Platform · Credfex

Architecture

Four products. One signed record.

Each surface is purpose-built for its audience, but they all read and write the same credential.

For employers

Issuer Console

Issue, amend and revoke credentials from a portal, bulk upload or HRMS API. Templates, maker-checker approvals and signing keys per legal entity.

Bulk validation & duplicate detection
Field-level sharing policies
Attrition & mobility analytics

For professionals

Credential Wallet

A mobile-first wallet where credentials from every employer collect. Consent, notifications, disputes and sharing links.

OTP login, no app required
Granular, revocable consent
Verification history & alerts

For verifiers

Verification Hub

Single and bulk lookups, signed reports, PDF export and client-level billing for screening agencies and hiring teams.

Under 2s match response
Citable report IDs
Consent capture in flow

For platforms

Exchange API

REST API and webhooks that let HRMS, ATS and screening platforms issue and verify without leaving their own product.

Sandbox & synthetic data
Scoped API keys
Webhooks for async events

Anatomy of a credential

What makes a Credfex credential trustworthy.

A credential is not a PDF. It is a structured, signed data object whose integrity can be checked by anyone, at any time.

Issuer signature. Signed with a key that belongs to the employer's legal entity. Rotated and revocable.
Content hash. Any change to any field changes the hash. Tampering is detectable instantly.
Status & versioning. Active, amended, disputed or revoked, with every prior version retained for audit.
Sharing policy. Which fields are visible to which class of verifier, set by the issuer and the holder.

credential.json

signature valid

{
  "id": "cfx_cred_7a91c4e2b",
  "type": "EmploymentCredential",
  "issuer": {
    "name": "Northbridge Technologies Pvt. Ltd.",
    "key_id": "nbt-signing-3"
  },
  "subject": {
    "employee_id": "NBT-10482",
    "designation": "Senior Product Manager",
    "employed_from": "2021-03-15",
    "employed_to": "2026-08-31",
    "exit_type": "resigned"
  },
  "status": "active",
  "version": 2,
  "hash": "sha256:9f1c…e4b7",
  "signature": "MEUCIQD…",
  "issued_at": "2026-09-01T09:12:44Z"
}

Capabilities

Enterprise controls, without enterprise friction.

Role-based access control

Issuer, approver, auditor, analyst and API roles with least-privilege defaults across every entity.

SSO & SAML

Sign in with Azure AD, Okta, Google Workspace or any SAML 2.0 provider. SCIM provisioning for large teams.

Multi-entity hierarchies

Group companies, subsidiaries and acquired brands under one account with separate signing keys and reporting.

Maker-checker approvals

Require a second approver for issuance, amendment or revocation where your policy demands it.

Immutable audit log

Every action, by every actor, with consent references. Exportable to your SIEM or GRC tooling.

Analytics & reporting

Verification volume, turnaround, alumni destinations and dispute rates in dashboards and scheduled exports.

Notifications

Email, SMS and webhook notifications for issuance, consent requests, verifications and disputes.

Localisation

Multi-language wallet and portal, regional date formats and data residency options.

Fully managed

No infrastructure to run. Credfex is delivered as a service with a 99.9% uptime target and 24×7 monitoring.

See the platform end to end.

A guided walkthrough of the Issuer Console, Wallet and Verification Hub, using your scenarios.

Request a demo Talk to sales

One exchange for the full life of an employment credential.