K Ketpy Authenticator
Onboard or Buy
Every feature, end-to-end

One platform for issue, verify & embed.

Issue authentic documents, push them to a tenant-branded public portal, embed that portal anywhere — all from a mobile-first, tenant-isolated dashboard. No SDK, no API keys, no Node.

Onboard or Buy See pricing
Feature spotlight

The Public Verification Portal is the whole product.

Every other feature points to this: a tenant-branded, QR-resolvable page where anyone with a phone can instantly verify a document you issued. Photo masked. PII masked. Brand front and centre.

  • Live at /v/your-slug — or embed it anywhere
  • QR + Mobile + Record-ID lookup, all three resolve to the same record
  • Failed attempts logged with IP for fraud detection
  • Rate-limited 30 attempts per IP per 10 minutes
See it live on a demo tenant
Quick start

From signed contract to first verifiable PDF in 15 minutes.

This isn't an estimate — it's the actual median onboarding time across our existing tenants.

1

You sign & pay

UPI / bank / cheque. One annual invoice, no auto-renewals.

2

We provision your tenant

Slug, primary colour, logo, modules enabled. First manager invited via email.

3

Manager logs in

Force-change password on first login. Branding tab confirms colours.

4

Add a record

Either one-by-one form or bulk Excel import with preview & error report.

5

Generate & push

Pick a template, generate PDF (with QR), push to public portal. Live.

Headline features

Everything the platform does, at a glance.

Eighteen production-grade capabilities — not a checklist of marketing buzzwords.

Public Verification Portal

Tenant-branded /v/{slug} page where anyone can verify by QR or text input. Live with one click.

Embeddable Widget

Drop a 5-line iframe into any website. Auto-resizes via postMessage. Works on WordPress, Shopify, anything.

80 Polished Templates

10 designs per module × 8 modules. Pick the active one per module, swap any time.

Server-side PDF

Real HTML → PDF via Dompdf — no Node, no fonts to install. Custom paper sizes for ID cards.

QR On Every Document

Every generated PDF embeds a QR pointing to the canonical verification URL. Scannable from any phone camera.

Bulk Excel Import

Upload xlsx or csv → preview validity → confirm. Invalid rows downloadable as CSV error report.

Bulk PDF Generate

Excel in, ZIP of named PDFs out. Generate hundreds of certificates in one operation.

PDF or PNG Download

Every generated document downloads as PDF — or as a PNG named after the recipient.

Mobile QR Scanner

Built-in camera scanner on the public verify page. No app to install. Powered by Nimiq qr-scanner.

Per-Tenant Branding

Custom primary colour, logo, welcome paragraph, contact info. Live preview while editing.

Activity Log

Every state-changing action logged with actor, IP, user-agent, details. Filterable + CSV exportable.

Impersonation

Service Provider can impersonate any manager. Yellow banner across the UI; both start and end logged.

Email Onboarding

Branded HTML email auto-sent with credentials when a tenant is provisioned. SMTP configurable from admin.

Suspension & Reactivation

One toggle suspends a tenant; public portal politely shows "service unavailable" — no records lost.

Activity-aware Rate Limiting

Login: 5 fails / 15 min / email. Public verify: 30 attempts / IP / 10 min. CAPTCHA on both login pages.

Force-change Passwords

First login forces a new password. Service Providers can rotate any manager's credentials.

Tenant Isolation

Every record-touching query carries tenant_id. Managers literally cannot see each other's data.

Plain Shared Hosting

Vanilla PHP 8.3 + MySQL. Upload, import SQL, configure DB — running in under 15 minutes.

How it actually works

Real engineering, exposed in plain sight.

Each capability below is paired with the exact mechanism we use — not handwaving.

01 · Issue

Print-ready PDFs, server-side, in one second.

We render real HTML through Dompdf and embed a QR right into the document via the bundled phpqrcode library. ID cards get true 60×95mm paper; certificates get A4. PNG fallback via Imagick + Ghostscript when installed.

  • 10 designs per module, 80 total templates shipped
  • Real PDF paper sizes — no white-margin disasters
  • QR baked into the page, not stuck on like a sticker
See pricing
Generated 
POST /manager/creation/id_card/generate
→ Carol-Test - Id Card.pdf
→ 60×95 mm paper, 1.4 s
→ QR → /v/r/abc123def456
→ pushed to public portal
02 · Verify

Three ways to verify. One source of truth.

Scan the QR, punch in a mobile number, or paste the record ID — any of the three resolve to the same record. Results show your tenant brand and mask PII (phone numbers, partial IDs).

  • QR scan via Nimiq qr-scanner — no app install
  • Rate-limited 30 attempts per IP per 10 minutes
  • Failed attempts logged with IP + module + input
Read security commitments
Verified 
GET /v/r/abc123def456
→ Aviral Asthana
→ BL-2026-C-001
→ 98xxxxxxx10 (masked)
→ Issued by Brightline Academy
→ Verified ✓
03 · Embed

One iframe. Five lines. Done.

The /embed/{your-slug} route IS the embed. Paste a snippet into any HTML page. We send window height via postMessage so your host page auto-resizes — no scroll-within-scroll.

  • No SDK to install, no API keys to manage
  • Inherits tenant colours & logo automatically
  • Works on WordPress, Shopify, plain HTML
Embed 
<iframe src="https://yoursite.com
  /embed/your-slug"
  style="width:100%;
         min-height:720px;
         border:0;"
  loading="lazy">
</iframe>
04 · Operate

Activity log, exports, impersonation — everything an operator needs.

Every state-changing action is logged with actor, IP, user-agent, and details. Filter by actor / target / action. Export to CSV. Service Provider can impersonate any manager — a yellow banner shows the entire UI is borrowed.

  • Activity log filter + CSV export
  • Impersonation start & end both logged
  • Contact submissions with status workflow
Audit 
2026-05-26 14:02:17
super_admin#1 → tenant#3
action: impersonate.start
ip: 152.59.x.x
ua: Chrome 138 / Mac

2026-05-26 14:08:42
super_admin#1 → tenant#3
action: impersonate.end
Eight modules

One feature set. Eight document kinds.

Every module supports the same verification + bulk + embed feature set. Switch modules on or off per tenant — nothing lost.

10 designs
ID

ID Card

10 templates · portrait & landscape · with photo & QR

QR + Excel + PDF + PNG
10 designs
CT

Certificate

10 templates · A4 · gold-border, modern flat, ribbon, leaf-border

QR + Excel + PDF + PNG
10 designs
M

Membership

10 templates · tier-aware · valid-till & member-since fields

QR + Excel + PDF + PNG
10 designs
LOR

LOR

10 templates · letter format · recipient + relationship + signed-by

QR + Excel + PDF + PNG
10 designs
WL

Welcome Letter

10 templates · warm + corporate variants

QR + Excel + PDF + PNG
10 designs
EX

Experience Letter

10 templates · HR-grade with role / dept / dates

QR + Excel + PDF + PNG
10 designs
OF

Offer Letter

10 templates · classic + startup tone

QR + Excel + PDF + PNG
10 designs
+

Custom

10 templates · one free slot · rename freely

QR + Excel + PDF + PNG
Embed-anywhere

Drop the verification portal into any website you already have.

The iframe-embed works on any HTML page — here are the targets we've confirmed personally.

W

WordPress

Block / shortcode
S

Shopify

Page section
F

Framer

Embed component
W

Wix

HTML embed
SP

SharePoint

Embed web part
</>

Plain HTML

Any page, any host
POWERED BY PHP 8.3 MySQL 8 Dompdf 3.1 phpqrcode PHPMailer 6.9 SimpleXLSX Nimiq qr-scanner Hostinger / cPanel
Built-in vs. add-on

Everything below is built in — not gated behind a "premium tier".

Most "verification SaaS" products lock half this list behind enterprise pricing. We don't.

Capability
Ketpy Authenticator
Typical SaaS
Public verification portal
Included
Plus tier
Embeddable iframe widget
Included
Pro tier
Bulk Excel import & export
Included
Add-on
Bulk PDF generate (ZIP)
Included
Not offered
PNG download (named after recipient)
Included
Not offered
Per-tenant branding (colour, logo, copy)
Included
Enterprise tier
Impersonation with audit log
Included
Not offered
Activity log + CSV export
Included
Pro tier
Self-host on plain shared hosting
Yes
No
India-resident data
Always
Sometimes
14-day refund
Yes
Rarely
Feature FAQ

The questions engineers ask first.

Do you support custom templates per tenant?
Yes — tenants pick which of the 10 shipped designs per module is active. Fully bespoke templates are available as a one-time engineering engagement: write to team@ketpy.com.
Can I customise the QR payload?
The QR resolves to /v/r/{record_uid} on your tenant. The record UID is server-generated and unguessable. Adding extra payload fields requires a small engineering tweak — ask us.
What's the file-upload limit for photos?
Default is 4 MB per photo; configurable via php.ini on your server. We sanitise via extension + MIME whitelist (jpg, png, webp) using finfo.
How many records can one tenant hold?
Unlimited on the application side. MySQL on a $5 shared host comfortably holds a few hundred thousand records before you'd want to upgrade.
Does the embed expose any tracking?
No third-party trackers. The embed only ships your tenant's session cookie when needed, plus a postMessage for auto-resize. Zero analytics pixels.
Ready when you are

See it on your data, in a real tenant.

We'll provision a tenant in your name, walk your team through it, and ship the first verified document together — usually within one business day.

Onboard or Buy See pricing