Certified messaging

Certified SMS with evidential value: the file, not your word

A normal SMS is sent and forgotten. A certified message generates an evidence file: what was sent, to which number, when the network accepted it, when the link was opened, when the full content was read and —if a signature is requested— who completed it with a one-time code. Each event is chained by hash to the previous one and the whole is closed with a qualified time stamp issued by an external authority. The result is an evidence PDF with its public verification code: anyone can check it against the file, without an account and without asking our permission.

How the evidence is built, step by step

The strength of a certificate is not in the paper: it is in every statement having behind it a record that cannot be rewritten.

1. The content is fixed before it goes out

When the send is created, the SHA-256 hash of the full content is calculated and the file is opened. From then on, changing a comma of the text would break the chain: what the recipient reads is, demonstrably, what was sent.

2. Every fact, a link in the chain

Sending, acceptance by the network, delivery report, opening of the link, reading of the content, every signature attempt: each event is recorded with the date and time to the millisecond and with the hash of the previous event inside its own. It is an append-only chain: nothing can be deleted or inserted without it showing.

3. The closure is sealed by a third party

The evidence PDF is closed with a qualified time stamp from AC Camerfirma, S.A., and the whole chain is also anchored every night with a stamp over the day's digest. Not even we could backdate a file without the stamp giving it away.

The time stamp: qualified, from Camerfirma, and verifiable

Camerfirma, the certification authority of the Spanish chambers of commerce

The certificate that signs our stamps: «AC CAMERFIRMA QUALIFIED TSU - 2024», published in the Spanish trusted list as a qualified time-stamping service with “granted” status.

Not all time stamps are worth the same. Just any technical stamp proves little; a qualified electronic time stamp —the one in art. 42 of the eIDAS Regulation, issued by a provider on the European Union trusted list— enjoys by law the presumption of the accuracy of the date and time it indicates and of the integrity of the data to which it is bound (art. 41.2 of the eIDAS Regulation).

SMSverifica files are stamped with the qualified TSU of AC Camerfirma, S.A., a Spanish certification authority of the chambers of commerce system. And we do not ask you to take our word for it: the signing certificate of every stamp can be checked against the trusted list published by the Spanish State (tsl.digital.gob.es, referenced by the Commission's European list), which is the official source of which providers issue qualified stamps. We ourselves run that check every night: if one day the service were no longer listed as granted, our certificates would stop invoking the presumption that same day, because an evidential document that claims too much is worth less than one that claims just enough.

What it costs

Certifying is a surcharge on top of the channel price, the same for all three: €0.25 per certified message (amounts excl. VAT). A certified SMS to Spain is €0.328: the text carries the link to the content and the expiry date, does not fit in a single SMS and takes two —€0.039 each— plus the €0.25 surcharge. By WhatsApp, which is not split, it is €0.255, and by Telegram €0.26. All itemised in your history. The full details are on the pricing page; the integration, with two endpoints, in the REST API.