Public verification

Verify a signature
without trusting us

Every check on this page is recomputed locally, in your browser, from public data: the signer's key, AIO's certificate and the transparency log. Nothing here rests on a server telling you it is valid.

Verify it offline
or

What gets checked

Four layers, each provable on its own

01

The document

The bytes in your hands are the bytes that were signed.

02

The signature

Made with a private key AIO has never held. Signatures carry a classical and a post-quantum half, and both must hold.

03

The authority

A certificate signed by AIO binds that key to a person and to the permissions they held at the moment of signing.

04

The public record

Certificates are logged in an append-only Merkle tree, and its roots are timestamped outside AIO (by independent authorities), so the history cannot be rewritten, not even by us.