Make your company readable by AI.

Evidence labels

Each fact carries exactly one of these 10 labels, the same in profiles, data and the application programming interface (API). Column three is each label's common misreading.

Company assertions are Declared; only Witnessed and Public record rest on more, and say what was read, not whether it suffices. Stale, Conflicting and Temporarily unavailable mean look again, not failure.

When a source fails

Missing evidence is never a pass or failure; each case is labeled.

The Trooth Standard.

A published set of checks for software and AI companies: 14 requirements in four areas, each naming what Trooth checks, from what evidence and when. Version 1.0. Outcomes are dated; there is no pass mark or verdict, and nothing sums them.

• Not a certification or a rating. There is no number, no ranking and no guarantee: Trooth reads and shows its work.
• Domain control is not identity. Requirement 01 shows control of a domain and 02 records a signed-in person's claim to represent the company; neither confirms who that person is. Administering a repository (03) is not writing it.
• Free and not for sale. Reading the Standard is free, and so is being read against it. No outside body has reviewed or endorsed it.

A reading runs 100 checks; the ones not mapped to a requirement are read and reported on their own. The mapping is a versioned file, now at version 1.0.1 (every version); a change creates a new version, and an existing reading is never reinterpreted.

How the Standard changes

• Written and maintained by Trooth, LLC. Version 1.0, 14 requirements in 4 areas, was published on August 19, 2026.
• Requirements are added or tightened only in a new published version with a migration window; earlier versions stay published.
• Propose a change on the public improvements board or at hello@trooth.co; adopted proposals enter the revision history, dated.
• Mapping 1.0.0 (2026-09-26): First published: the 100 checks in a reading, each mapped to a requirement or marked unmapped.
• Mapping 1.0.1 (2026-09-27): Requirement TS-1.0-08 retitled from “No exposed secrets” to “No secrets detected in the checked sources”, so the title says what the checks cover. No check was added, removed or remapped.

For a vendor policy: “Vendors must maintain a Trooth record read against the Trooth Standard (trooth.co/methodology#standard) for the term. We review it, check by check, at onboarding and renewal.”

Access and responsibilities

Roles, public versus restricted, and what happens when a company leaves.

Terminology registry

The words that carry an assurance implication, the words not to use in their place, what each means and claims, and the text a page shows. Version 2026-10-12, also as data. The build refuses copy that uses an avoided term.

Reading a company record

Every company's record is read with the same words, on its page, in its text twin and in its JavaScript Object Notation (JSON) record. They are defined here once, and each record links here instead of repeating them.

Provenance words, one per section and one per fact

• witnessed: Trooth observed it at the time shown. Cite it as Trooth's observation, with that time.
• public record: Trooth read it from the public registry or source named. Cite that source.
• attested: A named counterparty stated it. Cite that counterparty.
• declared: The company stated it; Trooth publishes it as written and does not establish it. Cite it as the company's statement, with its date.

Three negative answers, never shown as one another

• No: the record holds a negative value.
• Not published: the company has not published it on this record.
• Not read: Trooth's reading did not read it.

Section guidance

Section guidance comes from one template, keyed on each section's state and provenance. It is the same for every company, and no company can edit it.

Notes that apply to every company's record

• Declared by the company. Trooth has not tested these connections and does not witness them.
• Package locations as published. Trooth does not confirm or scan them; check the publisher name before installing.
• Targets and measured restores are both declared. Trooth does not run or witness these tests.
• List pricing as the company states it, not a negotiated price. Trooth does not witness pricing.
• This is the list as published today: new and old processors look alike, and removed ones are gone. If you need notice of a new sub-processor, that notice comes from the company, not from this page.
• Documents stay behind a request: the Trust Profile shows that they exist, never their contents. Ask the company for access from its Trust Profile.
• Trooth has a signed witness statement for this company's public surface. The signature covers the reading, not the truth of each claim.
• These are statements model providers make about their own services. A provider's default, a paid plan's terms and a negotiated contract are three different things, and a provider assurance may be any of them, so none of this establishes how this company's own deployment is configured. Ask for that separately.
• Published by the sources named, not by this company and not by Trooth. Each entry says what its source said and on what date, in the source's own stage word - an allegation, a finding, a settlement, an appeal and a final judgment are five different things, and Trooth does not summarize them into one. Nothing here is Trooth's conclusion about the company, and an entry is not evidence that an allegation is true. These entries stay on the record through a change of ownership; the company can answer any of them, and its answer appears beside the entry.
• Published by the company, for the period each figure names, computed the way each figure says. Trooth does not audit these, does not compute them, and does not estimate any of them from a funding round or a headcount. Two companies can compute the same metric differently, so a figure here is comparable with another company's only if their definitions agree.

The four kinds of infrastructure statement

• The company's description: The company describing its own architecture. Nobody outside can check it, and it is useful anyway - a wrong answer here is checkable against everything else on the page.
• A contractual commitment: A contractual target with a remedy attached. Not a measurement: it says what the company owes you if it misses, not what it achieved.
• The provider's own incident report: The provider's account of its own outages. It is the account with the strongest reason to be generous, and it is usually the only one that exists.
• A measurement somebody took: Somebody took a reading. This is the only lane that is evidence, and only where it says who measured, from where, and how often.

Each fact has a stable identifier, its section and its field in lower snake case (for example security.mfa_availability), with an anchor on the company's Trust Profile, and is printed as one sentence carrying who said it and when. Twelve standard buyer questions are answered only from the record's own fields; a question the record does not hold reads Not published on this record. A declared fact's edit history is the difference between consecutive stored versions of the record.

Glossary

Trust Profile

One company's public record: its declarations, public records and Trooth's observations, each labeled.

Fact

One statement about one company, with exactly one label, a source and a date.

Evidence label

How a fact was established; the 10 labels are defined on this page.

Source type

A connected system, public website, registry, attestation, company declaration or Trooth derivation.

Observation

What Trooth read from a source, and when. Signed, not certified.

Declaration

What a company says about itself, labeled Declared, never in Trooth's voice.

Connector

How Trooth reads a company's own system, with a credential the company granted.

Freshness window

How long a reading stays current. After it, the fact is Stale.

Witness statement

A signed record of one reading of a domain's public surface, checkable by anyone. From October 4, 2026 it also binds the exact check mapping and an evidence manifest.

Signature

Proof of which key signed the bytes and that they are unchanged, not that they are true.

Attribution

Which company, legal entity, domain or product a fact is about.

Challenge

Anyone's request to correct a published fact, reviewed by a person at Trooth.

Right of reply

A company's own answer, shown beside an event another party published about it.

Unclaimed

Unclaimed: identity facts and an outside-in reading only.

Questions

• What is a Trooth profile?

  A dated, sourced record of one company: what the company says about itself, what public records show, and what Trooth read for itself from the company's public surface and from systems the company connected. Every fact carries one label saying how it was established, and a source and a date where they are known. Only Trooth's witness statement for a reading is signed; the company's declarations are not.

• Is a Trooth profile a certification or an audit?

  No. Trooth does not attest, certify, or sign on a company's behalf, and a profile is not a comprehensive audit or a guarantee. It shows what was read and when, what the company declared, and what is missing, so a reader can decide.

• How fresh is the evidence?

  Every witnessed fact shows the date it was read. Live probes re-read hourly. Each category then has its own freshness window, published in the table on this page: 48 hours for security configuration, operational posture and connected-system health, longer for things that change slowly. Past its own window a fact is labeled stale rather than quietly kept showing as current.

• What happens when a source stops answering?

  The last reading stays on the profile, labeled Unavailable, with the date it was read. A failed read is never shown as an empty result, and missing evidence is labeled Unknown, which means neither yes nor no.

• Can a company pay for a better position?

  No. Directory ordering is a mechanical fact: companies with witnessed evidence first, most recently witnessed at the top, then everyone else by name. There is no paid placement, no pay-to-raise, and no sponsored ranking. Trooth is free.

• How do I report something wrong?

  Use the correction form at trooth.co/network/dispute. Anyone can file, with no account. A person at Trooth reviews it, and neither the company the fact concerns nor the person who filed can settle it. The timetable is in the Publication, Correction and Right-of-Reply Policy.

• How do I create a profile?

  Create a free account, find your company and claim it by showing you control its domain. Claiming lets you add declared facts and connect systems for Trooth to read. It never removes history or rewrites what Trooth read before you arrived.