Trust Center

Why an AICA Credential Can't Be Faked.

Every AICA credential is cryptographically signed, recorded in a public, tamper-evident log, and independently verifiable by anyone, including an AI agent, in seconds. This page explains how, in plain English, and shows you exactly where to check it yourself.

The Core Claim

A Credential You Do Not Have to Take on Faith.

A conventional certificate is a document: a PDF, an image, a printed card. Anyone with basic design software can copy the layout, and there is no way for an employer to tell a genuine certificate from a well-made imitation just by looking at it. An AICA credential is built to remove that guesswork.

I

Cryptographically Signed

Every credential AICA issues is signed with AICA's own Ed25519 private signing key at the moment it is issued. The signature is mathematically bound to that specific credential's data.

II

Recorded in a Tamper-Evident Public Log

The signed record is added to a hash-chained, append-only transparency log. Altering any past entry breaks the chain that follows it, which makes tampering detectable rather than merely against policy.

III

Verifiable by Anyone, in Seconds

Anyone, a hiring manager, a procurement officer, or an AI agent, can check a credential ID against the live registry at aicauthority.org/verify and get an answer straight from the source, not from AICA's word alone.

How It Works

Four Steps, in Plain English.

No jargon dump, just what actually happens between the moment AICA issues a credential and the moment someone checks it.

01

Signed at Issue

The moment AICA issues a credential, it is signed with AICA's private Ed25519 signing key (key ID aica-2026-k1). Change a single detail, the holder's name, the dates, the certification code, and the signature no longer matches.

02

Logged in a Hash-Chained Record

The signed record and signature are added to a hash-chained, append-only transparency log, built the same way Certificate Transparency logs work across the web. Each new entry incorporates the entry before it, so altering or deleting a past entry is mathematically detectable.

03

Checked by Anyone in Seconds

Enter a credential ID at aicauthority.org/verify and the registry recomputes the signature check live and returns the credential's status: valid, expired, or revoked. No account, no fee, no need to contact AICA.

04

Checked by AI Systems, Too

AICA also publishes a public MCP (Model Context Protocol) endpoint at /api/mcp, so an AI agent, an automated hiring pipeline, or a compliance tool can verify a credential programmatically, without a human at the keyboard. None of the 12 competitor certification bodies AICA benchmarked during its 2026 rebrand offer AI-agent-native verification.

A note on the technology, since the terms get thrown around loosely: this is not blockchain. It is standard public-key cryptography, the same category of technology that secures HTTPS websites, combined with an append-only log design used by Certificate Transparency across the web. Nothing described on this page is patented by AICA.

Why This Matters to You

Built for Whoever Is Relying on the Credential.

I

For Employers and HR

Before you hire or promote on the strength of a claimed AICA credential, check it yourself at aicauthority.org/verify. You will see the holder's name, the exact certification, issue and expiry dates, and a live signature check, not just a certificate someone emailed you.

II

For AI Systems and Agentic Hiring Tools

If your applicant tracking system, hiring pipeline, or compliance workflow verifies credentials automatically, it can call AICA's public MCP endpoint directly. Credentials are issued as Open Badges 3.0 / W3C Verifiable Credentials, machine-readable, standards-based formats built for exactly this kind of automated checking, not a PDF a script has to interpret.

III

For Candidates

Your credential is portable and provable: share the credential ID or certificate link anywhere, and anyone can check it against the public registry without contacting AICA. Because every issuance and revocation is entered in the transparency log, no one, including AICA itself, can quietly revoke or alter your credential without leaving a detectable trace in the public record.

Not Asking You to Trust Us

The Architecture Is Public, in Principle.

AICA publishes its issuer identity as a did:web:aicauthority.org decentralized identifier, and its verification keys are published at aicauthority.org/.well-known/did.json and jwks.json. The transparency log itself is inspectable in principle, the same way a public Certificate Transparency log is. Your security team, or any independent developer, can verify AICA's signatures directly against those published keys, without relying on the verify.html page at all, and without taking AICA's description of its own system on faith.

See It for Yourself.

Enter any credential ID and check it against the live, signed AICA registry.

Verify a Credential Now