Platform in beta. Card pilot in preparation.
The business card that proves itself.
Certus Meishi is an NFC business card with a secure chip inside. Every tap creates a one-time code, and Certus IQ checks it before your profile opens. A copied card or a forwarded link shows as unverified.
- No app, no login
- A one-time code on every tap
- No personal data on the card
Anyone can print a business card.
A printed card, a social profile and a QR code can all be copied in minutes. At a conference, nothing tells you whether the contact you just received is the real one.
Attackers use exactly that. In the first half of 2026, wallet compromise and phishing accounted for about 60% of the US$1.32 billion lost across 344 Web3 security incidents. Code vulnerabilities accounted for about 12%.
Source: CertiK, Hack3d: H1 2026 Report. Percentages calculated by Certus IQ from the report's figures. Open the report
See a tap, step by step.
Without the card in your hand, the chip is a black box. So this page plays the chip in your browser and runs the same checks our server runs.
Tap
The phone's NFC field powers the chip. The card needs no battery and the phone needs no app.
Sign
The chip encrypts its ID and tap count, then signs them. The link it hands over is different on every tap.
Check
Certus IQ decrypts the code, checks the signature against that card's key, and confirms the tap count has gone up.
Show
Only then does the profile open as a verified tap. The other person can leave their contact, with consent.
Simulates a forwarded link or a cloned card.
Simulates a forged link.
The link the chip sent
No tap yet. Tap the card to see the link.
What Certus IQ checked
- Decrypt the codeWaiting for a tap
- Check the signatureWaiting for a tap
- Compare the tap countWaiting for a tap
Hold a phone near the card
This is a simulation. Your browser plays the chip, using demo keys that are published in this page's code and never used on a real card. The link and the three checks are computed with the same verification code that runs on certus-iq.io. Nothing is sent or stored.
Software × hardware
The card confirms that the tap is genuine. Certus IQ shows how well the track record is backed up. Neither is enough alone.
Hardware
The card
- NXP NTAG 424 DNA secure chip, certified to Common Criteria EAL4
- A new AES-128 encrypted code and signature on every tap
- A key unique to each card, with the factory keys replaced before issue
- No name or contact details stored on the card
- Standard card size, 85.5 × 54 mm, with no battery
Software
Certus IQ
- Checks every tap and rejects copies and replays
- Shows your profile with an evidence level on each item, from Verified to Stated
- Lets you choose which fields a tap shows
- Saves the contacts people leave, with their consent, the time and the event
- Deactivates a lost card in one step
| Question | Paper card or social profile | Certus IQ with Meishi |
|---|---|---|
| Is the card genuine? | No way to check. Easy to copy or fake. | A one-time code ties the tap to an issued card and a registered account. |
| Is the track record real? | Self-described only. | Evidence shown with its verification level, on the spot. |
| Is the meeting recorded? | Typed in by hand later, or lost. | Saved with the date, the event and consent. |
| What if they are not on Certus IQ? | The connection ends there. | They can leave a contact or start their own profile. |
Built for the event floor
At a conference you meet dozens of people in a day, in crypto or any other field. Most of those contacts end up as loose cards, half-remembered conversations and unanswered requests.
Before
Choose the fields a tap shows and set the event name. It takes a minute.
At the event
They tap. Your verified profile opens on their phone and they can leave their contact, without installing anything.
After
Each contact is in Certus IQ with the date, the event and their consent on record, marked "Met via card".
These holder tools are built and open together with the card pilot.
Planned next
Not part of the pilot. The concept film shows them.
- Private voice notes after a conversation
- A follow-up list the next morning
- Meeting history as supporting context for introductions
What a verified tap confirms, and what it does not
A verified tap is evidence about the card. It is not a background check.
Confirms
- The link came from a card issued by Certus IQ, not from a copy of its link or QR code.
- The tap is new. Each code is accepted once.
- The card is linked to a registered Certus IQ account and has not been deactivated.
Does not confirm
- A government ID. A verified tap is not an identity check.
- That the person holding the card is its owner. A lost card should be deactivated at once.
- The statements on the profile. Each one carries its own evidence level.
Privacy
- The card stores a link and its own keys, and no personal data.
- The holder chooses which fields a tap shows.
- A visitor's contact is saved only when they enter it and agree. The time of consent is recorded.
- The visitor's IP address is not stored. A keyed hash of it, which changes daily, is kept to limit abuse.
- Each card's keys are derived from a master key when needed and are not stored in the database.
The cryptography has been checked against NXP's published reference values and against a separate, independent implementation. Read the security overview
Where it stands today
As of 11 November 2026.
Live
- Certus IQ platform, in beta since 28 September 2026
- Tap verification service and tap page on certus-iq.io
- English and Japanese
Built, pilot in preparation
- Physical cards, issued first to the Certus IQ team
- Holder settings for shared fields, event name and deactivation
- Contacts saved from a tap, with consent
Planned
- Cards for beta users, in stages
- Voice notes and a follow-up list
- Work with industry events
Questions
Does the other person need an app?
No. They hold their phone near the card and a web page opens. No app, no account and no login.
Which phones work?
iPhone XS and later, and most Android phones with NFC switched on. On a phone without NFC, the QR code on the card opens Certus IQ instead. A QR code can be copied, so it never counts as a verified tap.
What if someone copies my card or forwards the link?
They get an unverified view and no contact form. The printed design and the QR code can be imitated. The chip's one-time code cannot.
What if I lose my card?
Deactivate it in your Certus IQ settings. From then on a tap shows that the card is not active.
What does the card store about me?
Nothing personal. The chip holds a link and its own keys. Your profile lives in Certus IQ, and you choose which fields a tap shows.
What is recorded when someone taps?
The card, the time, the event name and whether the tap was verified. The visitor's IP address is not stored. A keyed hash of it, which changes daily, is kept to limit abuse. Contact details are saved only when the visitor enters them and agrees.
How do I get a card?
The pilot starts with the Certus IQ team. Cards then go to beta users in stages, free of charge during the pilot. A card opens your Certus IQ profile, so the first step is to create one.
A card is only as convincing as the record behind it.
Build your Certus IQ profile now. Cards go to beta users first.