNode Reflex users get a 33% discount at $0.02 per transaction. Cancel anytime.
What evidence is captured?
Six data points: 3D Secure authentication result and version, AVS (address verification), CVC (card verification code), device fingerprint (browser, OS, screen), IP address, and an RFC 3161 certified timestamp proving when evidence was collected.
Do I need collect.js?
Without collect.js, only 3D Secure, AVS, and CVC are captured from Stripe's payment data. Adding collect.js to your checkout page also captures device fingerprint and IP address — the two strongest signals for winning fraud disputes. It's a single script tag.
What is an RFC 3161 timestamp?
RFC 3161 is an international standard for trusted timestamps issued by an independent Time Stamping Authority (TSA). It provides legally admissible proof of when evidence was collected — the same standard used in legal proceedings and digital notarization.
How does this help with chargebacks?
The biggest challenge in chargeback defense is proving what happened at the time of purchase. Vault evidence is captured before any dispute exists, so it can't be fabricated or questioned. Pre-timestamped 3DS authentication, device fingerprint, and IP address make fraud claims much harder for cardholders to sustain.
Does Evidence Vault work with CertNode Reflex?
Yes, and they're better together. When both are installed, Reflex automatically includes vault evidence in dispute responses — no manual work. Reflex users also get a 33% discount on vault pricing ($0.02 vs $0.03 per transaction).
What data do you store?
We store authentication results (3DS, AVS, CVC), device fingerprint hash, IP address, card brand/last4/country, risk level, evidence hash, and RFC 3161 token. We do not store full card numbers, customer names, or email addresses. See our Privacy Policy for details.
How long is evidence retained?
Evidence is retained for 13 months from capture — covering the full chargeback window for all major card networks (Visa 120 days, Mastercard 120 days, Amex 120 days).
Will my customers notice anything?
No. Evidence capture happens server-side when Stripe processes the payment. The collect.js script runs silently in the browser and adds no visible UI. Your customers won't see or notice anything different.
How do I cancel?
Disable Evidence Collection in the app's Settings page, or uninstall the app from Stripe. No cancellation fees, no contracts. Existing evidence is retained for the 13-month period.
Is this compliant with privacy regulations?
Yes. We only collect data necessary for payment fraud prevention, which is a legitimate interest under GDPR Article 6(1)(f). Device fingerprints are stored as hashes, not raw data. IP addresses are retained only for the chargeback defense window. See our Privacy Policy for full details.