The PDF arrives and no one can check it
Without a consultation channel, checking the version received and the current status of the document may depend on manual contact with the issuing organization.
Quantum9 Product
Documents that anyone can check in seconds
Atestiva transforms certificates, declarations, reports and attestations into verifiable documents. Each issue receives a stamp, QR Code, public link and SHA-256 hash. Blockchain anchoring has queryable status, from request to confirmation.
Free plan with 3 documents per month. No credit card.
- SHA-256 hash per document
- Anchoring with queryable status
- Public verification without registration
After issuing, facilitate the conference
The problem is rarely issuing. That's what happens later, when someone on the other side needs to trust that file.
The conference consumes your team
Each confirmation request becomes a phone call, email and folder search. The cost is invisible in the spreadsheet and high in the issuer's routine.
Canceled document continues to circulate
Without a consultable public state, those who receive a declaration may not know that the issuing organization has revoked it.
How it works
Three steps, from the sender to the giver
Step 1: Issue
Choose the model, fill in the holder's data and send the PDF. The system generates a unique public code and records the SHA-256 hash of the content.
Step 2: Deliver
The holder receives the document sealed on all pages, with a QR Code, public link and technical receipt at the end — without covering the original content.
Step 3: Check
Anyone checks authenticity, validity and revocation using the code, link or QR Code. No registration, no installing anything, in seconds.
Features
What is already working end to end
Everything below operates with persisted data, isolation by organization, and audit trail. It's not a product roadmap: it's what's on the air today.
Document Templates
Configure credential types with their own fields, icon and expiration date. New workspaces are born with models ready to adjust.
Guided emission
Step-by-step wizard for issuing without technical training: model, holder, purpose, attributes and validity on a single screen.
Sealed PDF
The technical seal is included in an additional margin on each page and the complete receipt is attached at the end, preserving the original layout of the document.
Code, link and QR Code
Each document receives a unique public code, a verification link and a ready-to-print QR Code.
Public checker
Open page that returns issuer, masked owner, purpose, validity and current status — exposing only the necessary public fields.
Revocation with reason
Cancel a document by recording the justification. The public result changes instantly, without relying on manual notification to those who received it.
Audit trail
Issuance, consultation, revocation and access changes are recorded in a persistent and exportable way, allowing you to reconstruct who did what.
Issuers and roles
Invite the team with owner, administrator, issuer and auditor profiles. Suspend someone's access without losing the history of what was issued.
Private vault per organization
The files are isolated by workspace, with reading restricted to members of the organization itself and storage quota per plan.
API and access keys
Issue, consult and revoke documents directly from your system. The key secret is displayed once and stored only as a hash.
Trust Ledger on blockchain
Critical events enter the anchoring queue in Bitcoin via OpenTimestamps. The query distinguishes between pending and confirmed tests, with a .ots file for download.
Privacy by default
The holder's personal identifier is never recorded in plain text: the system only persists the mask and the corresponding SHA-256 hash.
Trust Ledger
The proof does not depend on our word
Each document generates a SHA-256 hash of the canonical content. Critical events — issuance, file attachment, and revocation — enter the anchoring queue in Bitcoin using OpenTimestamps. Proof of priority depends on block confirmation. The file .ots available for download.
This means that the prior record can be checked by anyone, against a public network, even without access to our servers.
Test the public checkerAPI integration
Issuance from your own system, authenticated by a dedicated key.
POST /v1/credentials
Authorization: Bearer ft_live_...
Content-Type: application/json
{
"template": "UUID_DO_MODELO",
"holder": {
"name": "Nome do titular",
"identifier": "IDENTIFICADOR"
},
"purpose": "Comprovar vínculo"
}The response returns the public ID, hash, verification URL, and Trust Ledger status.
View API documentationFor those who issue documents that need to be accepted
Clinics and offices
Certificates, reports and declarations that companies and schools need to check without calling reception.
Offices and boards
Declarations of employment, certificates and proof of regularity with public status and immediate revocation.
Schools, courses and certifications
Certificates of completion that the student shares via link and the contractor checks in seconds.
HR and associations
Letters, declarations of employment and cards with a trail of issuance and control of who issued each document.
Plans
Start for free and grow by volume
Monthly values in reais. Annual plans are equivalent to ten monthly payments. You can validate the full flow on the free plan before deciding.
Free
To prove the first real flow
R$ 0
- Documents per month
- 3
- Users
- 1
- API Keys
- 0
- Storage
- 100 MB
- 3 verifiable documents per month
- 1 domain with public certificate
- 1 authenticated issuer
- Final PDF with seal, link and QR Code
- Public verification and local comparison
- 100MB private vault
Essential
For practices and small offices
R$79/month
- Documents per month
- 50
- Users
- 3
- API Keys
- 0
- Storage
- 2 GB
- 50 verifiable documents per month
- Up to 10 domains with public certificate
- Up to 3 issuers and auditors
- 2GB private vault
- Issuance, consultation and revocation trail
- Email support
Most chosen
Professional
For clinics and staffed operations
R$249/month
- Documents per month
- 300
- Users
- 10
- API Keys
- 3
- Storage
- 20 GB
- 300 verifiable documents per month
- Unlimited certified domains
- Up to 10 issuers and auditors
- 3 API keys and integrations
- 20GB private vault
- Assisted Organization Verification
- Priority service
Institutional
For networking, advice and high volume
Upon request
- Documents per month
- 2000
- Users
- 50
- API Keys
- 10
- Storage
- 100 GB
- Volume and retention defined in contract
- Unlimited certified domains
- Up to 50 users in initial configuration
- API, webhooks and multiple units
- 100 GB vault on initial setup
- Dedicated SLA, deployment and governance
What Atestiva proves — and what it doesn’t promise
Trust starts with being specific about the limit. These are the two sides of the scope, stated openly.
What the product proves
- Proves the correspondence between the presented document and the registered SHA-256 hash.
- Proves the current status of the document in the Atestiva database: valid, expired or revoked.
- Prova a anterioridade dos eventos já confirmados na blockchain pública do Bitcoin.
What is out of scope
- It does not replace ICP-Brasil digital signature when the act requires a qualified certificate.
- Does not perform key custody in HSM or KMS.
- Does not declare interoperability certified with W3C Verifiable Credentials.
FAQ
Does anyone who needs to check a document have to create an account?
No. Verification is public: just open the link, read the QR Code or enter the code into the verifier. The result shows issuer, purpose, validity and current status without any registration.
Does Atestiva replace the ICP-Brasil digital signature?
No, and this distinction is important. The product proves integrity, institutional authorship and document status. When the law requires a qualified digital certificate for the act, the ICP-Brasil signature continues to be necessary — Atestiva works alongside it, not in its place.
O que exatamente fica registrado na blockchain?
Apenas o hash dos eventos críticos, ancorado na blockchain pública do Bitcoin por meio do protocolo OpenTimestamps. Nenhum dado pessoal, nenhum conteúdo de documento e nenhum arquivo vai para a rede — só a impressão digital que comprova a anterioridade do registro.
Is the holder's data exposed?
No. The personal identifier is only used during the request to generate the mask and hash, and is never written in plain text. Public verification returns only the fields necessary to confirm the document.
Can it be integrated with the system we already use?
Yes. There is a versioned REST API to issue, query, revoke and download integrity proofs, authenticated by its own key. API keys are available starting with the Professional plan.
Do I need to change the document template I already use?
No. You send your PDF as it is. The stamp is included in an additional margin of each page and the technical receipt is attached to the end, without altering or covering the original content.
Issue the first verifiable document today
The free plan allows you to issue three documents per month, with seal, QR Code, public verification and monitoring of blockchain anchoring. No credit card.