Know
Bronze
Baseline Readiness
Bronze is Baseline Readiness: the starting Trust Badge after the credentialing pathway and Legacy Core review.
Start here
Trust Badges
Don't just say it. Show it.
Bronze, Silver, and Gold Trust Badges are visible signals tied to live verification in the Public Business Trust Registry. Trust should be verifiable.
Bronze, then Silver, then Gold
Trust Badge tiers
Bronze is Baseline Readiness. Silver is Evidence-Verified Implementation. Gold is Ongoing Verified Readiness.
These are not three options on a menu. Bronze is the start. Silver and Gold are earned after that.
Next
Silver comes after Bronze. Implementation has to be documented and reviewed.
Show
Silver
Evidence-Verified Implementation
Silver is Evidence-Verified Implementation: documented implementation reviewed under the applicable Legacy Core credential standard.
Earned after review
Next
Gold comes after Silver. Continued readiness has to be shown over time.
Maintain
Gold
Ongoing Verified Readiness
Gold is Ongoing Verified Readiness: continued cybersecurity readiness demonstrated over time under the applicable Legacy Core credential standard.
Earned after review
Why it matters
Trust should be verifiable.
Customers, lenders, insurers, and partners may ask for proof, not promises. A Legacy Core Trust Badge links to live verification in the Public Business Trust Registry. Owners earn that record through The Legacy Protection Journey and Legacy Core review — not by finishing a preview or a free Trust Audit. The badge does not guarantee a contract, coverage, or compliance.
Customer and client questions
Customers may ask how you protect their data. A live registry record is something they can check.
Insurance conversations
Brokers and carriers can ask about cybersecurity practices. A credential can help demonstrate documented readiness. It does not guarantee coverage or lower premiums.
Vendor and partner reviews
Partners may ask for a record they can check before sharing work or data.
Contracts and opportunities
A security question can show up in a proposal or intake form. The credential provides a record they can check. It does not guarantee a contract.
What you get
Something a client can check without calling you.
The badge is the visible piece. Behind it is a reviewed Trust Credential and a live registry record. That is what you can show when someone asks how you handle their information.
01
A public answer
Anyone can open your registry record and see the business, the tier, and whether the credential is current.
02
A named tier after review
Bronze is Baseline Readiness. Silver is Evidence-Verified Implementation. Gold is Ongoing Verified Readiness. Each one is issued after Legacy Core review. The free Trust Audit does not issue a badge, and Silver and Gold cannot be self-declared or bought as an upgrade.
03
A record that stays with this business
Clients can check the listing without a phone call or a forwarded PDF. The credential is issued to the business that earned it.
What the badge does not claim
These limits keep the credential honest. They are why a client can trust the listing.
Issued by Legacy Core
Legacy Core is not a regulator. The badge is not a license, permit, or government endorsement.
Reviewed readiness, not a promised outcome
The badge shows a demonstrated commitment to readiness at the issued tier. It does not promise the absence of risk or any particular incident outcome.
Tied to the business that earned it
The credential belongs to the credentialed business. It cannot be assigned to subsidiaries, affiliates, or successor entities without re-credentialing.
A credential, not a security service
Legacy Core issues reviewed Trust Credentials. It does not sell MSP, MSSP, or monitoring services. Implementation stays with providers the business chooses.
Earned after review
Buying software, monitoring, or an Alliance Partner package does not issue a Trust Badge. Legacy Core reviews whether credential requirements have been met.
Bronze, then Silver, then Gold
How each tier is earned
Bronze follows The Legacy Protection Journey and Legacy Core review. Silver and Gold are earned outcomes with evidence. Completing the Journey does not automatically issue a Trust Badge. Silver and Gold cannot be earned through self-attestation.
Protect what you've built. Know what to do when it matters.
- Bronze
Baseline Readiness
Bronze Trust Badge
Know it. Document it. Own it.
Bronze is Baseline Readiness: the starting Trust Badge after the credentialing pathway and Legacy Core review.
Start here
Credentialing pathway
Enter the credentialing pathway, complete the required credentialing areas, and undergo Legacy Core review. A Trust Badge is issued only after approval.
Next
Next: Silver. Documented implementation, then review.
- Silver
Evidence-Verified Implementation
Silver Trust Badge
Show it.
Silver is Evidence-Verified Implementation: documented implementation reviewed under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
Alliance Partner-supported pathway
Alliance Partners may help implement cybersecurity improvements and submit evidence-backed attestations. A partner reviewing work it implemented is not an independent review. Payment or partner membership does not guarantee approval. Legacy Core determines whether Silver has been earned.
External review, when appointed
Qualified external reviewers may evaluate evidence within their competence when appointed for that scope. Those relationships are being established. Self-attestation is never accepted.
Next
Next: Gold. Continued readiness shown over time.
- Gold
Ongoing Verified Readiness
Gold Trust Badge
Maintain it.
Gold is Ongoing Verified Readiness: continued cybersecurity readiness demonstrated over time under the applicable Legacy Core credential standard.
Cannot be earned through self-attestation
Alliance Partner-supported pathway
Alliance Partners may help implement additional protections and submit evidence-backed attestations. A partner reviewing work it implemented is not an independent review. Payment or partner membership does not guarantee approval. Legacy Core determines whether Gold has been earned.
External review, when appointed
Qualified external reviewers may evaluate evidence within their competence when appointed for that scope. Those relationships are being established. Self-attestation is never accepted.
How you use it
Put it where someone would ask.
The badge earns its keep in the same place a client already looks. Every badge image should open your live verification URL. That link is the proof.
Your website
A prospect can check you before they book a call.
Email signatures
Every reply can carry the live record.
Proposals and packets
The answer is already in the file they asked for.
The office and printed materials
What they see in person matches the public listing.
The live link
Every credential has a verification URL at /verify/<credential-ID>. The page shows Verified, Expired, or Not Found.
How to keep the record honest
- Use the issued artwork as issued. Do not change the badge color, proportions, or wording.
- Show the tier you hold now: Bronze, Silver, or Gold.
- If the credential expires, lapses, or is revoked, take the badge down.
- Let the public registry speak for status. Do not imply a tier or listing that is not there.
If a listing looks wrong
The public record has to stay true.
Reports of badge misuse (display after expiration, a tier the business has not earned, modified artwork, or impersonation of a credentialed business) are investigated by Legacy Core and may result in credential revocation. A revoked credential must not be presented as active.
Need help confirming a record? Write verify@legacycore.com.
Frequently asked questions
What does the Trust Badge actually signal?
That the business has progressed through Legacy Core’s structured credentialing pathway at the displayed tier and is listed in the Public Business Trust Registry. Legacy Core Trust Badges are visible signals of progress with live verification, not a claim of legal compliance.
How are Silver and Gold earned?
Silver and Gold cannot be earned through self-attestation. Alliance Partners may help implement improvements and submit supporting evidence. A partner reviewing work it implemented is not an independent review. Qualified external reviewers may evaluate evidence when appointed. Those relationships are being established. Buying implementation work does not issue the badge. Contact us for registry renewal details.
Do I have to buy cybersecurity services to earn a Trust Badge?
No. Legacy Core does not require businesses to purchase cybersecurity implementation services or a specific security product to earn a credential. You may work with qualified providers of your choice. Legacy Core determines whether the credential requirements have been met.
How do I link the badge to verification?
Every credentialed business receives a verification URL of the form /verify/[credential-ID]. Wrap the badge image in a link pointing to that URL. The page returns one of three public-facing states: Verified, Expired, or Not Found.
What happens if someone misuses the badge?
Suspected misuse can be reported to verify@legacycore.com. Legacy Core investigates each report, contacts the business, and may revoke the credential where misuse is confirmed. A revoked credential is not shown as a live verified listing.
My credential expired. Can I still display the badge?
No. The badge must be removed from all displays when the credential expires, lapses, or is revoked. Continued display is a misuse and can result in revocation.
Show the credential.
Earn a Trust Badge, then put the live verification link where clients already look.