Falcon Verified
Add a cryptographic QR code to any document we generate. Anyone who scans it sees the document data as you entered it with proof that Falcon’s signing key signed it. Forging the QR is mathematically impossible without the key.
How it works
When you tick the “Add Falcon Verified QR” box on any of our generators, the form data is hashed and sent to verify.falcon.enterprises — a separate service operated by Falcon Enterprises that signs the data with an Ed25519 private key. Falcon never stores the document; the signature happens in milliseconds and the data leaves no trace.
The signed payload is compressed and embedded directly into a QR code at the bottom-right of your PDF. When someone scans the QR (or opens the verify URL in a browser), the scanner reads the data from the URL fragment — which never leaves the verifier’s browser — and checks the signature against a public key bundled into the scanner JavaScript. If the signature is valid, the verifier sees a green tick and the original data; if not, a red error.
What this protects against
- Forgery. Without Falcon’s private key, nobody can produce a QR that the scanner accepts. A tampered document — e.g. someone editing the salary figure after download — will fail verification.
- Whole-document substitution. Replacing the QR with one from a different document changes the signed payload, so the scanner shows the substituted data, not the visible PDF data — the discrepancy is obvious.
- CDN compromise. The scanner’s public keys are bundled into its JavaScript at build time, never fetched. A compromised CDN can’t substitute a fake key without re-signing every previously issued document.
Privacy invariants
Falcon Verified is built on three non-negotiable invariants:
- Zero document storage. Falcon’s signing service has no document table. Telemetry is opt-in only.
- Zero scan-time server contact. Once the verifier loads the scanner page, no further network requests are made. The QR data lives in the URL fragment, which is never sent to a server.
- Public keys bundled, never fetched. The scanner ships the public keys in its JavaScript bundle. There is no key-server to compromise.
Where you’ll see it
All five payslipmaker.uk generators support Falcon Verified as an opt-in:
Falcon Verified is part of the £1.99 value. That price buys two things free tools won’t give you: privacy (we never see, store, or sell your data) and anti-tampering (this QR signature). You can also tick the opt-in on the free watermarked preview to inspect how it works before paying.
Want to verify a Falcon-signed document right now? Open the QR in any browser, or visit verify.falcon.enterprises and paste the verify URL.