Pricing limits
Plans show link, API, analytics and workspace limits before upgrade paths are discussed.
Trust center
Public promises tied to real controls.
Xurl keeps trust practical: plan limits, abuse response, analytics boundaries, export paths and deployment posture are mapped to product controls.
Abuse reporting
Suspicious short links can be reported publicly and reviewed by system admins.
Analytics privacy
Click analytics stay workspace-scoped with plan-controlled history and export surfaces.
Export promise
Teams can export links and analytics so link operations do not become a lock-in trap.
Uptime posture
Redirect health depends on web, Go backend, Redis and Postgres readiness checks.
Support path
Sales, support and operations requests route through contact workflows before launch.
Promise-to-control map
Each public trust claim must point to a product control, admin workflow or release runbook before launch.
Promise
Pricing limits
Control
Shared entitlement checks enforce plan quotas and feature gates across dashboard, API and billing state.
Evidence
M74 entitlement consistency and M100 paid-lock verifier
Promise
Abuse response
Control
Public reports land in the admin abuse queue with audited moderation and direct block actions.
Evidence
M56 abuse direct block and M97 admin operating evidence
Promise
Privacy and retention
Control
Analytics are workspace-scoped, plan-retained and exported through controlled report surfaces.
Evidence
M35 analytics export, M36 reports and M96 full filters
Promise
Status posture
Control
Web health, Go backend health, Redis and Postgres readiness are deployment checks, not marketing guesses.
Evidence
M68 backend diagnostics and M98 billing boundary certification
Promise
Support and onboarding
Control
Contact, report, admin billing and audit screens give operators a support path without direct database access.
Evidence
M97 admin operating certification
Trust statements stay close to operations.
V1 avoids broad legal promises. The public surface names what the system can enforce, show to admins or recover through runbooks.
Abuse
Public reports, admin queue, audited moderation actions.
Retention
Plan defaults define how long analytics history remains available.
Deployment
Separate web and backend services share API_SECRET and health checks.