Understanding Tokens
Tokens are the core output of every TRUSTTICA verification — tamper-evident records that prove identity was confirmed or presence was established.
Stage 1 Token
Generated when identity is confirmed. Proves the person is who they claim to be.
- Created after identity verification is completed
- Linked to the verified identity record
- Stored in the Evidence Vault with a timestamp
Stage 2 Token
Generated when physical presence is confirmed. Proves the person was actually present at the time and place.
- Created after real-time presence confirmation
- Always references the corresponding Stage 1 token
- Stored in the Evidence Vault with a timestamp
What tokens are used for
- Proof of verification — demonstrate that identity or presence was confirmed
- Traceable records — every token links back to the session, parties, and timestamp
- Dispute resolution — tokens provide an immutable reference if any interaction is questioned
- Audit and compliance — organisations can review full token histories for any user or session
Token lifecycle
Once generated, tokens are immutable. They cannot be edited or deleted. They can be reviewed, exported, or referenced within the Evidence Vault. A complete verification session consists of a paired Stage 1 and Stage 2 token.
Tokens are not credentials — they do not grant access by themselves. They are records of what happened, providing accountability rather than authorization.