CertSafe for verifiers
Verify a worker's credentials in seconds. No app, no account, no signal required.
If you're a site supervisor, foreman, or gate keeper, CertSafe is built for you. Scan a worker's QR or type their 8-character cert code on your own phone. Instantly see Valid / Expired / Revoked status with the issuer name. Done.
CertSafe is free for verifiers. No login. No install. Nothing to learn.
Four steps. Ten seconds. No CertSafe account.
Worker shows you their CertSafe QR
It's a QR code on the worker's phone (or a printable paper card with the same QR). Each cert has its own QR.
Scan it on your phone
Use your camera app or any QR reader. The QR opens a public verification page in your browser. No CertSafe app needed.
Read the status
Valid (green) means the cert is current. Expired (yellow) means past its expiry date. Revoked (red) means the issuer has explicitly revoked it. The page shows the issuer's name and the cert details.
Make your go / no-go decision
That's it. Wave the worker through, or have a conversation about renewal. The whole thing takes under 10 seconds.
Alternative: every cert also has an 8-character code. If the QR scan fails (cracked screen, weird lighting), the worker can read out the code and you can type it into the public verification page directly.
Why it works in the field.
Site gates aren't demo rooms. CertSafe's verification flow is designed around what actually happens at 06:30 with mud on the ground.
Works offline
Each QR carries a signed payload. Your phone validates it locally — no need to contact our servers at scan time. So it works even when the gate has no signal.
Can't be forged
The signed payload is cryptographically tied to the cert. A photoshopped QR or a screenshot of someone else's cert will fail verification on your phone.
Up to date in real time
If the issuer revoked the cert at 06:14 this morning, you see it as Revoked at 06:15. The verification page reflects the live status from the issuer's side.
Works on cracked screens
High-contrast colour bands plus icons plus text. You don't need a perfect photo of a cert; you don't need the worker's phone to be in perfect shape. Status is unambiguous.
What you see — and what you don't.
You see exactly what you need to make a go / no-go decision. No PII. No medical details. No government ID numbers.
- Worker name
- Cert name (e.g. OSHA 30)
- Cert status: Valid / Expired / Revoked / Superseded
- Issuer name (e.g. AGC chapter, training provider, or GC)
- Issue and expiry dates
- 8-character cert code (in case you need to log the verification)
- Government ID numbers
- Medical clearances or details
- Other certs the worker holds that aren't relevant to this scan
- The worker's home address or personal email
- Anything CertSafe doesn't strictly need to display the cert's status
Verifier FAQ
Do I need to install anything?
No. CertSafe verification works in your phone's browser. The QR opens a web page, and that's the entire experience.
Do I need to create an account?
No. Public verification has no login. You can verify hundreds of workers a day and the only thing tied to you is the optional record-keeping if your employer asks you to log scans.
What if the QR won't scan?
Two fallbacks. (1) Have the worker read out the 8-character cert code from their CertSafe profile — type it into the public verification page directly. (2) If you have signal, you can also enter the worker's name in the lookup.
Does verification work offline?
Yes. Each cert's QR carries a signed payload that your phone validates locally. Verification works at the wellhead with no signal. When you have signal again, the verification syncs back to the audit log if your employer has that enabled.
What if the worker shows me a screenshot of a CertSafe page?
Don't trust a screenshot. A screenshot is just an image — it has no live status. Always scan a fresh QR from the worker's phone (or their printed QR card). If the worker can't produce a live QR, treat it as unverified.
What does each status mean exactly?
Valid (green) — current and unrevoked. Expired (yellow) — past the issuer's set expiry date. Revoked (red) — the issuer explicitly revoked it (with reason). Superseded — the issuer has reissued a newer version of the same cert (worker should show you the newer one).
Can I trust a self-uploaded cert?
Be careful. CertSafe-issued certs (with the green ✅ verified badge) are vouched for by the issuer and our trust layer. Self-uploaded certs in a worker's wallet are just documents the worker added themselves — they're useful for the worker's own record-keeping but they don't carry our verification.
Verifying is the easy part.
If you're a verifier landing here from a worker's QR, there's nothing to install and no account to create. If you're a supervisor or HSE manager thinking about rolling CertSafe out at your sites, talk to us.