Features
The full surface area of a modern affiliate platform.
60+ shipped routes, 4 payout rails, 6 cron orchestrators, 12+ outbound webhook event types. Everything you need to run a real affiliate program — not a demo.
Tracking & attribution
Every click, every conversion, attributed correctly.
First-party tracker (t.js)
~1.6 KB gzipped. Captures ?ref/?aff/?cobz, writes 90-day cookie + session id, mirrors to localStorage, honours DNT + Consent Mode v2.
Learn more →
Coupon-based attribution
Customers who never clicked your link still attribute to the affiliate when they apply that affiliate's coupon at checkout.
Learn more →
Configurable attribution model
first-click, last-click, last-non-direct (default), or linear. Multi-touch attribution down the road.
Cross-domain join
Sessions stamp the cookie id into WC/Shopify order metadata so server-side joins survive the browser.
Conversion events API
POST /api/v1/events for non-order conversions: leads, signups, free trials, app installs.
Learn more →
IP + UA fingerprinting
IPQS + Fingerprint Pro server SDK. Bot scoring keeps fraudulent clicks out of attribution.
Learn more →
Commissions
The most predictable commission engine in the category.
Cascade rule engine
affiliate > product > category > tier > global. Time-bounded windows, explicit priority, persisted winning rule on every commission row.
Learn more →
Per-product / per-category rates
Set 25% on flagship products, 10% on everything else. Refunds 90 days later still resolve to the right rate.
Learn more →
Tiers + auto-promotion
Bronze / Silver / Gold thresholds in revenue, orders, clicks, or lifetime commissions paid. Daily TZ-aware evaluator.
Learn more →
2-tier MLM overrides
Recruit recruiters. Configurable override rate (0–100%), gated by plan, off by default.
Learn more →
Recurring subscriptions
WooCommerce Subscriptions + Stripe Subscriptions. first-order-only / all-renewals / first-N strategies.
Learn more →
Refund clawback
Pending → void; approved → negative-amount sibling; paid → manual review. Audit-log every state.
Learn more →
Hold periods
Default 30-day hold before approval; commissions can't be paid out from refundable orders.
Bonus rules
Award fixed amounts on first-sale, revenue thresholds, order thresholds, or click streaks.
Manual overrides
Owner/admin can mark commissions paid, void with reason, or apply custom rates per affiliate.
Payouts
Four rails, one workflow.
Mercury invoicing (US wedge)
Native Mercury Invoicing API integration. Per-merchant API key in Vault. Invoices auto-issued on schedule, status reconciled via webhook + 15-min polling.
Learn more →
PayPal Mass Payments
OAuth + sandbox/live env. Email-based payouts. Idempotency keys prevent double-sends.
Learn more →
Stripe Connect
Stripe Transfers API. ACH + cards. 135 currencies. Per-affiliate Connect account ID.
Learn more →
Wise (TransferWise)
Quote → transfer → fund flow on the Wise Business API. Low FX fees for EU/UK/AU/SG affiliates.
Learn more →
Per-merchant timezone scheduling
Daily, weekly Friday, biweekly, monthly 1st/15th, or on-demand. Hourly cron checks every merchant locally.
Learn more →
Real refund clawback in payouts
Already-paid commissions auto-net against the next payout instead of voiding history.
Tax + compliance
1099-NEC ready out of the box.
W-9 / W-8BEN collection
Affiliates upload PDFs from /a/[slug]/tax. Stored in Supabase Storage with RLS-enforced per-affiliate folders.
Learn more →
TIN encryption (Vault)
Tax IDs live in Supabase Vault, never in the app DB. Read only at 1099 export time.
Learn more →
1099-NEC eligibility CSV
Track1099-compatible export. Threshold table seeded with OBBBA $2,000 from tax year 2026.
Learn more →
GDPR data export + delete
In-product UI for filing data subject requests. Deletes hash chains + Vault secrets safely.
Audit log everything
Append-only audit_log writes for every state transition. SOC 2 evidence ready.
Learn more →
Per-merchant Vault
Mercury keys, plugin secrets, TINs, outbound webhook secrets — every third-party credential is per-merchant.
Learn more →
Developer surface
Standard Webhooks v1. OpenAPI 3.1. Real REST.
REST API v1
Bearer cob_* keys with scopes. Cursor pagination. Affiliates, commissions, events. 600 req/min default rate limit.
Learn more →
OpenAPI 3.1 spec
Hosted at /api/v1/openapi. Generate clients with openapi-generator-cli. Always in sync.
Learn more →
Outbound webhooks
12+ event types signed with Standard Webhooks v1. Retry with backoff (3-day window, 10 attempts), dead-letter on max attempts.
Learn more →
Replay UI
Per-delivery replay button + bulk replay between two timestamps. Last-100 delivery log per endpoint.
Learn more →
Slack notifications
Incoming webhook URL per merchant. Affiliate approvals, payouts, fraud alerts land in your team channel.
Per-key rate limiting
Configurable per-API-key requests/minute. Backed by Upstash Redis (or in-memory fallback).
Learn more →
White-label + UX
Make the affiliate portal look like yours.
Custom domain
affiliates.yourstore.com via CNAME. SSL provisioned automatically.
Learn more →
Logo + colors + footer
Per-merchant branding applied to portal layout, signup page, and emails.
Learn more →
Hide "Powered by Cobalz"
Available on Scale plans and up.
Learn more →
Creatives library
Upload banners, email swipes, social posts, HTML widgets. Tier-gated. Affiliates copy embed snippet with their tracking link baked in.
Leaderboards + badges
30-day revenue leaderboard. first_sale, ten_sales, hundred_sales, top_10_monthly, streak_7d, streak_30d.
Bulk email broadcasts
Markdown body, audience filter (all_active / tier / group / top_performers), unsubscribe-aware.
Try every feature for 14 days, free.
Connect WooCommerce or Shopify, recruit your first affiliate, run your first payout. No credit card.