Atesta – Reseñas verificadas

English

Atesta helps WordPress and WooCommerce sites collect real customer opinions through individual, expiring, single-use invitations. It clearly distinguishes verified and unverified reviews, records the verification method, and publishes an editable “How we verify reviews” policy.

Designed for Spanish SMEs that publish customer reviews. Its records and editable templates help document how reviews are collected and moderated, which is relevant to Law 10/2025 and the Omnibus framework. Atesta is a technical tool: it is not legal advice and does not ensure or guarantee legal compliance. Review its configuration and generated texts with your legal adviser.

Included features:

• WooCommerce invitations after a configurable order status, compatible with HPOS.
• Manual, CSV and individual QR invitations for restaurants and services.
• HMAC-signed, expiring and single-use links.
• Append-only evidence ledger with chained hashes and integrity verification.
• PDF evidence dossier by review or date range.
• Rating-neutral moderation with closed rejection reasons and public replies.
• Versioned, editable verification-policy template with a visible legal-review warning.
• Gutenberg blocks and matching shortcodes for classic themes and Elementor.
• Product Review and AggregateRating schema; no LocalBusiness schema by default.
• WordPress privacy exporter/eraser integration, anonymization and suppression list.
• Multisite, Action Scheduler and accessibility-oriented public widgets.
• Automatic reminders and scheduling rules by product, category, service or order type.
• Moderated review photos with privacy erasure support.
• Separate Google review synchronization with a mandatory provenance notice.
• Factual Google/TripAdvisor removal cases, customer matching and PDF dossiers.
• Independent verification policies per language for WPML and Polylang sites.
• Monthly activity reports and advanced WooCommerce filters.

Español

Atesta ayuda a negocios con WordPress y WooCommerce a recoger opiniones reales mediante invitaciones individuales, caducables y de un solo uso. Distingue claramente las reseñas verificadas de las no verificadas, registra el método usado y publica una política editable de «Cómo verificamos las opiniones».

Está orientado a pymes españolas que publican reseñas de clientes. Sus registros y plantillas editables ayudan a documentar cómo se recogen y moderan las reseñas, algo relevante para la Ley 10/2025 y la Directiva Ómnibus. Atesta es una herramienta técnica: no presta asesoramiento jurídico ni asegura o garantiza el cumplimiento legal. Revisa su configuración y los textos generados con tu asesor legal.

Funciones incluidas:

• Invitaciones WooCommerce tras un estado configurable, compatibles con HPOS.
• Invitaciones manuales, CSV y QR individual para servicios y restaurantes.
• Enlaces HMAC caducables, vinculados y de un solo uso.
• Registro append-only con hashes encadenados y verificador de integridad.
• Dossier PDF de pruebas por reseña o rango de fechas.
• Moderación neutral respecto a la puntuación, motivos cerrados y respuestas públicas.
• Plantilla editable y versionada de política de verificación, con aviso para revisión legal.
• Bloques Gutenberg y shortcodes equivalentes.
• Schema.org solo para Product; LocalBusiness desactivado.
• Integración RGPD con exportador, borrador, anonimización y lista de supresión.
• Multisite, Action Scheduler y widgets accesibles.
• Recordatorios automáticos y reglas por producto, categoría, servicio o tipo de pedido.
• Fotografías moderadas en las reseñas, integradas con el borrado de privacidad.
• Sincronización separada de reseñas de Google con aviso obligatorio de procedencia.
• Casos documentados de Google/TripAdvisor, coincidencia con clientes y dossier PDF.
• Políticas independientes por idioma para sitios con WPML o Polylang.
• Informes mensuales operativos y filtros avanzados de WooCommerce.

Shortcodes: [atesta_formulario], [atesta_resenas], [atesta_resumen], [atesta_insignia], [atesta_politica], [atesta_google_reviews].

External services

Atesta connects to one external service, and only if you configure it. It contains no tracking, advertising or usage reporting.

Google Places API. Used to display your Google reviews separately from verified reviews. It is off by default and requires your own Google API key. A request is sent only when an administrator presses the synchronize button. Each request sends your Place ID, your API key and the site language to places.googleapis.com, and receives the place’s name, link and reviews, which are stored in your site’s database. See the Google Maps Platform Terms of Service and the Google Privacy Policy. You are responsible for your use of the API under those terms.

Invitations and reports are sent through your site’s own WordPress mail configuration.

Source code and third-party components

Atesta’s own code is licensed under GPLv2 or later. The bundled components below keep their own licenses, all compatible with the GPL. Because some are licensed under version 3 of the GPL or LGPL, the distributed package as a whole can be used under GPLv3.

• Action Scheduler 4.2.0: GPL-3.0-or-later.
• Dompdf 3.1.6: LGPL-2.1.
• php-font-lib 1.0.2: LGPL-2.1-or-later.
• php-svg-lib 1.0.2: LGPL-3.0-or-later.
• BaconQrCode 3.1.1 and DASPRiD Enum 1.0.7: BSD-2-Clause.
• masterminds/html5 2.12.0, PHP CSS Parser 9.5.0: MIT.
• DejaVu fonts and Adobe core font metrics, as distributed with Dompdf: under their own free licenses.

The libraries in vendor-prefixed/ are modified only to prefix their namespaces with AtestaVendor using Strauss, to avoid conflicts with other plugins. php-font-lib also has one class lookup adjusted so that it works with the prefix.

All PHP, CSS and JavaScript is included in readable form. The only compiled file is assets/build/blocks.js, whose source is assets/src/blocks.js. To rebuild it, run npm install and npm run build.