{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-08", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "vertex-tax", "name": "Vertex O Series", "vendor": "Vertex, Inc.", "vendorUrl": "https://www.vertexinc.com", "kind": "http-api", "category": "tax", "summary": "Vertex O Series is indirect tax software from Vertex, Inc. that calculates sales tax, use tax and VAT for a transaction and records it for reporting. Agents reach it through REST v2 APIs with OAuth client credentials.", "url": "https://www.anchorterminal.com/tools/vertex-tax", "markdownUrl": "https://www.anchorterminal.com/tools/vertex-tax.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/vertex-tax.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/vertex-tax.json", "license": "Proprietary service under a customer agreement with Vertex, Inc. that isn't published", "transports": [ "http" ], "remoteUrl": "https://calcconnect.vertexsmb.com/vertex-ws/v2", "packages": [], "auth": "oauth", "authNotes": "Access is granted through a sales contract. OAuth 2.0 client credentials follow. A Cloud Partition System Administrator creates an API credential under Account Settings, Security \u0026 Credentials, choosing the API and the partition it maps to. The client id and secret are exchanged at https://auth.vertexcloud.com/oauth/token with audience `verx://migration-api` for a bearer token that lasts 3,599 seconds. The secret is shown once and a credential can't be edited. Token requests are limited to 10 per 8 hours, and a caching endpoint at tokenguard.vertexcloud.com returns unexpired tokens. On-Premise and On-Demand deployments use a service account with the API User role and their own token URL.", "pricing": "paid", "pricingNotes": "No public prices. www.vertexinc.com/pricing returns 404 and the O Series product page asks visitors to book a demo. No free tier, trial or self-serve sandbox was found, and the security guide says to work with the Vertex sales team to establish an account. O Series Online Commerce documents a sandbox host that uses the same contracted credentials (checked 2026-10-08).", "priceSummary": "Paid", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs or the OpenAPI specs (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.vertexinc.com/oseries/docs/quick-start", "openapi": "https://developer.vertexinc.com/oseries/openapi/vertex-tax-calculation-and-tax-gis-api.json", "capabilities": [ "tax.calculate", "tax.transactions", "tax.exemptions", "tax.invoicing" ], "tags": [ "hosted", "enterprise", "oauth", "openapi", "sales-led", "status-page", "soc2", "on-premise", "vat", "sales-tax" ], "lastRelease": "2026-09-25", "graded": true, "anchor": { "graded": true, "score": 54.7, "grade": "C", "agentReady": false, "rank": 464, "ranked": true, "rankOf": 629, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 51, "maintenance": 62, "payments": 0, "reliability": 65, "schema": 74, "security": 57, "transparency": 68 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 65, "points": 13, "reason": "Read with the hosted rubric. The graded surface is the O Series Cloud REST v2 API. Statuspage at status.vertexinc.com with 26 components, O Series Cloud among them (20). The incident feed shows 13 incidents from 10 July to 8 October 2026 and none names O Series Cloud. Certificate Centre had a critical disruption of 1.1 hours on 14 July, and three incidents marked major on VAT Compliance, the portal and Express Returns each lasted 1.1 hours or less (20). The token endpoint is limited to 10 requests per 8 hours and the Certificate Centre API to 1,000 requests a minute. No limit for the calculation API was found (7 of 15). Certificate Centre documents 429 and the O Series guide says to retry a 500 later. No Retry-After, backoff guidance or idempotency key was found (3 of 15). The trust centre lists a Vertex Service Level Exhibit behind an access request, which we couldn't read (5 of 10). REST v2 is generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 74, "points": 12.03, "reason": "OpenAPI 3.0 specs for four O Series APIs download without a login from the API reference. Calculation and Tax GIS is 2.9.0 with 14 operations and 168 schemas, Tax Configuration v2.1.0 with 29 operations (25). developer.vertexinc.com/llms.txt returns 404 and the llms.txt on www.vertexinc.com is a list of marketing pages, but each guide is served as Markdown at its URL plus .md (5 of 10). The sale operation explains Quotation, Invoice and Distribute Tax and which are stored, and the calculation spec carries 872 descriptions. None says when not to call an operation (14 of 20). 36 enums and string length limits, though `transactionType` is the only required field among 54 on a sale request (10 of 15). Guides carry sample requests and responses. The calculation spec has 2 examples, and errors are four generic statuses with no catalogue of error codes (8 of 15). The path carries v2 and specs carry versions. Release notes are grouped by service release (SR19 to SR24) without dates (12 of 15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 51, "points": 8.29, "reason": "Calculation responses can't be trimmed by field. Three indicator flags switch optional blocks on, and configuration lists default to 20 items (12 of 25). Configuration lists take OData `$skip`, `$top` (maximum 500) and `$filter`, and Certificate Centre documents filtering and sorting. Calculation calls return one transaction (16 of 20). Errors carry `code`, `message` and `target`, but the guide lists only 400, 401, 403 and 500 with general advice (10 of 20). No idempotency key. An agent can check whether a transaction exists, then delete, reverse or roll it back, and the docs warn of duplicate transactions outside a 90-day window on Cloud (6 of 20). One required field on a calculation request. No official SDK was found, and the guides show cURL and C# samples (7 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 57, "points": 9.98, "reason": "OAuth 2.0 client credentials. A Cloud credential maps to one API and one partition, the secret is shown once, and access tokens last 3,599 seconds. Token requests with credentials in the URL are rejected. The configuration spec names view and edit scopes, but the Cloud token returns scope `profile`, which the docs call informational, so we scored between plain revocable keys and scoped ones (22 of 30). On-Premise and On-Demand let an admin build a role with a subset of the API User role and set credential expiry in days. No read-only Cloud credential or confirmation for deletes was found (10 of 20). Responses are structured tax results and configuration records (10 of 15). No audit log of API calls was found. A request can ask for support-level log entries in its own response (2 of 15). The trust centre lists 2025 SOC 1 Type II and SOC 2 Type II reports from Forvis Mazars, annual third-party penetration testing and an ISO certificate for e-Invoicing. security.txt returns 404, and no bug bounty or disclosure policy was found (13 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 0, "points": 0, "reason": "Read with the hosted rubric. No x402, MPP or L402 in the developer docs or the specs (0). No public price. www.vertexinc.com/pricing returns 404 and the product page asks visitors to book a demo (0). No free tier or trial was found (0). The security guide says to work with the Vertex sales team to establish an account, and an administrator then creates the API credential in the web interface (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 62, "points": 5.43, "reason": "The O Series release notes page, which now covers SR24 and calculation spec 2.9.0, was last modified on 25 September 2026. Certificate Centre lists a September 2026 release, version 1.0.3 (30). The e-Invoicing API has dated release notes for 22 July, 21 and 28 August, and 1, 4, 10 and 16 September 2026 (20). Closed service with public release notes and support through Vertex Community, which needs a login we don't have (9 of 15). No official SDK or MCP server was found. The only public repository under github.com/vertexinc is a Magento connector last pushed in April 2021 (0). Specs are synced to the docs site from a source repository per the page metadata, with no public CI to read (3 of 10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 68, "points": 5.95, "note": "editorial 52, provenance 84", "reason": "Closed service. The only public terms are the website terms of use, which name Vertex, Inc. and Pennsylvania law. The customer agreement isn't published (10 of 30). The privacy notice, last updated 19 August 2026, says personal data is disposed of when no longer necessary and gives no periods. The trust centre says Vertex signs a DPA and deletes customer data on request, with the DPA itself behind an access request (14 of 30). A dated notice ended support for most REST v1 endpoints on 30 April 2026 with a migration guide. No general deprecation policy was found (10 of 20). Five sub-processors with locations and purpose (AWS, Microsoft, Oracle, ecosio, Global VAT Compliance), last updated 8 April 2026 (18 of 20)." } ], "assessment": { "date": "2026-10-08", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Calculation responses can't be trimmed by field. Three indicator flags switch optional blocks on, and configuration lists default to 20 items (12 of 25). Configuration lists take OData `$skip`, `$top` (maximum 500) and `$filter`, and Certificate Centre documents filtering and sorting. Calculation calls return one transaction (16 of 20). Errors carry `code`, `message` and `target`, but the guide lists only 400, 401, 403 and 500 with general advice (10 of 20). No idempotency key. An agent can check whether a transaction exists, then delete, reverse or roll it back, and the docs warn of duplicate transactions outside a 90-day window on Cloud (6 of 20). One required field on a calculation request. No official SDK was found, and the guides show cURL and C# samples (7 of 15).", "maintenance": "The O Series release notes page, which now covers SR24 and calculation spec 2.9.0, was last modified on 25 September 2026. Certificate Centre lists a September 2026 release, version 1.0.3 (30). The e-Invoicing API has dated release notes for 22 July, 21 and 28 August, and 1, 4, 10 and 16 September 2026 (20). Closed service with public release notes and support through Vertex Community, which needs a login we don't have (9 of 15). No official SDK or MCP server was found. The only public repository under github.com/vertexinc is a Magento connector last pushed in April 2021 (0). Specs are synced to the docs site from a source repository per the page metadata, with no public CI to read (3 of 10).", "payments": "Read with the hosted rubric. No x402, MPP or L402 in the developer docs or the specs (0). No public price. www.vertexinc.com/pricing returns 404 and the product page asks visitors to book a demo (0). No free tier or trial was found (0). The security guide says to work with the Vertex sales team to establish an account, and an administrator then creates the API credential in the web interface (0).", "reliability": "Read with the hosted rubric. The graded surface is the O Series Cloud REST v2 API. Statuspage at status.vertexinc.com with 26 components, O Series Cloud among them (20). The incident feed shows 13 incidents from 10 July to 8 October 2026 and none names O Series Cloud. Certificate Centre had a critical disruption of 1.1 hours on 14 July, and three incidents marked major on VAT Compliance, the portal and Express Returns each lasted 1.1 hours or less (20). The token endpoint is limited to 10 requests per 8 hours and the Certificate Centre API to 1,000 requests a minute. No limit for the calculation API was found (7 of 15). Certificate Centre documents 429 and the O Series guide says to retry a 500 later. No Retry-After, backoff guidance or idempotency key was found (3 of 15). The trust centre lists a Vertex Service Level Exhibit behind an access request, which we couldn't read (5 of 10). REST v2 is generally available (10).", "schema": "OpenAPI 3.0 specs for four O Series APIs download without a login from the API reference. Calculation and Tax GIS is 2.9.0 with 14 operations and 168 schemas, Tax Configuration v2.1.0 with 29 operations (25). developer.vertexinc.com/llms.txt returns 404 and the llms.txt on www.vertexinc.com is a list of marketing pages, but each guide is served as Markdown at its URL plus .md (5 of 10). The sale operation explains Quotation, Invoice and Distribute Tax and which are stored, and the calculation spec carries 872 descriptions. None says when not to call an operation (14 of 20). 36 enums and string length limits, though `transactionType` is the only required field among 54 on a sale request (10 of 15). Guides carry sample requests and responses. The calculation spec has 2 examples, and errors are four generic statuses with no catalogue of error codes (8 of 15). The path carries v2 and specs carry versions. Release notes are grouped by service release (SR19 to SR24) without dates (12 of 15).", "security": "OAuth 2.0 client credentials. A Cloud credential maps to one API and one partition, the secret is shown once, and access tokens last 3,599 seconds. Token requests with credentials in the URL are rejected. The configuration spec names view and edit scopes, but the Cloud token returns scope `profile`, which the docs call informational, so we scored between plain revocable keys and scoped ones (22 of 30). On-Premise and On-Demand let an admin build a role with a subset of the API User role and set credential expiry in days. No read-only Cloud credential or confirmation for deletes was found (10 of 20). Responses are structured tax results and configuration records (10 of 15). No audit log of API calls was found. A request can ask for support-level log entries in its own response (2 of 15). The trust centre lists 2025 SOC 1 Type II and SOC 2 Type II reports from Forvis Mazars, annual third-party penetration testing and an ISO certificate for e-Invoicing. security.txt returns 404, and no bug bounty or disclosure policy was found (13 of 20).", "transparency": "Closed service. The only public terms are the website terms of use, which name Vertex, Inc. and Pennsylvania law. The customer agreement isn't published (10 of 30). The privacy notice, last updated 19 August 2026, says personal data is disposed of when no longer necessary and gives no periods. The trust centre says Vertex signs a DPA and deletes customer data on request, with the DPA itself behind an access request (14 of 30). A dated notice ended support for most REST v1 endpoints on 30 April 2026 with a migration guide. No general deprecation policy was found (10 of 20). Five sub-processors with locations and purpose (AWS, Microsoft, Oracle, ecosio, Global VAT Compliance), last updated 8 April 2026 (18 of 20)." }, "sources": [ { "what": "developer hub and API list", "url": "https://developer.vertexinc.com/", "seen": "2026-10-08" }, { "what": "O Series quick start, base URLs", "url": "https://developer.vertexinc.com/oseries/docs/quick-start", "seen": "2026-10-08" }, { "what": "Cloud authentication guide", "url": "https://developer.vertexinc.com/oseries/docs/authentication-cloud", "seen": "2026-10-08" }, { "what": "On-Premise and On-Demand authentication guide", "url": "https://developer.vertexinc.com/oseries/docs/authenticate-op-od", "seen": "2026-10-08" }, { "what": "token caching and token rate limit", "url": "https://developer.vertexinc.com/oseries/docs/os-token-caching", "seen": "2026-10-08" }, { "what": "troubleshooting and error format", "url": "https://developer.vertexinc.com/oseries/docs/troubleshooting-os", "seen": "2026-10-08" }, { "what": "O Series release notes", "url": "https://developer.vertexinc.com/oseries/docs/os-release", "seen": "2026-10-08" }, { "what": "REST v1 end of support notice", "url": "https://developer.vertexinc.com/oseries/docs/end-of-support-for-vertex-cloud-rest-apis-v1", "seen": "2026-10-08" }, { "what": "security considerations, account through sales", "url": "https://developer.vertexinc.com/oseries/docs/calculation-api-security", "seen": "2026-10-08" }, { "what": "Calculation and Tax GIS OpenAPI spec", "url": "https://developer.vertexinc.com/oseries/openapi/vertex-tax-calculation-and-tax-gis-api.json", "seen": "2026-10-08" }, { "what": "Tax Configuration OpenAPI spec", "url": "https://developer.vertexinc.com/oseries/openapi/vertex-tax-configuration-api.json", "seen": "2026-10-08" }, { "what": "Certificate Centre release notes", "url": "https://developer.vertexinc.com/certificatecenter/docs/release-notes", "seen": "2026-10-08" }, { "what": "Certificate Centre error handling and rate limit", "url": "https://developer.vertexinc.com/certificatecenter/docs/error-handling", "seen": "2026-10-08" }, { "what": "e-Invoicing release note, 16 September 2026", "url": "https://developer.vertexinc.com/einvoicing/docs/september-16-2026", "seen": "2026-10-08" }, { "what": "status incidents", "url": "https://status.vertexinc.com/api/v2/incidents.json", "seen": "2026-10-08" }, { "what": "status components", "url": "https://status.vertexinc.com/api/v2/components.json", "seen": "2026-10-08" }, { "what": "trust centre, reports and sub-processors", "url": "https://trust.vertexinc.com/", "seen": "2026-10-08" }, { "what": "website terms of use", "url": "https://www.vertexinc.com/terms-of-use", "seen": "2026-10-08" }, { "what": "privacy notice", "url": "https://www.vertexinc.com/vertex-privacy-policy", "seen": "2026-10-08" }, { "what": "O Series product page", "url": "https://www.vertexinc.com/solutions/products/vertex-indirect-tax-o-series", "seen": "2026-10-08" }, { "what": "security.txt (404)", "url": "https://www.vertexinc.com/.well-known/security.txt", "seen": "2026-10-08" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0.1/servers?search=vertex", "seen": "2026-10-08" }, { "what": "RDAP for vertexinc.com", "url": "https://rdap.verisign.com/com/v1/domain/vertexinc.com", "seen": "2026-10-08" } ], "openQuestions": [ "unchecked: the Vertex Service Level Exhibit, Security Exhibit and Data Processing Agreement, which the trust centre lists behind an access request", "unchecked: Vertex Community support and product documentation, which need a customer login", "Whether the calculation API has a request rate limit or answers 429. None was found in the O Series guides or spec", "Whether resending an INVOICE with the same documentNumber or transactionId replaces or duplicates the stored transaction", "Whether the Online Commerce sandbox host can be used without a contract", "Whether vertexsmb.com and vertexcloud.com are registered to Vertex, Inc. The vendor's docs name them as its API hosts", "The dates of O Series service releases SR19 to SR24. The release notes carry none, only the page's modification date" ] }, "negative": 0, "verdict": "Public OpenAPI 3.0 specs cover calculation, transaction management, tax area lookup and tax configuration, and guides are served as Markdown. Access needs a sales contract. No price, free tier, sandbox signup, calculation rate limit, idempotency key or official SDK was found in the reviewed documentation.", "bestFor": "An agent working inside a company that already has an O Series licence, for quotes, invoice tax, tax area lookups and tax configuration across sales tax, use tax and VAT.", "strengths": [ "OpenAPI 3.0 specs download without a login. Calculation and Tax GIS is version 2.9.0 with 14 operations, Tax Configuration v2.1.0 with 29", "Every guide page is served as Markdown when .md is added to its URL", "Each Cloud API credential maps to one API and one partition, and token requests carrying credentials in the URL are rejected", "status.vertexinc.com lists 26 components, and no incident from 10 July to 8 October 2026 names O Series Cloud", "The trust centre lists SOC 1 Type II and SOC 2 Type II reports for 2025 and five sub-processors with locations" ], "weaknesses": [ "No public price, free tier or self-serve signup. The security guide sends new users to the Vertex sales team for an account", "No rate limit for the calculation API and no idempotency key were found in the reviewed documentation", "The standard token endpoint allows 10 access token requests per 8 hours for each client", "No official SDK, MCP server or llms.txt on the developer site was found", "The customer agreement, DPA and Service Level Exhibit sit behind an access request in the trust centre" ], "agentNotes": [ "Cache the access token for its 3,599-second life. The standard token endpoint allows 10 requests per 8 hours, and tokenguard.vertexcloud.com returns a cached token", "Send no `Authorization: Bearer` header to /oauth/token, and put the client id and secret in the body or a Basic header. Credentials in the URL are rejected", "Set `saleMessageType` to QUOTATION for an estimate. INVOICE is stored for reporting and remittance", "Call GET /v2/transaction-exists/{transactionid} before retrying a failed INVOICE. No idempotency key is documented", "Delete, reverse or roll back a Cloud transaction within 90 days of calculation. Later requests can cause calculation errors or duplicates" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 54.7 } ], "editorialScores": { "ergonomics": 51, "maintenance": 62, "payments": 0, "reliability": 65, "schema": 74, "security": 57, "transparency": 52 }, "provenanceScore": 84 }, "connect": { "http": "curl --location 'https://auth.vertexcloud.com/oauth/token' \\\n --header 'Content-Type: application/x-www-form-urlencoded' \\\n --data-urlencode 'client_id=\u003cyour-client-id\u003e' \\\n --data-urlencode 'client_secret=\u003cyour-client-secret\u003e' \\\n --data-urlencode 'audience=verx://migration-api' \\\n --data-urlencode 'grant_type=client_credentials'" }, "letme": { "capability": "https://letme.dev/tax.calculate", "tool": "https://letme.dev/vertex-tax" }, "notable": [ "The developer hub lists nine API products, among them O Series, e-Invoicing, VAT Compliance, Certificate Centre, Payroll Tax and e-Commerce and Marketplaces (https://developer.vertexinc.com/)", "POST /v2/supplies calculates from the seller's side. `saleMessageType` QUOTATION is an estimate and isn't stored, INVOICE is stored for reporting and remittance (https://developer.vertexinc.com/oseries/reference/salepost)", "Support for most REST v1 endpoints ended on 30 April 2026, with a v1 to v2 code changes guide (https://developer.vertexinc.com/oseries/docs/end-of-support-for-vertex-cloud-rest-apis-v1)", "The standard token endpoint allows 10 access token requests per 8 hours for each client and audience (https://developer.vertexinc.com/oseries/docs/os-token-caching)", "On Cloud, delete, reversal and rollback requests must be made within 90 days of the calculation (https://developer.vertexinc.com/oseries/docs/delete-transaction)", "Vertex says it maintains tax rules and rates for 19,000 jurisdictions (https://www.vertexinc.com/solutions/products/vertex-indirect-tax-o-series)", "The trust centre lists 2025 SOC 1 Type II and SOC 2 Type II reports and five sub-processors, last updated 8 April 2026 (https://trust.vertexinc.com/)" ], "area": "domain-data", "details": [ { "label": "Graded surface", "value": "O Series Cloud REST v2 APIs. No official MCP server or SDK was found" }, { "label": "APIs", "value": "Calculation and Tax GIS (version 2.9.0, 14 operations), Tax Configuration (v2.1.0, 29 operations), User Management and Role Management, all OpenAPI 3.0" }, { "label": "Calculation endpoints", "value": "POST /v2/supplies (seller), /v2/procurement (buyer) and /v2/owner, plus five tax area lookups by address, coordinates, tax area id, external jurisdiction code or batch" }, { "label": "Transaction management", "value": "DELETE /v2/transactions/{id}, POST /v2/transactions/{id}/reversal and /rollback, GET /v2/transaction-exists/{transactionid}. On Cloud, within 90 days of calculation" }, { "label": "Hosts", "value": "Cloud calculation at calcconnect.vertexsmb.com (AWS) or calcconnect.azure-na.vertexcloud.com (Azure), configuration at calcconnect.vertexsmb.com/tax-config-api, On-Demand at \u003ccustomer\u003e.ondemand.vertexinc.com, On-Premise on the customer's server" }, { "label": "Credentials", "value": "OAuth 2.0 client credentials, one API and one partition per Cloud credential, tokens last 3,599 seconds" }, { "label": "Rate limits", "value": "10 access token requests per 8 hours on the standard token endpoint. Certificate Centre API 1,000 requests a minute. No calculation limit found" }, { "label": "Errors", "value": "400, 401, 403 and 500 with an `errors` array of `code`, `message` and `target`. Configuration adds 404 and 503" }, { "label": "Pagination", "value": "OData `$skip`, `$top` (default 20, maximum 500) and `$filter` on configuration lists" }, { "label": "Exemption certificates", "value": "Certificate Centre API, version 1.0.3 in September 2026, 20 operations for customers, certificates and contacts at ccservices.vertexsmb.com" }, { "label": "E-invoicing", "value": "Separate e-Invoicing API with dated release notes, the latest on 16 September 2026" }, { "label": "Azure limits", "value": "GET /v2/changed-taxareas and /v2/changed-taxareas/{taxareaid} aren't available on the Azure calculation host" }, { "label": "Certifications", "value": "SOC 1 Type II and SOC 2 Type II reports for 2025 by Forvis Mazars, listed in the trust centre" }, { "label": "Status", "value": "status.vertexinc.com on Statuspage, 26 components including O Series Cloud and O Series On-Demand" }, { "label": "Sub-processors", "value": "AWS, Microsoft, Oracle, ecosio and Global VAT Compliance, with locations, updated 8 April 2026" } ], "provenance": { "legalEntity": "Vertex, Inc.", "domain": "vertexinc.com", "domainRegistered": "1998-09-01", "endpointOnVendorDomain": true, "terms": "https://www.vertexinc.com/terms-of-use", "privacy": "https://www.vertexinc.com/vertex-privacy-policy", "statusPage": "https://status.vertexinc.com", "changelog": "https://developer.vertexinc.com/oseries/docs/os-release", "securityTxt": "none", "checked": "2026-10-08", "notes": [ "The website terms of use and the privacy notice name Vertex, Inc., 2301 Renaissance Blvd., King of Prussia, PA 19406, and the terms choose Pennsylvania law. The privacy notice was last updated on 19 August 2026.", "Cloud API calls go to calcconnect.vertexsmb.com and auth.vertexcloud.com, which the vendor's developer docs name as its hosts. We didn't check the registration of those two domains. On-Demand deployments answer on \u003ccustomer\u003e.ondemand.vertexinc.com.", "www.vertexinc.com/.well-known/security.txt and /security.txt return 404.", "The terms URL is the website terms of use. The customer agreement, DPA, Security Exhibit and Service Level Exhibit are listed in the trust centre behind an access request.", "RDAP for vertexinc.com gives a registration date of 1998-09-01." ], "score": 84, "checks": [ { "check": "Legal entity named", "value": "Vertex, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "vertexinc.com, registered 1998-09-01 (28 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "calcconnect.vertexsmb.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 3 of the 7 things a reader expects", "points": 6.6, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 5 of the 8 things a reader expects", "points": 7.8, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.vertexinc.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.vertexinc.com/terms-of-use", "state": "read", "readAt": "2026-10-08", "words": 1966, "points": 6.6, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": false }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "Any dispute relating to this website in any manner shall be governed by the laws of the Commonwealth of Pennsylvania, excluding choice of law, and shall exclusively be brought in the state or federal courts of the Commonwealth of Pennsylvania.", "says": "The law of the Commonwealth of Pennsylvania" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "IN NO EVENT WILL VERTEX, ITS SUPPLIERS, OR THIRD PARTIES MENTIONED AT THIS SITE BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL OR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM LOST PROFITS, LOST DATA OR BUSINESS INTERRUPTION) ARISING OUT OF THE USE, INABILITY TO USE, OR THE RESULTS…", "says": "Rules out indirect and consequential losses, with no cap named in this sentence" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": false }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Using this Site following the posting of changes to these terms indicates that you accept them as changed.", "says": "Changes are posted, with no other notice named" }, { "key": "terms.use", "label": "Lists what users may not do", "found": false }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ] }, { "kind": "privacy", "url": "https://www.vertexinc.com/vertex-privacy-policy", "state": "read", "readAt": "2026-10-08", "words": 5335, "points": 7.8, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": false }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "In support of our commitment, we developed this privacy notice in order to be transparent about the data we collect about you and how it is used and shared, as well as the choices and rights available to you with respect to the data we maintain about you." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": false }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "and information about you shared with us by third parties for our own use, as well as publicly-available information collected by us." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "Personal Information Sales Opt-Out and Opt-In Rights: We do not sell personal data to third parties.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "If you have any questions about this privacy notice, our use of your personal data, or your rights with respect to such use, you may contact the applicable Vertex affiliate using any of the options below:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": false }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "In these cases, we protect any information transferred to third countries using appropriate safeguards, such as contractual clauses approved by relevant supervisory authorities (where applicable)." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/vertex-tax.json", "live": { "slug": "vertex-tax", "probe": { "target": "https://calcconnect.vertexsmb.com/vertex-ws/v2", "method": "get", "lastAt": "2026-10-08T19:09:01.550123634Z", "lastOk": true, "lastStatus": 401, "lastMs": 328, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 337, "p95ms24h": 389, "samples24h": 42, "samples30d": 42, "days": [ { "date": "2026-10-08", "probes": 42, "ok": 42 } ] }, "vendorStatus": { "page": "https://status.vertexinc.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-08T19:07:03.755128847Z" }, "securityTxt": { "url": "https://vertexinc.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-08T15:38:42.909167355Z" }, "pages": [ { "url": "https://developer.vertexinc.com/oseries/docs/os-release", "kind": "changelog", "status": 200, "checkedAt": "2026-10-08T18:17:20.759088603Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "dbf33e43de24" }, { "url": "https://www.vertexinc.com/vertex-privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-08T18:31:23.444238352Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a77bfa05dfc0" }, { "url": "https://www.vertexinc.com/terms-of-use", "kind": "terms", "status": 200, "checkedAt": "2026-10-08T18:31:21.326104819Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "8a38170a4aef" } ], "updatedAt": "2026-10-08T19:09:01.550123634Z" } } }