Skip to content

Getting Started

Status: Planned

Start with one business decision that benefits from trustworthy, attributable evidence.

For example, a procurement system receives a supplier quotation. It needs to know which registered company the message represents, who signed it and whether that person was authorized to issue it.

Use an unambiguous legal-company identifier and jurisdiction where possible. A trading name, email address or logo alone cannot uniquely establish legal identity.

A company profile lookup, signed quotation, order acceptance and company-issued statement are different objects. A verifier should know which exact action or content digest is under evaluation.

A valid cryptographic signature is necessary evidence of attribution, but it is not automatically permission to act for a company.

Check the scope, validity period and changes affecting representative authorization. A delegated agent may prepare a quotation but not commit a company to a purchase.

Your integration should distinguish a verified action from insufficient authority, altered content, expired evidence and inconclusive source information.

A verification outcome should carry useful evidence and timing, not just a generic positive or negative label.

When storing a verification result, preserve the identifiers, evaluation time, relevant source timestamps and any proof references. This helps audit decisions after a company record or representative role has changed.

Continue with Verification Model, Permissions and Consent and the Verify a Business Sender example.