Method
How we check

The labels
- Verified
- Checked at the source, by a machine or by our staff. The line under it says where and when.
- Signed
- No register can check it, so a person at the company signs for it, with name and role.
- Claimed
- Stated or found, but not checkable. A SOC 2 report stays here: those reports are not public.
- Does not hold
- Checked at the source, and it does not hold. With the reason, for example “no SPF record found on 9 Oct 2026”.
- Expired
- It was checked, but its validity date has passed. The date is shown.
- Pending
- Waiting for a check, for example a certificate our staff still have to look up.
- Could not reach
- The check could not run: a source was down or did not answer. Never shown as clean.
- Possible match
- A possible match on a sanctions list. A member of staff reviews it; until then it is never a confirmed match.
- Not performed
- Nobody ran this check, for example because a registration number was missing. That is different from “unavailable”.
One check, three outcomes
Insolvency register
VerifiedNo proceedingsChecked at Centraal Insolventieregister via Cloudpliant · 9 Oct 2026
Insolvency register
Could not reachThe source did not answerNo answer in time.
Could not be checked at Centraal Insolventieregister via Cloudpliant on 9 Oct 2026 (the source did not answer)
Insolvency register
Not performed—Not run: no KvK number was known.
Example with a fictional company
The seal
Not on about.biz yet: there is no claimed passport.
In progress: some of the required checks are complete.
Sealed: every required check is verified or signed, and nothing failed, expired or was unavailable.
Attention: a required check failed or expired. That is never hidden.
Re-check due: the checks are older than their window.
Example with a fictional company
The seven parts of the default seal
- 01Owns its website: proven with a code in the domain settings, a file on the website or an e-mail to the domain administrator
- 02Legal entity active, in the company register
- 03No running insolvency
- 04No match on a sanctions list
- 05Website and e-mail security checked
- 06Security contact confirmed
- 07Questionnaire signed, no older than twelve months
A stated fact, such as a SOC 2 report, is on the passport but never fills a segment: it cannot be checked.
Our rules
Not checked is never ‘fine’
If a source could not be reached or returned an error, the passport says “Not reachable”, with the date. Never an empty or positive result.Every fact with its source and date
For every fact you see where and when it was checked. A new check is added; the previous one stays in the history.Fixed rules and people decide, not AI
An outcome comes from fixed, verifiable rules or from a named staff member. Never from an AI model.Paying never changes an outcome
Every kind of check is available free. Paying buys convenience, never a different label.The supplier decides who sees what
Nothing about a company that does not take part is public: the first check is seen only by the buyer who requested it. A supplier who claims its passport chooses which buyers it shares with.Certificates in the register, not on a logo
We check a certificate in the certification body's register: standard, number, scope and validity. A logo on a website proves nothing.
Which source for which fact
| Fact | Source, as in the source line |
|---|---|
| Domain | the domain's DNS |
| Website and e-mail security | DNS, HTTPS and the website's TLS handshake |
| security.txt | the file /.well-known/security.txt on the website |
| Legal Entity Identifier (LEI) | GLEIF, the public global LEI register; only for companies that have an LEI |
| Registration (NL) | KvK Handelsregister via Cloudpliant |
| Insolvency (NL) | Centraal Insolventieregister via Cloudpliant |
| Sanctions | sanctions lists via Cloudpliant |
| Certificate | the certification body's register, by a member of staff |
| Questionnaire | signed by a person with a verified work e-mail |