Loading…
API documentation
Embed Decision Dossier
Drop a verified Decision Dossier card into any page — a blog post, a Notion doc, a case study, a customer-facing trust page. The embed is the same signed proof shown on the public verify page, served as a lightweight standalone view with no marketing chrome.
What you get
A compact card with the verdict, dossier id, policy version, confidence, and a short signature fingerprint — plus a 'Verified by Decionis' link to the full public verification page.
Privacy-safe
The embed surfaces exactly the same fields as the public verify page (outcome, policy_version, dossier_id, confidence, short signature). No shop or customer data is included. The full verification — chain, payload hash, JWKS, asymmetric proof bundle — opens on click.
Auto-embed script (recommended)
Drop a marker div and load the embed script once per page. Works on any CMS / blog / doc system that allows custom HTML and external scripts.
<div
data-decionis-dossier="DSR-EXAMPLE-0123456789ab"
data-decionis-sig="0123456789abcdef0123456789abcdef">
</div>
<script src="https://decionis.com/embed/dossier.js" async></script>The script finds every element with data-decionis-dossier and replaces it with a sandboxed iframe pointing at the embed view. Safe to include the script tag once per page even with multiple cards. SPA-friendly via a MutationObserver, so cards added after navigation get picked up automatically.
Iframe-only (no script)
If your CMS blocks third-party scripts but allows iframes, paste the iframe tag directly. You lose the auto-resize fallback but the card renders identically.
<iframe
src="https://decionis.com/verify/decision-dossiers/DSR-EXAMPLE-0123456789ab/embed?sig=0123456789abcdef0123456789abcdef"
loading="lazy"
title="Decision Dossier verification"
sandbox="allow-scripts allow-same-origin allow-popups allow-popups-to-escape-sandbox allow-top-navigation-by-user-activation"
style="border:0;width:100%;max-width:560px;height:280px;border-radius:14px;background:transparent">
</iframe>Attributes
Customize sizing and origin from the marker div. Defaults match the standard Stripe-receipt-sized card.
| Attribute | Required | Default | Description |
|---|---|---|---|
| data-decionis-dossier | Yes | — | The dossier_id you got back from /v1/protocol/evaluate-decision or the free dossier generator. |
| data-decionis-sig | Recommended | — | The public verification signature for the dossier (same one used on /verify/decision-dossiers/[id]?sig=…). Without it the card renders an unverified placeholder. |
| data-decionis-origin | No | https://decionis.com | Override only if you proxy Decionis through your own domain. |
| data-decionis-height | No | 280 | Iframe height in pixels. Bump if you embed in a narrow column where the card wraps. |
| data-decionis-max-width | No | 560 | Iframe max width in pixels. The card stretches to 100% within this max. |
Privacy & limits
What the embed does and doesn't do.
- The embed page is served with
noindexand aContent-Security-Policy: frame-ancestors *header so any site can iframe it. - The iframe runs with a restrictive sandbox; it cannot read the host page or set cookies on it.
- Clicking the “Verified by Decionis →” link in the embed opens the full public verify page in the top window so the visitor leaves the host site only on intent.
- No analytics calls fire from inside the embed. Page-view counts come from the host site's existing tools; downstream verify-page visits are attributed to the standard decision-dossier instrumentation.