Trust & Transparency
The parties, registrations, and practices behind every certificate
In plain terms: this page lists the independent parties, registrations, and practices behind every Audiverify certificate — each with a way to check it — so you do not have to take our word for anything.
The independent evidence chain
Every certificate rests on four independent sources — not a single self-issued signature. These are the same signals shown on each public verification page.
Independent timestamp (Sectigo, RFC 3161)
Each record is timestamped by an independent third-party Time Stamping Authority using the RFC 3161 standard. Because the authority is external to us, the time a file was submitted cannot be backdated or adjusted after issuance.
SHA-256 cryptographic fingerprint
A SHA-256 hash of the original audio is recorded. The same file always produces the same hash, and any change — even a single bit — produces a completely different one. This makes substituting a different file for an existing fingerprint detectable.
ACRCloud similarity scan
Audio is scanned against ACRCloud, an independent content-recognition database, for similarity with known commercial recordings. A clean scan is not proof of originality: fingerprint scans do not reliably detect covers, remixes, or heavily edited audio, and other platforms may run their own, different checks against different databases.
Stripe Identity verification
The identity behind a certificate is checked through independent KYC identity verification (Stripe Identity) before a first certificate can be created. We do not store the identity document itself.
Memberships & registrations
Each of these can be checked at its source. Where a claim cannot be independently looked up, we say so plainly.
Content Authenticity Initiative — member
Motiva LTD (Audiverify) joined the Content Authenticity Initiative, an Adobe-led community of over 5,000 members working on content provenance standards.
contentauthenticity.orgCAI membership is open to any organisation that applies, and the public directory highlights selected members rather than listing all of them — so treat this as a statement of participation, not an audited credential. It is separate from the C2PA standards body. Weigh the items below, which have public registers, more heavily.
UK company — Motiva LTD, No. 15672311
Audiverify is operated by Motiva LTD, a company registered in England & Wales.
View on Companies HouseIndependently verifiable on the UK public companies register.
ICO registration — ZB861589
Motiva LTD is registered with the UK Information Commissioner’s Office as a data controller.
View on the ICO registerIndependently verifiable on the UK ICO public register.
UK GDPR — data export available
We process personal data under UK GDPR. You can export your own account and certificate data from your account settings at any time.
Read the Privacy PolicyExport is available in-product; lawful bases and retention are in the Privacy Policy.
Data handling & retention
These describe how the product already works today, not future intentions.
Encrypted storage & transit
Connections use TLS in transit and data is encrypted at rest. Row-level security ensures accounts can only reach records within their own workspace.
7-year record retention
The documentation needed to validate a certificate (fingerprint, timestamp, verification record) is retained for a minimum of 7 years, as stated on the certificates themselves. We retain the original audio file for 88 days after issuance to support re-verification, then permanently delete it. The certificate itself rests on the SHA-256 fingerprint, which never expires.
Private by default
Scan results, contributor splits, and registration numbers are not publicly disclosed on the verification page. The public record shows what is needed to check a certificate — not your internal details.
For the full vendor list see our subprocessors page, and for access, correction, and deletion rights see the Privacy Policy.
What we don't do
These limits are part of what documentation infrastructure is. Understanding them is part of using it correctly.
- We do not grant licenses or clear rights.
- We do not decide or verify who owns a work.
- We do not adjudicate ownership or resolve disputes between parties.
- We do not provide legal advice or act as a substitute for qualified legal counsel.
- Certificates document a file at a point in time; they do not, on their own, establish ownership.
Questions or security reports
For trust, transparency, or security questions — including responsible disclosure of a vulnerability — contact info@audiverify.com. Full technical detail is on our Security page.