Bureau signature verification
A credit bureau signs its report with an electronic signature. The platform verifies exactly that: the document’s integrity, the certificate chain up to the national certificate authority, and that the signer is the bureau’s registered certificate rather than any signature holder.
Plan All plans, including the sandbox.
What’s inside
- Signature embedded in the PDF, attached CMS container, detached signature file and ZIP archive with a signature
- The container type is detected by file content, not by extension
- The document hash is compared with the signed value: changing any byte breaks the signature
- The certificate chain is evaluated as of the signing time, so a certificate that expired today does not invalidate an old report
- Pinned root certificates of national authorities, including the Bank of Russia certificate authority
- The signer is bound to the registered bureau template
- An unknown certificate revocation status produces a warning, not a pass
Limitations
A signature can only be verified on the original electronic file. A scan or photo of a printout contains no signature: such a document is marked “authenticity not proven”, not “forgery”.
FAQ
How is this different from checking the report visually?
A visually edited PDF cannot be told apart from the original. The electronic signature ties every byte of the document to the bureau’s certificate: after any edit, verification fails.
What if the borrower uploaded a scan?
The scan is clearly marked as a document without provable authenticity. Its data can be parsed, but your analyst decides whether to trust it during manual review.
Which countries’ signatures are verified?
The platform works with bureau signatures from all five covered countries. Templates and root certificates are maintained per bureau and updated without service downtime.
Use cases with this feature
Other features
Shall we run a check on your report?
Send an anonymized sample report from the country you need: we will break it down in a demo and show the flags, the summary and the connection to your system.