Marketplace
Authpermit builds its own verification engine, so the marketplace carries no identity vendors. What it carries is data and reach Authpermit cannot hold itself: sanctions and watchlists, company registries, criminal-record bureaus, education and employment registries, threat feeds.
Installing is a governance act
Every listing states which fields would leave the platform and to whom. Installing one records that list and the lawful basis you are relying on, and a call to an uninstalled provider is refused — nothing reaches a third party your organization did not approve.
Pricing is pass-through plus a stated margin
Each listing shows the underlying cost in credits and the margin separately. There is no hidden markup, and the margin is zero on listings where the underlying data is free.
Adapters
A provider that needs your own account credentials takes a reference to a secret, never the secret itself. Providers that are not configured return unavailable rather than a fabricated answer.