Short answer: A QR code on a BSC certificate should resolve to a stable HTTPS verification page for that one issued record. The page can confirm the certificate number, cabinet identifier, certifying company, test date, current status, and next due date while withholding unrelated cabinets, internal notes, customer contacts, and private attachments. Verification should also show when a certificate has been corrected, superseded, or voided so a saved PDF cannot continue to appear current after its controlled status changes.
Encode a stable verification URL, not the whole certificate
The QR code should contain an opaque, durable URL or verification token. Embedding all certificate data in the code makes status changes difficult and can expose information to any scanner without consulting the issuing system.
Display only the fields needed for verification
Confirm the certificate number, issuing company, limited cabinet identity, relevant date, result or status, and whether the record is current. Avoid customer contacts, technician-private notes, instrument attachments, pricing, and navigation into the full account.
Represent corrected and voided records
The verification token should continue to resolve after a status change. Show that an earlier certificate was superseded or voided and, where appropriate, direct the holder to the current record without disclosing the revision history publicly.
Protect against enumeration
Do not use predictable sequential URLs that allow a visitor to browse every customer's certificates. Rate-limit public verification traffic and ensure error messages do not reveal whether unrelated customer accounts or cabinet identifiers exist.
Keep a printable fallback
The certificate should remain understandable without scanning the code. Print the certificate number and issuer contact route so customers can verify a record when cameras, networks, or security policy prevent QR access.
Primary sources
This guide covers documentation and service operations. It does not replace the current NSF/ANSI 49 standard, cabinet manufacturer instructions, customer requirements, or the judgment of a qualified field certifier. BSC Atlas is not affiliated with NSF.