ZoikoTax
DEVELOPERS · INTEGRATIONS · OEM / EMBEDDED

Embed governedZoikoTax capabilitieswithout losing tenantaccountability.

Use approved partner provisioning and embedded integration patterns toconnect organizations, activate permitted capabilities and preserve clearattribution, isolation and evidence.

Architecture is not a commercial grant

This page explains public partner/embedded architecture. It does not grant reseller, white-label, branding, pricing, distribution or contractual rights. Thoserequire approved commercial/legal sources.

DIRECT ANSWER

What does OEM /Embedded mean?

Approved partners may connect ZoikoTax capabilities to a wider platform or service whileeach organization’s business context, capability scope and evidence remain explicit.

Technical embedding, partner identity approval, capability entitlement and production activation are separatedecisions. Commercial rights are separately governed; navigation or test access grants none of them.

01 / OPERATING MODEL

One embedded proposition. Explicit responsibilities.

Embedding connects responsibilities; it does not merge their authority.

THREE-LAYER MODEL · CONCEPTUAL, NOT A TENANT HIERARCHY
Partner / OEM
Wider proposition, interface and workflows
Approved integration boundary
Organization / tenant
Authorized business context and responsibility
Explicit organization boundary
ZoikoTax
Supported fiscal controls and evidence
Approved capability boundary

Text equivalent: the partner owns its wider experience and approved integration; the organization remains the authorized business context; ZoikoTax provides supported fiscal controlsand evidence within the approved scope.

Partner / OEM
Own the wider proposition, UI, workflows and approvedintegration.
Partner identity and integration scope require approval; no tier or resalerights are implied.
Organization / tenant
Maintain the authorized business context and accountableorganization.
Exact organization objects and relationships follow the approvedplatform contract.
ZoikoTax
Provide supported fiscal controls and evidence for theapproved capability.
No universal production capability or global multi-tenancy claim.
External architecture
Billing, ERP, identity, data or compliance systems onlywhere supported.
External-system ownership and integration support remain explicit;support is not automatic.
Shared support / operations
Coordinate responsibility using the approved operatingmodel.
Contracts and governed support sources define boundaries, not thisdiagram.
Isolation is an approved concept, not a universal implementation

Confirm the exact organization separation, access and external-system contracts. The diagram does not define authentication, delegation, tenant hierarchyor cross-tenant visibility.

02 / PARTNER PROVISIONING

Provisioning is a sequence of governed decisions.

Follow the approved lifecycle without treating setup as an entitlement or activation shortcut.

01 ➔
Registration / authorization
Establish the separately approved partner identity.

Authorization is not a public signup or a capability grant.

02 ➔
Organization creation / association
Connect the authorized organization context.

Exact objects and association mechanics follow approved source contracts.

03 ➔
Configuration
Apply supported organization and integration settings.

Use source-defined configuration; no fields or schemas are implied here.

04 ➔
Entitlement
Confirm permission for the exact capability scope.

Creating a context does not grant permission; entitlement has its own authority.

05 ➔
Validation
Review readiness, Coverage, environment and security.

Validation gates are independent and do not automatically pass.

06 ➔
Activation
Obtain controlled production activation approval.

Test permission and validation do not establish production entitlement.

07 ➔
Operate
Perform scoped operations with attribution and evidence.

The governed operating model defines responsibility; no SLA is promised.

08 ➔
Offboard
Follow approved restriction and deprovisioning procedures.

Data, historical access and lifecycle handling remain policy-controlled.

Provisioning ≠ entitlement ≠ production activation

Read this sequence in order: registration / authorization ➔ organization creation / association ➔ configuration ➔ entitlement ➔ validation ➔ activation ➔ operate ➔ offboard. Each boundary requires its approved source; no instant self-service activation is implied.

03 / ORGANIZATION IDENTITY

Keep the organization visible at the point of consequence.

Partner identity and organization identity are separate. Attribution provides accountability, not unrestricted cross-tenant visibility.

CONCEPTUAL IDENTITY ANATOMY
Context travels with the action.
Partner context
Organization context
Explicit environment
Permitted capability / action
Attribution & evidence reference

Illustrative categories only. No identifier, key, APIfield, delegation model or fixed tenancyrelationship is specified.

Partner context
Approved integrating party; distinct from the organization.
Organization / tenant identity
Authorized business scope according to the actual platform model.
External customer reference
A permitted mapping only where the source contract supports it.
Environment
Explicit sandbox/test or production context; permissions stay separate.
Request attribution
Scope and origin of a supported request, without visibility expansion.
Operator / delegated actor
Only the actual supported actor model; no impersonation or delegation isinferred.
Evidence reference
A source-defined traceability link, not an invented record or key format.
Exact technical semantics remain governed

Keep organization context and capability scope visible near consequential actions. Confirm the identity, authentication and authorization contracts in the APIReference; never infer tenant hierarchy, RBAC or cross-tenant access from these conceptual categories.

04 / CAPABILITY GATES

A provisioned context is not permission to run.

Approve the exact capability, Coverage and environment independently before production activation.

01 ➔
Provisioned context
An approved organization contextexists under the actual model.
02 ➔
Entitlement approved
The commercial / product grantsource authorizes the specificscope.
03 ➔
Coverage / environment /security validated
Review capability-specific country,pack, network and environmentgates.
04 ➔
Production activationapproval
A separately controlled approvalestablishes the permitted productionscope.
CATALOG AUTHORITY
Partner-eligible capability details require approved source

Only the approved partner-eligible catalog can establish eligibility. Exact states, effective changes andrevocation behavior follow formally governed sources. Public navigation is not a catalog grant anddoes not make capabilities available automatically to every partner or tenant.

Grant authority
Confirm the commercial / product entitlementsource and effective scope; never infer a grantfrom creation or configuration.
Exact Coverage
Validate each capability against its country,pack and network Coverage. A broad marketlabel is not sufficient.
Independent environment
Test permission is not production entitlement.Security and production activation approvalremain separate gates.
No inherited entitlement

Text equivalent: provisioned context ➔ entitlement approved ➔ Coverage / environment / security validated ➔ production activation approval. Navigation,partner context and sandbox access do not bypass any gate.

05 / EMBEDDED EXPERIENCE

Connect the experience. Preserve the boundary.

API-led embedding can place an approved integration within a partner's own UI. It does not imply a white-labeled ZoikoTax application.

PARTNER-OWNED LAYER
Proposition · UI · workflows

Own experience, approved API use, explicitorganization context.

Approved interface ↔
Identity, capability and evidence remain governed.
ZOIKOTAX LAYER
Supported fiscal capabilities

Only the approved scope and environment.

API-led own UI
Build against approved API contracts. Partner-owned workflows do not expand the permittedcapability scope.
Hosted or deep-linked
Use a hosted surface or deep link only if itexists in an approved source. No hostedexperience is promised here.
Component / SDK / theme
An embedded component, SDK or themeoption is available only where explicitlyapproved. No full-customization claim.
Conceptual illustration, not a product availability promise

Text equivalent: the partner-owned experience connects through an approved interface to supported ZoikoTax capabilities. Organization, permission andevidence boundaries remain explicit on both sides.

06 / BRAND & COMMERCIAL AUTHORITY

Technical embedding is not a commercial permission.

Keep the integration pattern separate from the rights to market, brand, distribute or sell it.

TECHNICAL PATTERN
How an approved integration fits

Partner-owned UI, organization context, approved APIs, permittedcapabilities and evidence boundaries describe technical architecture.

Entitlement and activation are governed decisions. Neither one definesbranding or distribution rights.

Explore Integration Guides
COMMERCIAL / LEGAL / BRAND SOURCES
Which rights have been approved

ZoikoTax marks and attribution follow approved brand and contractsources. White-label rights are conditional, never implied; no "Poweredby" rule is established here.

Resale, distribution, pricing, revenue share and partner tiers requireseparate approval. Technical documentation does not offer terms.

Book a Demo
Qualification, not an offer of rights

Begin with technical diligence. Use Book a Demo for contextual commercial qualification; approved commercial, legal and brand owners determine theapplicable rights.

07 / USAGE & ATTRIBUTION

Attribute activity. Do not infer economics.

Usage can support operational accountability when its organization, capability and evidence context are preserved.

ILLUSTRATIVE TRAIL · NO ACTUAL USAGE VALUES
01 ➔
Approved activity
Only supported, permittedactivity.
02 ➔
Correct organization
The authorized businesscontext.
03 ➔
Capability
The exact approvedcapability scope.
04 ➔
Source-defined period
The governedmeasurement context.
05 •
Evidence / operations
A reference whereapproved.

Text equivalent: approved activity ➔ correct organization ➔ capability ➔ source-defined period ➔ evidence / operations. These categories are not a usage schema, report, billing cycleor dashboard.

Attribution is not charging or pricing

Usage does not establish allowances, revenue share, charges, invoice frequency or commercial economics. Authenticated reporting is separate from thispublic architecture page; no actual counts, periods or usage records are shown.

08 / GOVERNED LIFECYCLE

State changes need authority, not assumptions.

Illustrative state meanings — production taxonomy source-controlled

CONCEPTUAL TRANSITION BOUNDARY
Current source-defined state → Approved decision + evidence → Permitted next state

Every transition depends on the actual policy, contract and operating model. The states below are explanatory categories, not a fixed progression, eventcontract or live organization status.

Pending / setup
Context is being prepared;permission is not implied.
Validation
Readiness is under review againstapproved gates.
Active
Only the exact approved scope isactive.
Restricted
A limitation applies only asdefined by its source.
Suspended
The approved policy definessuspension semantics.
Migrating · optional
Only applicable where a governedmigration model exists.
Offboarded / deprovisioned
Lifecycle handling follows theapproved contract.
Historical · per policy
Review and availability are policy-defined, not indefinite.
Unknown / needs source is a safe boundary

If the governing state or procedure is missing, do not infer activation, restoration or offboarding behavior. Confirm the approved source. No trigger, noticeperiod, retention duration, restoration promise or right to service is established here; there are no live suspend or deprovision controls.

09 / SUPPORT & ESCALATION

Route the issue to its accountable owner.

Use the approved support model and authoritative sources. A developer route cannot grant commercial or production rights.

Partner integration
Partner technical team / governed support model.
Resolve the partner-owned integration; scope follows the approvedsupport contract.
Organization configuration
Approved partner / tenant administrator role.
Confirm the actual authorized role. No delegated access is inferred.
ZoikoTax issue
Approved status / support source.
Use the governed operational source; no status URL, response time orSLA is invented.
Security concern
Trust and the approved disclosure route.
Follow the approved security process. Do not submit secrets through anunapproved form.
Coverage question
Authoritative Coverage source.
Validate the exact capability, country / pack / network and readinesscontext.
Commercial entitlement
Approved commercial / legal owner.
Commercial rights and grants are not created by developer support.
Shared operations remain contract-defined

Partner, tenant and ZoikoTax responsibilities stay distinct. Confirm escalation ownership before activation; this public page supplies route-first guidance, nota new support contact, SLA or delegation model.

10 / EVIDENCE & ACCOUNTABILITY

Keep the decision trail with the organization.

Traceability supports accountability. It is not an unsupported assurance or certification claim.

Context → authority →decision → review

Connect provisioning, entitlement and activationto their governing sources. Preserve approvedconfiguration and usage references soconsequential actions can be reviewed in context.

Actor attribution is included only where thesupported model permits it. It does not establishdelegation, impersonation or cross-tenant access.

Evidence & Replay
ILLUSTRATIVE EVIDENCE ANATOMY · NOT ACTUAL RECORDS
Organization context
Provisioning decision and authorized business scope.
Entitlement source
Grant authority, change source and effective scope.
Activation readiness
Approved gates and exact Coverage references.
Actor attribution
Delegated action only where supported and privacy-safe.
Configuration version
Source-defined configuration and version context.
Usage reference
Operational attribution only where approved.
Historical review
Evidence access and review according to policy.
References, not fabricated records

Text equivalent: organization context, entitlement source / effective scope, activation readiness / Coverage, supported actor attribution, configurationversion, approved usage reference and historical review form a conceptual evidence trail. No actual identifiers, timestamps, audit records or certificates areshown.

11 / SECURITY & PRIVACY

Make the boundary explicit. Minimize what crosses it.

Confirm the exact security and privacy contract rather than inferring a universal isolation or permission implementation.

Keep credentials out
Never put credentials in URLs, screenshots oranalytics. Do not expose secrets throughdiagnostics or unapproved supportsubmissions.
Approved organization separation
Apply only the supported separation model.Partner context does not imply cross-tenantvisibility or access.
Least privilege
Follow the exact permission contract. Do notinvent RBAC, delegation, impersonation orunrestricted operator access.
Minimize data and logs
Limit data to approved purposes. No sensitivelogging; do not expose private organizationexistence through public states or messages.
Governed misuse handling
Use the approved abuse / misuse policy andsecurity disclosure route. Do not infersuspension triggers or remediation promises.
Trust is the source
Use approved Trust sources for assurances.Unknown security details remain source-controlled; no certification or uptime guaranteeis implied.
Privacy-safe public interactions

Use categorical page and route context only. Never expose partner, tenant or customer identifiers, entitlement details, secrets, usage values, commercialterms or raw free-text in public analytics.

Explore Trust
12 / SANDBOX & READINESS

Test the supported scope. Approve production separately.

A sandbox is a separately enabled environment, not a shortcut to production privilege.

TESTING BOUNDARY
Verify availability before designing the test.

Use Developer Overview and the API Reference for the exactauthentication and API model. Test provisioning only where the sandboxactually supports it.

Use synthetic organization-scope validation. Test-vs-productionentitlement stays separate; review exact Coverage, approved securityand onboarding requirements.

Use documented lifecycle events only if they exist in approved sources.Webhooks & Events is context, not a promise of provisioning events.

REVIEW CHECKLIST · NOT LIVE COMPLETION
Accountable implementation owner identified
Approved partner / commercial status confirmed
Actual organization identity model validated
Entitlement authority and scope confirmed
Test availability verified in the exact environment
Escalation and operational owner agreed
Independent production activation gates reviewed
No activation-time guarantee

Sandbox permissions do not grant production entitlement, and a successful test does not approve activation. Confirm every applicable source and ownerbefore progressing.

13 / IMPLEMENTATION JOURNEY

Move forward only when the next boundary is clear.

A docs-first journey with safe handling for missing sources, unknown entitlement and unavailable routes.

01
Discover the model
Read Integration Guides and the public architecture.
02
Confirm technical / commercial scope
Validate the integration separately from approved rights.
03
Map identity
Confirm partner, organization, environment and attribution.
04
Verify entitlement / Coverage
Use exact capability, grant and Coverage sources.
05
Test a separately enabled environment
Verify supported test availability without production assumptions.
06
Review operational / evidence / security ownership
Agree source-defined responsibilities and traceability.
07
Approve activation
Obtain independent production activation approval.
08
Operate / offboard
Follow the governed operational and lifecycle model.
CONCEPTUAL SPECIMENS · NOT LIVE CAPABILITY CONTROLS
DEFAULT
Documentation first

Use an approved public guide to understand the model.

Integration Guides
VISIBLE FOCUS
A clear next route

Focus is visible without relying on motion or hover.

Open API Reference
EXPANDED
Capability boundary −

Organization context, entitlement, Coverage,environment and activation approval are distinct.No grant is implied by this explanatorydisclosure.

Pending / setup
Setup does not imply capability permission.
Review the approved provisioning source.
Validation
Readiness is not yet established by a test alone.
Confirm the exact applicable gates.
Restricted
Do not infer which operations remain permitted.
Use the approved restriction policy and owner.
Suspended
Do not infer triggers, notice or restoration.
Follow the governed operational source.
Offboarded
Do not infer retention or historical access.
Review the approved lifecycle / data policy.
Missing source
The exact mechanism is unspecified.
Preserve the docs route; request the governing source.
Unavailable route
No unsupported destination is offered.
Keep known public documentation useful.
Unknown entitlement
Do not assume access or disclose private organization existence.
Confirm authority without revealing private scope.
No JavaScript / print
Core explanations and route labels remain readable.
Use visible documentation references and text equivalents.
Safe states do not reveal private organization status

These are conceptual public explanations, not actual tenant states or operating controls. Meaning is written in text rather than color alone; diagrams includetext equivalents and no essential information depends on hover or motion.

14 / FAQ

Direct answers. No implied rights.

Public architecture guidance; exact technical, operational and commercial mechanics remain governed.

It describes approved partner provisioning and embedded capability patterns within a wider platform or service. Organization boundaries, capability scope, attribution and evidence remain explicit; technical embedding does not grant commercial rights.

Confirm the approved partner identity and the actual organization model first. Exact creation, association and configuration mechanics follow platform and API source contracts. Provisioning does not itself create entitlement or approve production activation.

No. White-label, branding, attribution, resale and distribution permissions require approved commercial, legal and brand sources. Neither an API integration nor a partner context implies those rights.

Verify the partner-eligible capability source, commercial / product grant, exact Coverage, environment and security readiness, then obtain controlled production activation approval. Navigation and test permission do not establish production entitlement.

Use the supported organization context and source-defined capability, period and evidence references. Exact reporting mechanics remain governed and authenticated reporting is separate. Attribution does not establish charges, pricing, allowances or revenue share.

Follow the approved lifecycle, restriction and data-handling sources with the accountable operational owner. Do not infer triggers, notice, restoration, retention or a right to continued service from this public page.

BUILD WITH CLEAR AUTHORITY

Plan the integration. Preserve accountability.

Explore the technical guides, confirm the exact scope and bring commercial questions to approvedqualification. No signup or self-service grant is implied.

OEM / Embedded · /developers/integrations/oem-embedded/