PROVIDER MARKS — what these files are, and what is being claimed

Every file in this directory is a trademark belonging to the company it
depicts. None of them belongs to Banxta, and nothing here grants anyone a
licence to anything.

WHERE THEY CAME FROM

Each file was taken on 2026-09-21 from that provider's own published website —
its favicon, its app icon, or the logomark its own header renders — by
apps/web/scripts/harvest-marks.mjs. Where a provider serves its assets from
Webflow, Framer, Contentful, HubSpot or its own CDN, the file came from that
host, because that is the host the provider's own pages reference.

apps/web/config/provider-marks.ts records, per file: the exact URL it was
fetched from, the provider's own site, the date, and the basis relied on.

ON WHAT BASIS

Referential use. Showing a mark to refer to its owner is permitted by
Art 14(1)(c) of Regulation (EU) 2017/1001 and by s.11(2)(b) of the Trade Marks
Act 1994. A report that names a provider as a candidate and draws that
provider's mark beside its own name is that, and nothing more.

WHAT WAS NOT DONE, SAID PLAINLY

No provider was asked. No brand page granted permission for this. No licence
was obtained, and the copyright in each piece of artwork remains with its
owner. The entries in provider-marks.ts say `referential_use` rather than
`brand_page_permits` for exactly this reason: the field is there so that a
person reading it — including a person writing to us about it — is told the
truth in one word.

This was the product owner's decision, taken on 2026-09-21 after the
distinction above was put to them.

THE LIMITS IT OPERATES UNDER (AGENTS.md §3.8)

  - A mark appears only beside a provider a report names as a CANDIDATE. Never
    on an excluded provider, and never in the free verdict.
  - The provider's NAME is always rendered. The mark decorates it and never
    replaces it; it is aria-hidden with an empty alt, so a screen reader is
    told about the name and not about the logo.
  - Files are served from this origin only. Nothing is fetched at runtime from
    a provider's CDN, which would tell that provider on every render which of
    their competitors we had just recommended.
  - The neutrality line, "Based on providers' published policies. No provider
    pays for placement.", appears on every verdict and every report. The
    owner approved this wording on 2026-09-23; it replaced a sentence that
    also cited observed outcomes, which are not collected.

IF YOU ARE A PROVIDER AND WANT YOUR MARK REMOVED

Delete the entry from apps/web/config/provider-marks.ts. That provider then
renders a monogram in our own type, the card looks finished, and nothing else
in the product changes. The fallback is kept working and tested for precisely
this reason.

A BETTER FOOTING, WHERE ONE CAN BE HAD

A file taken from a provider's own brand or press page under terms that cover
a third party is strictly better, because it answers the copyright question
from the rights-holder rather than around it. See
docs/research/2026-09-21-provider-icon-plan.md for how one replaces an entry
here and changes its `permission` to `brand_page_permits`.