Don't believe our research. Verify the mechanism yourself.
Five minutes. One verification challenge. Zero trust required.
This is not a demonstration performed for you. You provide the input, you generate the attestation, and you verify it — start to finish, in your own browser.
This tool checks nothing against a real registry. The identifier below can represent anything you like. It exists to prove one thing only: that whatever you enter can be pseudonymized and cryptographically signed in a way that is independently, verifiably tamper-evident.
Step 1
Enter a supplier identifier to attest
Step 2
Identifier pseudonymized, attestation signed
You entered:
This browser transformed it into (HMAC-SHA256):
Indicator (derived only from what you checked above — not a real risk assessment):
Signed at:
Step 3
Verification result
✓ Signature valid — this attestation has not been altered since it was signed.
One value in your attestation was altered after signing, without re-signing it — the way a forged attestation would look.
Signature invalid ✗
Result
What you just did happened entirely in your browser.
The identifier you typed never left your device — only its pseudonym did. Any later change to a signed attestation is detectable, exactly as you just saw.