Understanding Oneway™ Attestations

Oneway™ Attestations are being introduced gradually. Verified attributes and signed attestation records are the initial foundation. Exportable PDF attestation documents and independent public verification are also being gradually released to our user base.

Oneway™ Attestations are a way for Ackaia to confirm specific, verified facts about your Ackaia ID without requiring you to share the documents used to establish those facts every time someone needs to check them.

For example, Ackaia can verify that you meet an age threshold, have current student status, or hold a qualifying press credential. Once the relevant verification is approved and an attestation is issued, the resulting attribute is associated with your Ackaia ID and protected by Ackaia's cryptographic signing system.

What is an Oneway™ Attestation?

An attestation is a statement issued by Ackaia confirming that it verified a particular fact—called an attribute—under an applicable verification procedure. Rather than giving another organization your passport, student enrollment document, or press credential, the long-term goal is to let you present Ackaia's narrower confirmation of the fact that organization actually needs.

An attestation is specific to the attribute it describes. For example, confirmation that you are over 18 does not disclose your complete date of birth or establish unrelated facts such as citizenship or residency.

Which attributes are supported?

The initial supported attributes are:

Other factual or eligibility attributes may be introduced as additional verification procedures become available. An attribute should always be understood according to its exact description and validity period.

How an attribute is verified

Oneway™ Attestations are connected to the secure Ackaia ID Verification Requests system. When a particular attribute or sensitive account action requires verification, an authorized Ackaia team member may create a request specifying the evidence and security checks needed.

Depending on the attribute, the request may require MFA confirmation, a government-issued identity document, proof of enrollment, a press credential, or other evidence identified in that request. You complete these steps inside the designated secure Ackaia ID verification environment, not by sending documents to an ordinary support mailbox.

Where document review is necessary, an appropriately authorized reviewer evaluates the submitted material. Completing a verification request does not automatically issue every possible attestation: the attribute must meet its requirements, and attestation issuance is a separate authorized action.

Learn how to complete a request in Completing an Ackaia ID Verification Request.

Where to see your verified attributes

When Attestations are enabled for your account, you can view the available verified attributes in the Personal Information area of Ackaia ID. The information presented may include the attribute, its verification status, and relevant validity dates.

Not every successful verification creates an attestation immediately, and an attribute that is pending, expired, or revoked must not be treated as currently valid.

How Ackaia protects attestation authenticity

Ackaia acts as the issuer and attestation authority for Oneway™ Attestations. It defines the verification requirements, reviews accepted evidence, issues the attestation, and maintains its official status.

Issued attestation data is cryptographically signed using signing material controlled by Ackaia. The signature is intended to establish that the signed assertion came from Ackaia and has not been altered. It does not prove that a person's circumstances can never change after the verification date.

Attestations are associated with your Ackaia ID, not with an individual Oneway™ passwordless sign-in certificate. Renewing, replacing, or revoking a browser's client TLS certificate does not, by itself, erase an otherwise valid verified attribute.

How long does an attestation remain valid?

Validity depends on the attribute and the evidence supporting it. Some attributes have an expiration date or require periodic re-verification. Others may remain valid until they are revoked, corrected, replaced, or re-evaluated.

Ackaia may revoke or supersede an attestation before its scheduled expiration if the underlying information becomes invalid, an important verification error is discovered, the attestation needs correction, or security or legal circumstances require it.

The 90-day validity period of an Oneway™ passwordless client certificate is not the validity period of every Oneway™ Attestation. The two credentials serve different purposes and have separate lifecycles.

Protecting your original documents

Oneway™ is designed to reduce repeated disclosure of sensitive verification evidence. Documents submitted through Ackaia ID's secure verification process are protected end-to-end, with tightly restricted access for qualified reviewers and encryption controls during handling and storage.

Submitted document images are destroyed when they have fulfilled their verification purpose. Ackaia may still retain limited records of the verified attribute, decision, relevant dates, evidence-source category, signature, current status, and necessary security or audit information. These records are distinct from the original document image and allow the attestation to be managed after the evidence has been destroyed.

For additional information, consult the Ackaia Corporation General Privacy Policy.

PDF Attestation Documents and public verification

The document may present your name and email address, the verified attributes you choose to disclose, relevant dates, a general description of the verification source, Ackaia as issuer, and information that connects the document to its official verification record. The verification service checks whether an attestation was issued by Ackaia, whether its presented information matches the signed record, and whether it remains active, unexpired, and unrevoked.

What a third party is be able to verify

The public verification service allows the person or organization receiving an Attestation Document to confirm its authenticity and current status without needing the original document you provided to Ackaia. The public results are intended to reveal only the information necessary for this verification, not your passport, enrollment record, or press credential.

The receiving organization remains responsible for deciding whether the verified attribute is sufficient for its particular purpose. An Oneway™ Attestation is a private assertion issued by Ackaia; it is not a government identity document, notarization, professional license, or guarantee of acceptance by a third party.

Oneway™ Attestations versus Oneway™ passwordless sign-in

Both features belong to Oneway™, but they answer different questions. Passwordless sign-in uses a client TLS certificate and mutual TLS (mTLS) to authenticate you to Ackaia ID.

Attestations record specific factual attributes Ackaia has verified about your account. Possessing a valid sign-in certificate does not automatically establish age, student status, press status, or any other attribute.

Corrections and support

If an attribute appears incorrect, has expired, or does not appear after a verification review, contact Ackaia Support. Explain which attribute is affected and include an existing case reference if you have one. Ackaia may require additional evidence or a new Verification Request before correcting or reissuing an attestation.

Do not attach identity documents, MFA codes, private keys, or other sensitive verification material to an ordinary support ticket. Wait for the designated secure verification process if additional evidence is needed.