Anyone with the file can upload it here. GustKit checks the digital seal and the audit record. The upload is not stored.
Upload the PDF. GustKit checks the digital seal and, when we have a record, the stored hashes. The file is not kept.
A valid seal means the bytes still match what was signed. It does not, by itself, prove a government ID. The record shows the email check, the consent and the time.
Editing the PDF after the seal, including with another tool, makes the check fail. That is the point of the seal.
No. The check reads it and discards it. Only hashes and events from the original signing are stored.
The certificate page prints /verify/ and the id. You still upload the PDF. The id finds the audit record.