Credential transparency
Understanding Your Trust Credential
A Legacy Core™ Trust Badge gives a business a reviewed credential and a public record other people can check. This page explains the evidence behind that signal, what each tier represents, and where the credential's scope ends.
What you can verify
A public verification record identifies the business, the issued Trust Badge tier, its credential ID, relevant dates, and current credential status. The record reflects Legacy Core's review at the applicable tier, rather than a live scan of the business's technology.
See an example using our verification lookup. The details published and kept private are explained in the registry disclosure.
What each tier represents
Bronze — Baseline Readiness
The business completes the required credentialing pathway and meets the applicable Bronze requirements following Legacy Core review. Bronze is not a technical penetration test or a claim that every safeguard was tested.
Silver — Evidence-Verified Implementation
The business provides documented evidence of implemented practices for review under the applicable credential standard. Self-attestation alone is not enough.
Gold — Ongoing Verified Readiness
The business demonstrates continued readiness through evidence and review over time. Gold does not mean Legacy Core continuously monitors its systems.
The free Trust Check is a self-reported diagnostic. It does not issue a badge. Credential issuance requires meeting the applicable requirements and Legacy Core approval. Silver and Gold cannot be purchased as upgrades.
What a Trust Badge does not establish
The badge documents a credential decision at a defined tier. It is not a guarantee against cyber incidents, proof that a business has no security weaknesses, or a substitute for an independent security audit, legal compliance review, or an insurer's underwriting process. It does not guarantee a contract, insurance coverage, or a particular financial outcome.
Legacy Core is a private credential issuer, not a government regulator or licensing agency. The Trust Badge is not a government-issued grade, permit, or certification. References to NIST CSF 2.0 or CIS Controls explain frameworks that inform the standard; they do not mean those organizations issue, endorse, or accredit the badge.
Who does the work and who makes the decision
Business owners complete the credentialing pathway and supply the required information and evidence. Alliance Partners or other qualified providers may help improve cybersecurity practices. Legacy Core reviews the submitted material, determines eligibility, and issues the credential when the requirements are met. Buying services or working with a partner does not itself earn a badge.
Partner attestations are not automatically independent reviews. Qualified external reviewer relationships are being established; their involvement should not be assumed for an existing credential unless its review record supports that claim. Legacy Core does not provide managed IT, cybersecurity monitoring, or a customer star-rating service through this credential.
Displaying a badge accurately
A badge belongs to the business that earned it and should link to its current verification record. Display only the tier issued to that business and use the approved badge artwork. An expired, lapsed, or revoked badge must no longer be displayed as valid. A badge cannot be passed to an affiliate or successor business without the required credentialing review.
To report inaccurate credential information or suspected badge misuse, email verify@legacycore.com.
Want to see what earning a credential involves?
See the credentialing pathwayThe information here describes the Legacy Core credential and its scope. It does not replace professional legal, cybersecurity, or insurance advice for your business.