TrustedForm Certificates

TrustedForm captures independent, third-party certificates that prove a consumer provided consent on your funnel. Each certificate records exactly what the visitor saw and interacted with, providing verifiable evidence for TCPA compliance. This is especially important if you sell leads or contact them by phone, as it gives you (and your lead buyers) documented proof of consent.

How It Works

1. A visitor loads your funnel page or embedded form.
2. The TrustedForm script loads in the background and begins recording the session.
3. When the visitor submits the form, a unique certificate URL is generated.
4. The certificate URL is stored with the lead record.
5. The certificate URL is included in all webhook and integration payloads.

The visitor does not see or interact with TrustedForm directly. It works silently in the background.

Enabling TrustedForm

1. Open your funnel in the builder.
2. Go to the Settings tab.
3. Find the TrustedForm section.
4. Toggle Enable TrustedForm on.
5. Optionally customize the Certificate Field Name (the webhook field name used when sending the certificate URL to your integrations). The default is xxTrustedFormCertUrl.
6. Save your funnel.

Certificate Field Name

The certificate field name determines how the TrustedForm URL appears in your webhook payloads. The default (xxTrustedFormCertUrl) follows the standard convention, but you can change it to match what your CRM or lead buyer expects.

For example, if your lead buyer expects the field trusted_form_cert, update the field name accordingly. This setting applies to all integrations on the funnel (webhooks, Zapier, LeadProsper, LeadByte).

Webhook Payload

When TrustedForm is enabled, every lead's webhook payload includes the certificate URL:

{
  "lead_id": "abc-123",
  "email": "user@example.com",
  "phone": "+15551234567",
  "xxTrustedFormCertUrl": "https://cert.trustedform.com/abc123..."
}

If you customized the field name to trusted_form_cert:

{
  "lead_id": "abc-123",
  "email": "user@example.com",
  "trusted_form_cert": "https://cert.trustedform.com/abc123..."
}

Viewing Certificates

The TrustedForm certificate URL is visible on the lead detail page in your dashboard, alongside other compliance and consent information. You can click the URL to view the certificate on TrustedForm's website, which shows exactly what the visitor saw and when they submitted.

Where TrustedForm Works

Both rendering systems load the TrustedForm script automatically when the feature is enabled. No additional code or setup is required on your end.

Certificate Timing

The TrustedForm script needs a moment to initialize and generate the certificate URL after the page loads. LeadCapture handles this automatically:

• The system waits for the certificate URL to be available before submitting the lead.
• On slower connections, it will wait up to 3 seconds for the certificate.
• If the certificate is not available within the timeout (extremely rare), the lead is still submitted without it.

Pro Tips

• TrustedForm is the industry standard for TCPA compliance documentation. Most lead buyers require or prefer TrustedForm certificates.
• Combine TrustedForm with Consent Blocks for comprehensive compliance coverage: consent blocks capture what the lead agreed to, and TrustedForm provides independent verification.
• The certificate URL is included in all integrations (webhooks, Zapier, LeadProsper, LeadByte, email notifications), so downstream systems always have access to the compliance proof.
• No additional account or API key is needed for TrustedForm. LeadCapture handles the integration automatically.
• If you notice a lead is missing a TrustedForm certificate, check if the visitor's browser may have blocked the TrustedForm script (ad blockers can sometimes interfere).