If you buy leads in insurance, lending, debt, or any other regulated space, you’ve seen the terms TrustedForm and Jornaya (formerly LeadiD) attached to your data. They’re not marketing fluff — they’re independent records of consumer consent, and in a world of TCPA litigation, they’re one of the most important things a lead can carry. Here’s what they actually prove and how to use them.
The problem they solve
When you call or text a consumer, you’re relying on the claim that they agreed to be contacted. If that claim is wrong — the consent was fabricated, or the consumer never really opted in — you’re exposed. Regulators and plaintiffs’ attorneys don’t accept “the vendor told me they consented.” You need evidence, captured at the moment of opt-in, that you don’t control and can’t fake.
That’s exactly what these certificates are: third-party, tamper-evident records of when and how a consumer submitted their information.
TrustedForm
TrustedForm (by ActiveProspect) generates a certificate at the moment a consumer submits a form. It captures a record of the interaction — the page they were on, the consent language they saw, timestamps, and technical metadata — and stores it independently. Buyers can retain the certificate as proof that the consumer saw specific disclosure language and agreed to be contacted.
The practical value: if a lead’s consent is ever questioned, you can point to an independent record instead of your own word.
Jornaya (LeadiD)
Jornaya works on a similar principle. It places a unique identifier (a LeadiD token) on the lead at the point of capture and records the consumer’s journey and consent event. It’s widely used to verify that a lead is genuine, to spot leads that were sold too many times, and to document the opt-in for compliance.
Both tools do the same core job — turn “trust me” into verifiable evidence — with slightly different mechanics. Many leads carry both.
What to actually check
A certificate is only as good as what’s on it. When you receive leads with consent records, verify:
- The certificate exists and is valid — not expired, not broken, actually retrievable.
- The disclosure language matches your use — the consumer needs to have consented to contact about your kind of offer, ideally naming your company or a clear category.
- The timestamp is fresh and consistent — the consent time should line up with when the lead was generated.
- It’s retained properly — capture and store certificates on your side; don’t assume you can pull them later.
What certificates don’t do
Be clear on the limits. A certificate proves a consent event happened — it does not by itself guarantee the lead is high-intent, reachable, or a good fit, and it doesn’t replace your own compliance program (your DNC scrubbing, your calling practices, your legal counsel). Think of it as one essential layer, not the whole wall.
The buyer’s bottom line
The rule is simple: no verifiable consent, no purchase — especially in regulated verticals. A vendor who attaches TrustedForm or Jornaya to their leads is telling you they built for compliance from the start. A vendor who gets vague when you ask is telling you something too.
Want leads that come with consent documentation built in? Get a quote and ask us to walk you through exactly what certificates you’ll receive.