Verify a Waiqo data export
When you export your data from the Waiqo app (a subject access request), the file is digitally signed by Black Flag International Limited using an Ed25519 key. The signature proves the data is genuine and has not been altered — no matter how the PDF looks. This page lets you check it. All verification happens in your browser; nothing you paste is sent anywhere.
loading…Check an export
Open the export PDF's final “Verification record” page and copy the two base64 blocks into the fields below.
Prefer to verify it yourself?
The signature is a standard Ed25519 signature over the exact bytes you get by base64-decoding the payload. With the public key above you can verify it with any tool, for example OpenSSL or the following python-nacl snippet:
import base64, nacl.signing, nacl.exceptions
pub = base64.b64decode("EjUZB4QqParnW8gfiXYoL6+IYmRLR3oUTlLPq5aJpZY=")
payload = base64.b64decode(open("payload.b64").read().strip())
sig = base64.b64decode(open("sig.b64").read().strip())
nacl.signing.VerifyKey(pub).verify(payload, sig) # raises BadSignatureError if invalid
print("Signature is valid; decoded data:"); print(payload.decode())If verification succeeds, the decoded payload is the authoritative record of the data we held about you at the moment of export.