Drop it below. Everything happens inside your browser — the file is never uploaded, and this page talks to no server, including ours.
What a pass actually means. The file is byte-for-byte identical to the one that was signed or timestamped at the moment shown, and that signature checks out. Change a single byte and it fails.
What it does not mean. A timestamp records when, never who. A signature proves which certificate was used, which is a fact about a key rather than a verified fact about a person. Neither can tell you the document is honest, that the sender is who they say, or that the payment details on it are right. Confirm those the way you always would.
Unrecognised authority is not a failure. This page pins a deliberately short list of roots so the list stays checkable by a human. Most documents from elsewhere will say the authority is unrecognised; that means confirm it yourself, not that anything is wrong.
Who made this. Built and operated by SPRK10 B.V., the company behind SignedBy. That is stated plainly rather than left to be discovered: this page is useful because you do not have to trust us. It runs entirely in your browser, makes no network requests, and the whole verifier is right here in the page — read it with ⌘U.
Where this runs. Served from Germany, with access logging switched off. That matters less than it sounds: your document is never uploaded, so there is nothing at either end to record.
No analytics, no cookies, no network requests. Save this page with ⌘S and it keeps working with no internet and no us.
github.com/signedbyai/truedoc
· Apache-2.0 · build 52bf2affe2de
Confirm the page you are running is the code you can read:
curl -s https://truedoc.eu | shasum -a 256
and that the build above is the source in the repo:
cat verify-core.mjs shell.html | shasum -a 256 | cut -c1-12
Operated by SPRK10 B.V., registered in the Netherlands.