Each code is randomly generated with a built-in checksum, not derived from a sequence - a code cannot be reverse-engineered from another.

Automated guessing is blocked after a small number of attempts per visitor.

Only the fields the institution has approved for public display are ever shown - never more.

Every certificate can carry a printed QR code linking directly to its verification result - no separate app required.