THE BADGE
The badge
The badge is not a sticker. It is drawn by our server every time somebody looks at it, and it shows the state at that moment — not on the day it was issued.
It changes with nobody touching it
If the certificate expires, is suspended or revoked, the badge shows it at once — on the client site, with nobody going in to change it. Not even the browser is allowed to keep a copy.
It leads somewhere
Every badge is clickable and leads to its public report: who was audited, when, at which commit, with what result. A badge you cannot click proves nothing.
Copying it is useless
Download the image, host it yourself, and you have frozen one moment. That is a fake badge, we treat it as one, and it shows: the code on it is not in the registry.
Three forms, one identity
-
The plate
- The normal form. It carries the code and the expiry date, so it reads without being clicked. For footers, About pages, checkout.
-
The seal
- When there is no width for text. It keeps the level. For sidebars and logo grids.
-
The mark
- Below 48 pixels. The symbol alone. For trust rows next to payment methods.
What is allowed
- YES On the site that was audited, on your own print and proposals, in an email signature, for as long as the certificate holds.
- YES At any size you like, as long as the proportions hold and it stays clickable.
- NO On a different application or site than the one named on the certificate. The audit covers a specific commit, not the company.
- NO Altered — recoloured, cropped, stripped of the code, or served as an image that does not load from us.
- NO Alongside wording that implies state or accredited certification. The scheme is private and says so.
Seen a badge somewhere? Check it
Click it. It must bring you to a page on this site, with a code in the form CA-YEAR-NUMBER. If it does not click, if it takes you elsewhere, or if the code is not in the registry, the badge is not ours.
What it does NOT certify
The badge certifies that a specific audit took place, on specific code, on a specific day, with a stated result. It does not certify that the application is free of defects, nor that it meets every obligation resting on its owner. It is not a state or accredited certification.