Institutions act on claims they cannot check. Certisyn continuously tests the posture of organisations, AI agents and metered systems against independent evidence, and seals every verdict under a published key. Anyone can re-check it, on ordinary hardware.
Built for defence and sovereign programmes, critical infrastructure and utilities, security and AI governance teams, regulators and insurers, and audit and assurance firms.
An audit describes the day it was run. Certisyn re-tests posture on a schedule, seals each result under a published key, and keeps a sealed history that a regulator, an insurer or a counterparty can replay. One engine covers four kinds of subject.
Security posture, control conformance and certification readiness, re-tested on a schedule and sealed.
The scope, limits and principal behind an agent are checked before anyone accepts what it does.
Lumen seals interval meter data from Green Button exports, meter files and facility systems: energy, carbon, water, recovered heat and compute. Data centres lead, and the sealed ingest takes any operator's interval files.
A collector in the plant DMZ signs windows of historian data. Each reading is reconciled against independent instruments, and drift, silence and lapsed calibration become sealed findings.
Every institutional decision rests on something somebody said was true. Certisyn turns that statement into a record the next party can check for itself.
A supplier is certified. A vendor is secure. A counterparty is who it says it is. Any statement an institution relies on is a claim.
Independent evidence runs through a fixed sequence of stages and every stage emits a hash. Contradictions surface and confidence is computed.
The result is a record signed with Ed25519 under a published key. Anyone re-checks the seal, with no account and no call to us.
Certisyn runs as software on the meters, sensors and stacks an operator already has. No trusted chip, enclave or proprietary box sits in the chain, so there is nothing new to buy, install or certify before the first verdict.
A collector script in the plant DMZ reads the historian export you already produce and posts outbound. No appliance to buy and no inbound firewall rule.
Signing keys and the registry are public. A verdict or evidence pack is re-checked with a public key, at a public verifier or offline, with no account.
A claimed reading is checked against witness meters and a physical balance. A reading that fails is sealed as a finding, and an instrument past calibration cannot support a claim.
A reading is a claim. Certisyn checks each claimed reading against independent instruments and a physical balance, tracks calibration currency, and seals every drifted window as a finding. The plant keeps its raw telemetry.
Delivered flow against an independent check meter and the receipt, fuel and line-pack balance.
Outlet flow against an independent ultrasonic meter and the inlet, storage and leakage balance.
The SCADA site import against the utility revenue meter and the sum of the feeder meters.
Hold-tube flow against a clamp-on ultrasonic meter and the centrifuge mass balance.
A collector that goes quiet raises a finding of its own. Evidence packs map to the measurement-traceability clauses of ISO 9001, ISO/IEC 17025 and ISO 10012, and verify at a public verifier or offline.
Any agent can call Certisyn directly over MCP. Verify the mandate behind a counterparty agent before it acts, resolve a determination, check an anchored record, or confirm a verified subject. Tools that need no credential are free and need no account.
{
"mcpServers": {
"certisyn": {
"url": "https://app.certisyn.com/api/mcp"
}
}
}Supply-chain claims, operational technology and metered telemetry are tested against independent evidence and sealed, so the verdict travels with the claim.
Bastion tests an organisation's exposed surface and seals what it finds. An AI agent carries a verification that anyone can check.
A second party reaches the same result from the same evidence. A sealed history of posture gives a supervisor or an underwriter something to rely on and to replay.
Assurance firms, certification bodies and managed providers deliver verification under their own brand, on the same engine and the same seal.
Everything below can be checked by a third party today, from the public record. A company whose product is verification should be the easiest company you check all week.
The Ed25519 public keys and transparency log every Certisyn seal resolves against. The product itself, visible, with no account.
Resolves the code printed on the face of any Certisyn certificate. Runs at the network edge, holds no state, and answers whether or not the platform is up.
Six Internet-Drafts submitted to the IETF. The Attestation Reconciliation Protocol is at revision 04.
Listed under Registries and Identity in the HOL partner programme, which is invite only, under the Hiero Project within Linux Foundation Decentralized Trust.
CERTISYN, filed 23 March 2026. Searchable on the USPTO Trademark Status & Document Retrieval system.
Certificates 260626050102 and 260626010101, issued by ARS Assessment Private Limited (CB-MS-3923). Initial registration 26 June 2026, expiry 25 June 2029.
Certisyn applies the same discipline to itself and publishes its open findings. Read the trust posture.
A single verification core, surfaced through seven entry points. Each runs the same engine and issues the same sealed Verification Attestation Object, tuned to the regime, buyer and evidence its institution lives in.
The engine. Reconciles claims against evidence and issues a sealed, policy-versioned attestation a counterparty can re-check.
Tests an organisation's exposed surface and seals what it finds, with a remediation directive for each finding.
Forensic authentication of documents and detection of synthetic media, read in the context of the claim each artefact supports.
Supervisory determinations and sealed audit trails for regulators and regulated entities, on sovereign-cloud deployment.
Sovereign-grade verified diligence for defence and intelligence programmes.
Litigation-grade verification and self-authenticating exhibits bound to the evidentiary seal.
Sealed verification of metered quantities: electricity, water, heat and compute. Data centres first, and any operator whose claims rest on meter data. The Verified Clean Compute-Hour is its first unit.
Name a claim you rely on. The record opens with your first verification, ready to re-run.
Bastion grades what is visible from outside and sets out each finding.
Public verifications across markets. Run one yourself and read the seal.
Self-serve onboarding with production access on day one.
Tell us the claim you rely on and who relies on it. A Certisyn verifier replies by email with how it would be tested.
Institutions rely on claims every day, and the reliance usually rests on a document nobody re-checks. I invented the verification technology underneath Certisyn so that any claim can be re-checked by the people who depend on it. Name one claim you rely on and we will verify it.
Follow on LinkedInCertisyn is a US verification-infrastructure company. It tests the claims institutions rely on against independent evidence and issues a cryptographically sealed, policy-versioned Verification Attestation Object (VAO) that any counterparty can re-check.
A VRO, the Verification Reconciliation Object, is the deterministic reconciliation Certisyn runs over a claim and its evidence. Its output is a VAO, the Verification Attestation Object: a sealed, policy-versioned record a counterparty relies on, and one that travels with the claim. A VAO replays under the exact policy in force at issuance.
An audit report confirms that a process was completed. Certisyn tests the claim itself against independent evidence, deterministically, and produces a bounded, auditable, sealed output that is reproducible and portable across institutions.
No. Certisyn runs as software alongside the meters, sensors and historians an operator already has. A seal is checked with a published key and a hash, and independent signals must reconcile, so no trusted chip or proprietary box sits in the chain.
Yes. Certisyn is available to agents as an MCP server at app.certisyn.com/api/mcp. Tools that need no credential are free: verify the mandate behind an agent, resolve a determination, check an anchored record or confirm a verified subject.
Certisyn checks the instruments behind a plant's claims. A signed collector sends windows of historian data outbound, each reading is reconciled against independent instruments, and drift, silence and lapsed calibration are sealed as findings. Packs cover gas custody transfer, water network balance, site energy against feeder metering and aseptic food processing.
Yes. Verification surfaces run in production through seven institutional front doors. The signing keys, the certificate registry and the IETF Internet-Drafts are public, so anyone can check them.
Certisyn was founded by Dr Joel Hillier, Founder and CEO, who invented the underlying verification technology. The company is headquartered in Salt Lake City, Utah.