What this service is
Digital Trust Passport runs automated checks against public sources — domain registries, the Wayback Machine, certificate transparency logs, a live scan of the page itself — and publishes the results on a public verify page for any domain whose ownership has been verified. It does not audit, certify, or guarantee anything about a business beyond what a specific, named check actually measured.
What this service is not
This is a self-published, cryptographically logged transparency report, not a third-party certification or compliance audit. A clean scan result does not mean a site has been independently audited by a qualified third party, and it does not prove internal data-handling practices we have no visibility into. Every verify page states plainly what was and wasn't checked.
Registering a domain
You may only register a domain you actually own or control. You must complete the ownership-verification step (DNS TXT record or uploaded file) before any scan results become public. Registering a domain you don't control, or attempting to circumvent the verification step, is a violation of these terms and grounds for account suspension.
The operator's pledge
If you write an operator's pledge for your domain, it is hash-chained and timestamped the same way as automated evidence: any future edit creates a new, dated version, and the full history stays visible. We verify that the text hasn't been silently altered — we do not verify that its content is true. You are responsible for the accuracy of anything you write there.
No warranty
This service is provided free, as-is, with no warranty of accuracy, availability, or fitness for a particular purpose. Public sources we query (registries, archives, certificate logs) can be slow, wrong, or temporarily unavailable, and a scan result reflects what those sources returned at the time it ran — not a permanent guarantee.
Acceptable use
Don't use this service to scan domains you don't own without going through the ownership-verification step, don't attempt to circumvent rate limits or the verification mechanism, and don't use the API for anything beyond checking your own registered domains.
Changes
We may update these terms; the date at the top of this page reflects the last change. Continued use after a change means you accept the updated terms.