Does PuraTrust accept payment for verification?

No. Verification is free, always. Editorial review is independent of supplier registration. The platform never accepts payment to suppress, surface, or alter entries.

Can a flagged supplier remove their record from PuraTrust?

No. Disputes append to the public record; nothing is deleted. The audit trail is permanent. A supplier can attach a public response to a flag, and we publish it alongside the original entry.

How often does PuraTrust re-verify a supplier?

Domain control is re-checked quarterly. A failure transitions a record from verified to claimed-pending status and emails the supplier. Hard revocation follows after a 30-day grace if control is not restored.

What evidence does an ISO 17025 partnership require?

A direct attestation from the issuing laboratory confirming the partnership, the methods used, and the period covered. Self-claimed partnerships without lab confirmation appear as pending until the editorial team can verify with the lab directly.

Apr 27, 2026

How PuraTrust verifies a supplier

A walk through the evidence checks every record passes before it earns the verified mark on PuraTrust.

What we check

A registry entry passes through a sequence of independent evidence checks before the mark next to it can read verified. The order below is the order an entry moves through the queue.

Licensing and registration

State pharmacy boards, federal compounding registries, import licenses, and corporate filings. We pull from the public record, normalize the entries, and link the source. A missing license is not a flag on its own; a misrepresented license is.

Laboratory partnership

We verify the issuing laboratory's ISO 17025 status directly with the lab, not through the supplier's website. A laboratory that confirms the partnership and the methods is enough to move the entry forward. A self-claimed partnership without confirmation stays at pending.

Certificate of analysis cross-referencing

For each supplier we sample a recent lot, request the issued COA, and compare its content hash to the document the supplier publishes on their site. Hashes that do not match become public record. Hashes that do match advance the entry.

Policy review

Refund language, ship-to disclosures, and stated chain-of-custody. We index the published text, so changes over time are visible in the audit trail. A policy that contradicts a vendor's actions becomes part of the supplier's incident history.

Customer evidence aggregation

Forum threads, marketplace reviews, and direct submissions through the registry are deduplicated, bot-filtered, and aggregated. We never amplify, never pay, never accept supplier payment for placement. Volume and pattern matter; individual reviews do not move status on their own.

Provenance and incidents

Registrar history, TLS certificate chain, and a 24-month rolling incident window. A new domain with a privacy proxy is a context flag, not a verdict. An open incident with unresolved claims keeps the entry at pending.

What the verified mark means

The verified mark is a record of evidence reviewed. It is not an endorsement. It is not a guarantee of any product, lot, or shipment. It says only: at the moment this mark was issued, the editorial team reviewed every check above and recorded the result.

What it does not mean

We are not the FDA. We do not approve products.
We are not a substitute for your physician, your pharmacist, or your jurisdiction's licensing authority.
A flagged status is a record of unresolved discrepancies, not a legal accusation.

How to claim or dispute an entry

Suppliers register through the registration form on the marketing page or, once accounts are open, through the supplier console. A claim attaches a verified domain to an existing record without creating a duplicate. Disputes append to the public record; the audit trail remains on file.

Write to support@puratrust.id for any of the above.

Frequently asked questions

Does PuraTrust accept payment for verification?: No. Verification is free, always. Editorial review is independent of supplier registration. The platform never accepts payment to suppress, surface, or alter entries.
Can a flagged supplier remove their record from PuraTrust?: No. Disputes append to the public record; nothing is deleted. The audit trail is permanent. A supplier can attach a public response to a flag, and we publish it alongside the original entry.
How often does PuraTrust re-verify a supplier?: Domain control is re-checked quarterly. A failure transitions a record from verified to claimed-pending status and emails the supplier. Hard revocation follows after a 30-day grace if control is not restored.
What evidence does an ISO 17025 partnership require?: A direct attestation from the issuing laboratory confirming the partnership, the methods used, and the period covered. Self-claimed partnerships without lab confirmation appear as pending until the editorial team can verify with the lab directly.