> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://tieback.io/docs/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://tieback.io/docs/_mcp/server.

# Trust Signals

> The composite Trust Score, its signal breakdown, and evidence-led investigation tools for Digital Product Passport scan activity and credibility.

Trust Signals is the credibility layer of Passport Intelligence. It tells operators how likely recent scan activity is to be real, intentional, and customer-driven, and gives them the evidence to investigate when it isn't.

## The Trust Score

The **Trust Score** is a composite, brand-scoped indicator that summarises the credibility of recent scan activity. A lower score indicates activity worth reviewing; a higher score indicates that recent activity is consistent with normal customer behaviour.

The score is:

* **Composite**: built from multiple independent signals
* **Explained**: every score is accompanied by a component breakdown
* **Refreshed continuously**: recomputed on a near-real-time cadence
* **Operator-actionable**: authorised operators can manually trigger a recompute

## Signal Types

The Trust Score is informed by signals such as:

| Signal                         | What it indicates                                                      |
| ------------------------------ | ---------------------------------------------------------------------- |
| **Post-revocation scan**       | Activity against passports that have been revoked                      |
| **Cross-country short window** | The same identity scanning across countries within a short time window |
| **VPN / proxy scan**           | Scans originating from networks commonly used to mask origin           |
| **Scan spike**                 | Sudden, atypical bursts of activity against a product or passport      |
| **High-risk ASN**              | Activity from network ranges with elevated risk profile                |
| **Bot pressure**               | Patterns consistent with automated rather than human interaction       |

Each signal is annotated with a severity level, either **info**, **review**, **elevated**, or **high**, to help operators triage.

## Signal Breakdown

Every Trust Score is paired with a breakdown of contributing signals. This is deliberate: scores without explanation are not actionable. The breakdown shows:

* which signals are currently active
* their severity
* their contribution to the overall score
* the underlying evidence

## Evidence-Led Investigation

Operators can drill into any signal to inspect the events that generated it. The investigation drawer brings together:

* the signal type and severity
* the events that triggered it
* relevant identity context (product, passport, batch, lot)
* linked lifecycle and scan history

This makes Trust Signals an *investigation* tool, not just a scoring tool.

## Network and Bot Awareness

Trust signals are interpreted with awareness of network context (e.g. VPN, proxy, high-risk ASN) and patterns consistent with automated traffic. This allows Passport Intelligence to differentiate between unusual *but legitimate* activity (such as a viral product moment) and activity that warrants review.

## Refresh and Recency

Trust signals recompute on a near-real-time cadence as new activity arrives. Authorised operators (Owner, Admin) can also trigger an on-demand recompute from the Trust tab.

## Coming Soon

Additional refinements are planned, including richer cross-signal correlation and confidence-weighted geolocation interpretation. These extend the existing foundation rather than replace it.

For headline figures see [Intelligence Overview](/passport-intelligence/intelligence-overview); for the underlying scan data see [Scan Visibility](/passport-intelligence/scan-visibility).

## Related Docs

* [Passport Intelligence](/passport-intelligence/passport-intelligence)
* [Investigation Timelines](/passport-intelligence/investigation-timelines)
* [Scan Visibility](/passport-intelligence/scan-visibility)
* [Data & Privacy](/passport-intelligence/data-privacy)