QR-verifiable certificates: why scanning beats PDFs
A PDF certificate proves exactly one thing: that someone, somewhere, made a PDF. A verifiable certificate points back to a live record — and the record does the talking.
The forgery problem nobody likes to name
Training certificates gate real things — site access, client contracts, audits. Which means they get forged, edited and "extended" with a PDF editor more often than anyone admits. The document alone cannot defend itself: paper doesn't know whether it's still true.
Verification-first issuance
The fix is structural. Issue every certificate from a source record, stamp it with its own serial number and QR code, and let anyone check the record live:
The five-second check
Scan the QR — or type the serial into the public portal — and get one of three answers, straight from the issuer's live register:
VALIDEXPIREDREVOKED
No login. No email thread to the training provider. No waiting.
A doctored PDF now fails automatically: the check runs against the record, not the document. If the record was never issued, has expired, or was revoked, the scan says so — whatever the paper claims.
Who actually scans these?
- Site supervisors at the gate, checking a contractor's card before letting them on.
- Client companies auditing whether the workforce they're paying for is actually trained.
- Inspectors and auditors sampling records — who notice, favourably, when verification takes five seconds.
Every one of those checks used to be an email to the training provider. A public verification portal removes the provider from the loop entirely — while making the provider look better.
What this looks like in Sentinel
Saving a training record in Sentinel generates a branded PDF certificate with its serial number and QR automatically. The public portal answers VALID / EXPIRED / REVOKED instantly, no account needed — and because every certificate points back to its source record, the register stays the single source of truth. 9,000+ certificates are managed in production this way.
Issue certificates anyone can verify in 5 seconds
Auto-generated, branded, QR-verified — from the same register that tracks completions and expiries.
Book a demo →Common questions
How does QR verification work?
Each certificate carries a serial and QR pointing at its live source record. Scanning returns VALID, EXPIRED or REVOKED — no login.
Why is it harder to forge than a PDF?
The certificate is a pointer, not the proof. The check runs against the issuer's record, so an edited document changes nothing.
Who uses the verification portal?
Site supervisors, client companies and auditors — anyone who needs a yes/no on a certificate without emailing the issuer.
Practical guidance from the Sentinel team — requirements for certificate content and validity vary by industry and scheme; confirm yours with your accreditation body.