Security
- Every seal is signed with ES256
- One published key signs them all
- Change one character and it fails
Trust center
Trust you can check.
Every seal is signed with one public key. Check it yourself — free, offline, without asking us.
- $0 to check
- Works offline
- No account needed
What we stand on
Security. Privacy. Honesty.
Privacy
- Your selfie never reaches us
- Your ID image never reaches us
- We don’t sell personal data
Honesty
Every product carries a status label. If it isn’t live, the page says so.
LiveEarly accessTestnetComing soon
Your data
What we keep — and what we never keep
Your ID and liveness check runs with our verification partners. We only receive a signed result.
AI-generated image
Selfie checked by our partnerNever stored by 5arz
What we keep
- A signed result that you passed
- Your account email
- The tasks you complete
What we never keep
- Your selfie
- Your ID image
- Your biometrics
Our verification partnersStripe IdentityDidit
Under the hood
How a seal is checked
Four steps, all on your own machine. Nothing is sent to us.
- Step 1
Read the seal
Split it into header, claims and signature.
header.payload.sig - Step 2
Find the key
Match its key ID to our public key.
kid 5arz-oracle-2 - Step 3
Check the signature
Run the ES256 math on your machine.
ES256 · P-256 - Step 4
Result
Valid or not. No network call to us.
valid ✓
Our public key
One key signs every 5arz seal.
It’s published for anyone to fetch. Any JWT library can check a seal with it.
2 patents pending · US provisional
{
"keys": [{
"kid": "5arz-oracle-2",
"alg": "ES256",
"kty": "EC",
"crv": "P-256",
…
}]
}
Report a security issue
Found a weakness? Tell us privately at security@5arz.com. We won’t take legal action over good-faith research.
Scope and policy: security.txt
Don’t trust us. Check.
Checking a seal is free and unlimited.