What Is TrustedForm? Why Lead Buyers and Sellers Need It

TrustedForm is a consent certificate from ActiveProspect that records, in a tamper-proof way, that a consumer agreed to be contacted on a specific page at a specific moment. When a person fills out a lead form, TrustedForm captures the page they saw, the disclosure language they agreed to, and how they interacted with the form, then issues a certificate URL that any buyer or seller can store and audit later. That certificate is the difference between a lead you can defend and a lead that becomes a lawsuit. Under the Telephone Consumer Protection Act (TCPA), every unwanted call or text can cost $500 to $1,500 in statutory damages, so proving consent is not optional. Both sides of a lead transaction need TrustedForm: sellers use it to prove the consent they are selling is real, and buyers use it to verify that proof before they pay or dial. This guide explains what a TrustedForm certificate is, why buyers and sellers both depend on it, how it compares to Jornaya, and how Lead Distro AI validates it automatically.

Key Takeaways

• TrustedForm is certified, tamper-proof proof of consent issued by ActiveProspect the instant a consumer submits a lead form, retained and auditable for up to five years.
• Sellers need TrustedForm to prove the lead is real and to command higher prices, because buyers pay more for certified leads they can defend.
• Buyers need TrustedForm to verify consent before paying or calling, which is their strongest defense in a TCPA dispute.
• TrustedForm and Jornaya solve overlapping but different problems: TrustedForm documents the consent moment, while Jornaya verifies the consumer's journey and intent.
• Lead Distro AI validates every TrustedForm certificate at ingest, fingerprint-matching the lead's email and phone to the certificate before the lead is distributed.

What is TrustedForm?

TrustedForm is a product from ActiveProspect that documents consumer consent during a lead event. A small piece of JavaScript called TrustedForm Certify runs on the lead form, captures the page's content and the consumer's interactions, and generates a unique certificate accessible through a web URL. According to ActiveProspect, each certificate records the page source, user events, metadata such as IP address and geolocation, and a session replay of what the consumer actually saw and did, then retains that record for up to five years.

The result is a single, shareable link that answers three questions every consent record must answer: did this person consent, what exactly did they agree to, and can you prove it. Because the certificate is created at the moment of submission and cannot be altered after the fact, it stands up as evidence. That is why a TrustedForm certificate now travels with the lead as standard practice across regulated verticals like insurance, mortgage, solar, and legal.

Why lead sellers need TrustedForm

For a lead seller, TrustedForm is both a shield and a sales tool. The shield is legal: if a buyer or a regulator ever challenges where a lead came from, the certificate proves the consumer opted in on a real page with real disclosure language. ActiveProspect notes that obtaining certificates is vital for lead vendors precisely because it documents consent at the source rather than relying on a vendor's word.

The sales tool is commercial. Certified leads sell for more and sell faster. When you attach a TrustedForm certificate to every lead, buyers can run their own verification and onboard you as a trusted source instead of treating your leads as unproven. Sellers who certify reduce returns and disputes, because a buyer who can confirm consent has far less reason to reject the lead. If you are building a lead business, read our guides on how to sell leads and setting clear lead acceptance criteria to see where certification fits into the transaction.

Why lead buyers need TrustedForm

For a buyer, TrustedForm is the line between a lead you can call and a liability you just purchased. Buying leads without verified consent means you are inheriting the seller's compliance risk: if the consent was fabricated or the disclosure was missing, you are the one placing the call, and you are the one a TCPA plaintiff names. A certificate lets you check the consent yourself before money changes hands.

Verification is not just reading the certificate, it is matching it to the lead. A buyer should confirm that the email and phone number on the lead actually match the certificate, that the certificate is recent, and that the form was not hidden or framed in a way that obscured the disclosure. This is exactly the kind of check that protects budget the way duplicate lead detection does, except here the risk is legal rather than wasted spend. Buyers who require TrustedForm on every lead build a documented, auditable consent trail across every vendor they work with.

TrustedForm vs Jornaya (LeadiD)

TrustedForm and Jornaya are the two dominant consent verification platforms, and they are often confused. TrustedForm, owned by ActiveProspect, documents the consent moment with a visual, tamper-proof record of what the consumer saw and agreed to. Jornaya, formerly LeadiD and now part of Verisk Marketing Solutions, issues a cryptographic LeadiD token that timestamps and fingerprints the lead event and adds behavioral intelligence across the consumer journey. As Claim Supply's comparison frames it, TrustedForm focuses on documenting consent while Jornaya focuses on verifying the journey and intent behind it.

Many sophisticated operations use both. The platforms do not interfere with each other, and running them together gives you a visual record of consent plus an independent behavioral fingerprint. If you want both, require TrustedForm from every vendor as the baseline and layer Jornaya on top where you need journey-level fraud detection.

How TrustedForm fits into TCPA compliance

TrustedForm does not make you TCPA compliant by itself, but it provides the evidence that compliance depends on. The TCPA requires prior express written consent before many marketing calls and texts, and the burden of proving that consent falls on the business that places the call. A certificate is how you carry that burden. As ActiveProspect's leadership has argued to regulators, durable consent record-keeping is the foundation of defensible lead generation.

Consent documentation is one control among several. For the full picture, including disclosure language, do-not-call scrubbing, and revocation handling, read our complete guides to TCPA compliance for lead distribution and TCPA compliance for lead generation. Think of TrustedForm as the proof layer that makes every other control auditable.

How Lead Distro AI captures and validates TrustedForm certificates

Lead Distro AI validates TrustedForm automatically so you never have to trust a certificate on faith. When a supplier sends a lead, they include the certificate URL alongside the contact details. At ingest, Lead Distro AI calls the TrustedForm Certificate API using your own API key, retains the certificate, and runs a match against the lead. The platform checks whether the email and phone on the lead fingerprint-match the certificate, how old the certificate is, and whether the form was framed or masked, then stores the full result on the lead before it is distributed.

This means a lead with a missing, expired, or mismatched certificate is flagged before it reaches a buyer or your dialer. Lead Distro AI supports Jornaya LeadiD token verification the same way, using your own Jornaya credentials, so you can require one or both on any campaign. You can see how this fits into routing and the buyer portal through the product tour, or start a free trial and validate your first certified lead in minutes.

"Consent verification used to be a manual spot-check that most teams skipped until a lawsuit forced the issue," says Rafael Hernandez, Founder and CEO of Lead Distro AI. "We made it automatic at ingest because the only consent record worth anything is the one you actually checked against the lead."

FAQ

What is a TrustedForm certificate?

A TrustedForm certificate is a tamper-proof record, created by ActiveProspect at the moment a consumer submits a lead form, that documents their consent to be contacted. It captures the page the consumer saw, the disclosure language, their interactions, and metadata like IP and geolocation. The certificate is accessible through a unique web URL and is retained for up to five years, so buyers and sellers can audit consent long after the lead event.

Is TrustedForm required by law?

No single law names TrustedForm, but the TCPA requires you to prove prior express written consent before many marketing calls and texts, and a TrustedForm certificate is how most lead businesses meet that burden. Without documented consent, statutory damages of $500 to $1,500 per call or text can apply. TrustedForm is the practical standard for producing that proof in a dispute, which is why regulated verticals treat it as mandatory.

What is the difference between TrustedForm and Jornaya?

TrustedForm documents the consent moment with a visual, tamper-proof certificate of what the consumer saw and agreed to. Jornaya, formerly LeadiD, issues a cryptographic token that fingerprints the lead event and adds behavioral intelligence across the consumer journey. TrustedForm is best for proving consent, while Jornaya is strong for fraud detection and intent signals. Many operations use both together for maximum protection.

Do lead buyers or sellers pay for TrustedForm?

Both can. Sellers typically certify the leads they generate so they can prove and sell certified consent, and buyers often retain or verify certificates on the leads they purchase. Pricing is set by ActiveProspect and depends on volume and the operations you run, such as retaining and matching. The shared goal is the same: a documented consent trail that protects everyone in the transaction.

How does Lead Distro AI verify TrustedForm certificates?

Lead Distro AI validates each certificate at ingest using your own ActiveProspect API key. It retains the certificate, fingerprint-matches the lead's email and phone against it, checks the certificate's age, and detects whether the form was framed or masked. The full result is stored on the lead before distribution, so leads with missing or mismatched certificates are flagged automatically. Jornaya LeadiD verification works the same way with your Jornaya credentials.

Conclusion

TrustedForm is the consent layer that makes a lead defensible. Sellers use it to prove and price their leads, buyers use it to verify consent before they pay or call, and both sides reduce disputes and legal exposure in the process. Pairing it with Jornaya where you need journey-level fraud detection gives you the strongest possible consent trail. The piece most teams miss is verification: a certificate only protects you if you actually match it to the lead, which is why Lead Distro AI checks every certificate automatically at ingest. To build a documented consent trail across every vendor you work with, explore the buyer portal and our TCPA compliance guide.