Trust

How verification works

The plain-language version. Every credential is free to verify in seconds.

What a credential contains

A credential records what was built, the scores per challenge, the criteria and assessment version used, and the conditions of the assessment. It contains no email and no personal data. The holder proves ownership by sharing the link.

How it's protected

Signed

The credential is signed with EKO's private key when issued.

Fingerprinted

Its contents produce a unique fingerprint (a SHA-256 hash). Change one character and the fingerprint changes.

Anchored

The fingerprint is anchored in a public registry. Verification recomputes the fingerprint and checks the anchor. If anything was altered, verification fails.

How grading is disclosed

Every credential prints its grading mode - structural checks, held-out AI-run tests, or code execution - and its rubric is published on the track page. We always disclose what graded the work.

API

Verification is available as JSON for recruiters and platforms: GET /api/v1/verify/{credential-id}. Free, no key required. Employers can generate keys from their report page for tracking.

Privacy

Public pages show the credential only. Personal data stays in the product and never appears in the proof. Details are in the privacy policy.