Important: A badge graphic proves nothing. Only a linked signed certificate with live status is the trust object. Badges are scoped to a named workflow — never “the whole company is secure.”
Two trust objects
- Evidence-package seal — per sealed package (hash, signatures, completeness, gaps).
- Company workflow certificate — exact assessed workflow only, with expiration and revocation.
Levels
See full definitions on trust levels.
- QEV Compatible
- QEV Verified Workflow (not yet public-issuable at scale)
- QEV Protected Workflow (not yet issuable)
- QEV Independently Assessed (not yet issuable)
Today’s public product is a controlled-use preview. Only Compatible and internal Pilot Configuration Passed are realistic.
Verify a certificate
Public records: /trust/certificates/<id>/. Pilot gateway: /v1/certificates/<id> on customer instances. Overview: certificates.
Audit status · Security · Field service