A certificate for every conversation

Sooner or later someone else will ask whether your AI said it was AI: a client, a franchisor, the company buying your leads, an insurer. A certificate is how you answer. It is a link that shows the notice was presented, when, and in what words, and the other party can check it without taking your word or ours.

14 days free, then $29.99 a month. Card required, cancel any time. Certificates are included on plans with records.

How it works

  1. The notice makes the certificate. The first time the notice shows in a conversation, the notice script makes a random certificate id. On a call, the id is made when your voice platform reports the call. Every row of that conversation in your record carries the id.
  2. You pass the link along. On a web page, the notice fills any form field named botnotice_cert with the certificate's link, so it travels with the lead. Your own code can read it with BotNotice.certificate(). For calls, the link comes back in the reply to your platform's webhook.
  3. The other party opens it or claims it. Anyone with the link can read the certificate. A party you gave a partner key to can claim it through the API. The claim goes into your record with its time, so the record shows who relied on it.

For developers

<!-- in your lead form: the notice fills this in -->
<input type="hidden" name="botnotice_cert">

// or in your own code, after the notice has shown
document.addEventListener("botnotice:shown", (e) => console.log(e.detail.url));
BotNotice.certificate();   // { id: "bnc_…", url: "https://botnotice.app/cert/bnc_…" }

# read a certificate (no key needed)
curl https://botnotice.app/api/cert/bnc_…

# claim it (the partner's key)
curl -X POST https://botnotice.app/api/cert/bnc_… \
  -H "Authorization: Bearer bnp_…" \
  -H "Content-Type: application/json" -d '{"reference":"lead-48213"}'

The JSON carries the same facts signed by BotNotice (a JWS). Its public keys are at /.well-known/jwks.json. Each certificate also links to the outside time stamp that covers its rows. How that is checked.

Questions

What does a certificate show?

That a notice saying the visitor was dealing with AI was presented in that conversation or on that call, when, and with what wording. For chat it also shows whether at least half the notice stayed on screen for a second or more, and whether the visitor pressed Got it.

What does it not show?

It does not show what the AI said afterward, and it does not show that the person read the notice. It is evidence for review, not a legal finding.

Does it hold personal data?

No. The id is a random code made for one conversation. The certificate holds no name, email, phone number, address or transcript. Your own system links the certificate to a lead by storing the link next to it.

Who can claim one?

Only a party you gave a partner key to. A claim says: this partner relied on this certificate, at this time. It is written into your record, and it can't be removed.

Is there a market that asks for these today?

Not that we have found. No lead buyer, insurer or regulator we know of asks suppliers for proof of AI disclosure yet. The model is borrowed from lead-consent certificates, which lead buyers do ask for. The certificate is there so you are ready the first time someone asks.

AI disclosure certificates · BotNotice