How do I verify a forwarded email?

Ask the mailbox owner to export the original email as a .eml file, then upload it to selfcheck.email. The DKIM signature on the original indicates whether the content is unchanged.

What does DKIM verification establish?

A valid DKIM signature establishes that the email content has not been altered since the sender's mail server signed it. It does not establish that the content is true or that a specific person wrote it.

Yes. You can verify up to 5 emails per hour without an account. Free accounts get 5 cases per month with timestamped PDF reports.

Does SelfCheck store my email?

No. The email file is processed in memory and deleted immediately. Only cryptographic hashes and the PDF report are retained.

← India Documents

India Documents — Trust & Methodology

How SelfCheck verifies Indian digitally signed documents. Our methodology, data handling, and legal references.

Not a government service

SelfCheck is operated by HandyHope CIC (UK). We are not affiliated with, endorsed by, or connected to any Indian government body, UIDAI, CCA, DigiLocker, or any certifying authority. Our verification is an independent technical check of publicly verifiable digital signatures.

Operator identity

Legal nameHandyHope CIC

Company number16540333

JurisdictionEngland & Wales

ICO registrationZB993576

Company typeCommunity Interest Company (CIC)

Data handling

Source documentDeleted immediately after processing

Document hashSHA-256 retained for audit trail

Aadhaar dataModule OFF by default. When enabled: last 4 digits only.

Audit logAppend-only, retained indefinitely

Legal references (informational only)

These references provide traceability to the legal basis for digital signatures in India. They are cited for transparency. SelfCheck does not claim authority under any of these statutes.

IT-ACT-2000Digital & electronic signature validity (Sections 3, 3A, 5)

CCA-RCAIIndia PKI trust anchor — root CA for licensed CAs

NIC-DIGILOCKERStandards for digitally signed documents

Known limits

A valid seal confirms the signed content is unchanged since sending. It does not confirm the content is true.
Certificate chain validation depends on publicly available CRL/OCSP endpoints. If these are unavailable, the result is INCONCLUSIVE.
SelfCheck cannot verify scanned, photographed, or printed documents — only digitally signed originals.
Issuer policy matching covers Tier 2 verification. A valid CCA chain does not by itself confirm the signer is the expected authority for this document type.

HandyHope CIC · ICO ZB993576

···