The Edsynk Journal · Trust

The anatomy of a tamper-proof report card.

A stamp and a signature are easy to fake. So is a PDF you can open and edit. Here is how a school result becomes something a parent can actually verify — and why a single QR scan settles it.

By the Edsynk team · · 6 min read


  • Two hands, never one
  • A SHA-256 seal
  • A public QR check
  • Corrections keep history

In most Nigerian schools, a result is a piece of paper. It carries a logo, a column of scores, a signature in blue ink and, if the school is careful, an embossed stamp. Each of those is a claim of authenticity. None of them is hard to copy.

The problem with a piece of paper

Photocopiers, phone cameras and a steady hand have made paper results trivial to alter. A B becomes an A. A failed term becomes a passed one. The school’s own file says one thing; the slip in a parent’s hand — or in a scholarship application, or a transfer packet — says another. There is no quick way to tell which is real.

The first wave of “school portals” did not fix this. Many simply email a PDF or post one for download. A PDF is a document, not a record: anyone with a free editor can change a number, re-save, and reprint. Putting a result online does not make it true. It just moves the forgery from the photocopier to the laptop.

“A result you can’t verify is just a rumour with a letterhead.”

The lifecycle of a real result

On Edsynk a result is never a single file someone types up at the end of term. It is the end of a chain, and every link in that chain is recorded. The chain matters as much as the seal at the end of it — a seal only means something if you trust how the thing under it was made.

A subject teacher enters scores from the phone in their pocket, classroom by classroom, even where the network drops — entries queue on the device and sync when it returns. Those raw scores are not yet a result. They become one only when the exam officer reviews and approves the sheet.

And here is the rule that does the quiet work: the person who approves a sheet cannot be the same person who entered it. Separation of duties is how banks stop a single clerk from both writing and signing their own cheque. We apply the same logic to grades. One hand records; a second, different hand confirms. Only then does publishing freeze the whole card into a single canonical snapshot — every score, every computed total, the position in class, the grading scheme that produced it — captured exactly as approved.

The seal flow
  1. 01EnterTeacher, on a phone
  2. 02ApproveA different officer
  3. 03SealSHA-256 snapshot
  4. 04PrintQR on the card
  5. 05VerifyAnyone, no login

The seal: one number that fits the whole card

When the card is frozen, we run its canonical snapshot through SHA-256, a standard cryptographic hash. The output is a fixed-length fingerprint of the entire result:

sha256: a3f9 91c4 7d20 e8b5 … 0c6a 4f8e 7e1c

Change one mark, flip one grade band, nudge a single total, and that fingerprint changes completely — there is no small edit that produces a small change. The card then carries two more things printed on its face: an unguessable verification code and a QR that points at it. The code is not a sequence anyone can count up to; you cannot land on a valid result by trying the next number along.

Verification a parent can do at the gate

The check has to be something an ordinary parent can do with the phone they already own, without an account and without being taught. So scanning the QR opens a plain public page — no login, no app to install. That page re-reads the sealed snapshot straight from Edsynk and re-computes the hash on the spot.

If the freshly computed fingerprint matches the one on record, the page says the result is genuine and shows exactly what the school approved. If it does not match — if so much as a digit was tampered with after sealing — the match fails and the parent sees that the card cannot be trusted. The honest case and the forged case look completely different, and the parent never has to understand a hash to read the difference.

When a result legitimately changes

Real schools make real corrections. A script is re-marked; a score was entered against the wrong student. If sealing meant a result could never change, schools would simply stop sealing — so the seal has to survive an honest fix without going soft.

A correction never edits the sealed card in place. It creates a new version — v1 becomes v2 — with its own snapshot and its own seal, and the change is written to an audit log: who changed what, and when. The old QR keeps resolving; it now shows that this version was superseded and points to the current one. Nothing is silently rewritten. A parent holding last term’s printout can still confirm it was genuine when issued, and discover, in the same scan, that a newer version exists. History is added to, never quietly overwritten.

Who owns the data

A verifiable result is only trustworthy if the school controls it. The school owns its data on Edsynk, and can export everything it has put in, at any time — students, scores, sealed results — in a portable form. Nigeria’s data-protection law (the NDPA 2023) expects no less, and we treat portability as a promise, not a setting buried three menus deep.

One line we hold firm on: results are never withheld for unpaid fees.A child’s academic record is theirs; it is not collateral. Fees and grades are separate matters, and a tamper-proof result is worth little if it can be held hostage. The seal protects the truth of the record. Keeping that record free of the billing ledger protects the family.


That is the whole anatomy: a chain you can trust, frozen at the moment of approval, fingerprinted with a number that breaks if anything moves, and a public check anyone can run in seconds. Not a stamp. Not a signature. A result you can prove.

← All articles

Try it on any card

How to verify an Edsynk card.

Three steps, no account, about fifteen seconds. Anyone holding the card can do it — a parent, a school the child is transferring to, a scholarship board.

  • 01

    Scan it

    Point the phone camera at the QR on the card, or type the code printed beside it into the verify page.

  • 02

    Read it back

    Edsynk shows what the school actually sealed — the school, the student, the term and the scores.

  • 03

    Check the badge

    Genuine means the seal still matches the record. Anything else, ask the school before you rely on the card.

See it for yourself

See it on a real card.

Your first term is free, we migrate your records, and we train your staff. Start with the term you are already running.

The anatomy of a tamper-proof report card — Edsynk · Edsynk