Verify a signed attestation — no account, keyless, in-browser.

Paste any signed attestation JSON. We check the Ed25519 signature against the public key embedded in the document and show the contents in plain English. A tampered payload — or a deepfake claiming to be you — fails verification.

Verify an attestation now

Paste the full JSON of a signed attestation below — it must carry message (or canonical), signature and publicKey. Or load the live demo attestation we sign fresh on every page load.

Live demo — signed fresh on this page load

This attestation was signed by the public signing API (os.meok.ai/api/sign, Ed25519) the moment you opened this page. Click the button to verify it end-to-end against the public verify endpoint — keyless, no account.

Signing a fresh demo attestation…

How signing works

Payload signed. The signing API canonicalises the payload and signs it with a server-held Ed25519 private key. The attestation carries the canonical message, the signature, and the public key.
Public key travels with the document. Ed25519 is asymmetric — the public key embedded in the attestation is all anyone needs to check it. No account, no shared secret.
Anyone verifies. Paste the attestation here, or POST {message, signature, publicKey} to os.meok.ai/api/verify yourself. The check is reproducible offline.
Tampering breaks the signature. Any single-character change in the payload causes signature mismatch. A deepfake or impersonation cannot produce a valid signature, so it fails verification.
Measured, not certified. A valid signature attests that this exact payload was signed by the key holder at a point in time — passes and failures alike. It is evidence, not a conformity assessment.

FAQ

Do I need an account to verify?

No. Verification is public and keyless — the public key inside the attestation is sufficient.

What if the signing service disappears?

Ed25519 verification needs no infrastructure from us: the message, signature and public key are all in the document, and any standard Ed25519 library can reproduce the check offline.

Is this a Notified-Body audit?

No. Signed attestations are measured self-assessment evidence. They speed up the prep work your legal team and notified body still sign off on.

How do I get my own signed attestations?

Subscribe to Pro (£199/mo) at councilof.ai or book a £5k 48-hour gap analysis.

Give your auditors evidence they can check themselves.

Pro tier includes signed attestations across EU AI Act, DORA, NIS2, CRA, CSRD, UK AI, GDPR, HIPAA, SOC 2, ISO 42001 and more.

Start Pro — £199/mo Browse all offerings