SecureCode · Deis Technologies
Issuer-signed QR codes that make a document tamper-evident.
SecureCode seals a document with a cryptographic signature the issuer controls. Anyone can verify it at one trusted address, in the browser, offline, in seconds.
How it works
Sign the document, seal it with a code, verify it anywhere.
-
STEP 1
Sign
The issuer signs the document's details with a private key held in Azure Key Vault. The signature covers the exact values printed on the page.
-
STEP 2
Seal
A SecureCode QR carrying the signature is placed on the document. Altering any signed value breaks the signature.
-
STEP 3
Verify
A recipient scans the code and lands on securecode.deistech.co.za. Verification runs in their browser against the issuer's published keys. The code is never sent to a server.
Features
Built so the code is the trust anchor, not the website.
Cryptographic issuer signatures
Each code is signed with a key held in Azure Key Vault. The signature proves who issued the document and that its signed values are unchanged.
Instant revocation
A published status list marks a code withdrawn without reissuing anything. A revoked code verifies as authentic but no longer trusted.
Offline, private verification
The token rides the URL fragment and is checked in the browser against cached keys. Nothing about the scan is sent to a server.
White-label issuer branding
The verified issuer's identity is what the recipient sees, bound to the signing key, never to anything an attacker can set.
Scan-to-pay
A verified code can carry a payment action. The amount is re-derived from the signed token, and providers are pluggable.
Transparency log and reporting
An append-only record of issued codes, and a one-tap path for a recipient to report a document they do not trust.
Use cases
Wherever a document's authenticity has to hold up.
Statements and certificates
Bank statements, tax certificates, and confirmations a recipient must trust at face value.
Invoices and payment requests
A verified code confirms the payee and amount before money moves, with scan-to-pay built in.
Qualifications and credentials
Certificates and letters whose holder and issuer must be provable long after they are printed.
Official and government documents
Permits, letters, and records where a forged copy carries real-world consequences.
One address to verify, by design.
Verification always happens at securecode.deistech.co.za. A single, memorable destination is the anti-phishing property. Recipients learn one place to check, and lookalike per-client domains never become the norm. Issuer branding personalises the page; it never replaces the address.