TaaS — Trust as a Service
Cryptographic certification API — now in beta

Every transaction
in your app,
legally verifiable.

One API call generates a cryptographic certificate for any event in your app — agreements, payments, deliveries, app installs. No lawyers. No complexity. Just proof.

POST /v1/certify → 200 OK
// Request
await taas.certify({
  type:    "payment_confirmed",
  payload: { amount: 499.00, currency: "USD" },
  meta:    { app_id: "com.acme.marketplace" }
});

// Certificate returned
{
  cert_id:   "cert_5f3a8c2d-...",
  hash:      "a3f4b2c1e9...",  // SHA-256
  timestamp: "2026-06-01T14:30:01Z",  // RFC 3161
  signature: "RSA-PSS-SHA256",
  valid:     true
}

100 free certifications/day on sandbox. No credit card required.

Trusted by teams building on trust

ESCROW.IOLOGIPAYSHIPRTRUSTCHAINDELIV3RYSIGNLABS

The problem

Your app handles money and agreements. What happens when someone denies it?

One unproven dispute can cost more than a year of TaaS. Most teams realize this only after the first incident.

Disputes without evidence

A buyer claims they never confirmed the delivery. A seller says payment was authorized. Without cryptographic proof, you rely on screenshots and he-said-she-said — costing $10k+ per legal dispute.

No API built for in-app events

DocuSign is for documents. AWS handles files. Neither was designed to certify what happens *inside* a mobile app — a tap, a payment confirmation, an app install. You end up building it yourself.

Enterprise pricing kills small teams

DocuSign starts at $25/user/month. Building trust infrastructure in-house costs $5k–$20k in dev time before the first certificate. Startups just starting out can't justify either.

The math is simple.

1 legal dispute averages $10,000+ in the US. TaaS starts at $49/month.

See pricing →
Unique to TaaS

The only API that certifies what happens inside your app

Most trust services certify documents. TaaS certifies actions — including what happens inside your mobile app before, during, and after any critical moment.

Sideloaded APK / enterprise IPA installs (outside Play Store & App Store)
In-app agreements, confirmations, payment authorizations
Web app installs (PWA) and session-level events
Terms of service acceptance with non-repudiation
See all app certification use cases
app_install Version 2.1.4 was installed on device #F3A9 at 14:30 UTC
CERTIFIED
tos_acceptance User [email protected] accepted ToS v3.2 at 09:15 UTC
CERTIFIED
payment_confirmed Both parties confirmed $1,200 escrow release
CERTIFIED
delivery_complete Package arrived at GPS 40.71°N 74.00°W, signed by recipient
CERTIFIED
Certify an app install
POST /v1/certify
{
  "type": "app_install",
  "payload": {
    "app_id":       "com.acme.enterprise",
    "version":      "2.1.4",
    "platform":     "android",
    "distribution": "direct_apk",
    "device_id":    "uuid-device-f3a9"
  }
}

How it works

From event to certificate in <200ms

No infrastructure to manage. No PKI to configure. Just an API key and four steps.

01

Send the event

POST any payload to /v1/certify — a payment, an install, an agreement. No schema required.

fetch('https://api.taas.io/v1/certify', {
  method: 'POST',
  headers: { 'X-API-Key': key },
  body: JSON.stringify({ type, payload })
})
02

We hash & timestamp it

TaaS generates a SHA-256 hash of your payload and anchors it with an RFC 3161 timestamp.

hash      = SHA256(canonical_payload)
timestamp = RFC3161.stamp(hash)
// Tamper-proof — not even TaaS can backdate
03

Certificate returned

You receive a signed certificate (JSON + PDF) in milliseconds. Store it or let TaaS handle storage.

{
  "cert_id":   "cert_5f3a...",
  "hash":      "a3f4b2c1...",
  "timestamp": "2026-06-01T14:30:01Z",
  "signature": "RSA-PSS-SHA256",
  "valid":     true
}
04

Verify anytime, anywhere

Anyone — judges, auditors, your users — can verify a certificate via our public API, forever.

GET /v1/verify/{cert_id}
// 200 OK → { valid: true, issued_at: "..." }
// Works without TaaS credentials

Why TaaS

Better than the alternatives

DocuSign isn't built for app events. Building in-house costs a quarter of engineering time. TaaS closes the gap.

Feature
TaaS
DocuSign API
Build your own
API-first design
Partial
Mobile app event certification
Build it
Sideloaded app installs
Complex
RFC 3161 timestamp
Weeks
Public certificate verification
Complex
Time to first certificate
<1 hour
2-3 days
2-8 weeks
Starting cost
$49/mo
$25/user/mo
$3k–20k dev
Per-event pricing (no seats)
N/A
Blockchain anchoring (opt-in)
Complex

Pricing

Simple, usage-based pricing

Start with a free sandbox — 100 certs/day, no card required. Pay only when you scale.

Development sandbox: 100 free certifications/day. No credit card.

Starter

$49 /mo

10,000 certs/month

For apps just starting to add trust.

  • POST /v1/certify
  • GET /v1/verify (public)
  • JSON + PDF certificates
  • Dashboard access
  • Email support
Start free trial
Most popular

Pro

$149 /mo

100,000 certs/month

For growing apps with real transaction volume.

  • Everything in Starter
  • Webhook notifications
  • CSV + API export
  • Custom certificate branding
  • Priority support
Get started

Enterprise

$499 /mo

Unlimited

SLA, dedicated support, and custom integrations.

  • Everything in Pro
  • 99.9% SLA
  • Dedicated account manager
  • Blockchain anchoring (opt-in)
  • Custom integrations
Contact us

All plans include: SHA-256, RFC 3161, RSA-PSS signing, public verification API, 99% uptime.

FAQ

Questions & answers

More questions? Email us

Ready to certify

Add legal-grade trust to your app in under an hour.

Start with 100 free certifications/day on sandbox. No credit card. Upgrade when your users depend on it.

B2B API · RFC 3161 · SHA-256 · RSA-PSS · CCPA compliant · Cews Investments Corp, USA