Bestcert is the certification platform built for compliance-led businesses — issue, correct, and deliver PAT testing certificates today, with fire safety, electrical, and emergency lighting on the same platform tomorrow. Every certificate is versioned, immutable once issued, and backed by a full audit trail.
Built for compliance
Not a generic document tool with certificates bolted on — a platform designed around how certification really works: versioned, auditable, and multi-tenant from day one.
Every table is protected by row-level security — not application code. One organisation can never see another's customers, certificates, or documents.
Issued certificates can never be edited. Correcting one creates a new version, keeps the original untouched, and preserves the full history.
Every issued version renders straight to a polished PDF and stores it permanently — reproducible exactly as it looked the day it was issued.
Email, SMS, WhatsApp, or direct download — delivery is abstracted behind a provider interface, so it's never locked to one vendor.
Configurable reminders at 60, 30, and 7 days before expiry — and again if a certificate lapses — so nothing falls through the cracks.
Every action — created, issued, corrected, delivered — is logged automatically. Ordinary users can't edit or delete audit history.
How it works
One platform, one certificate architecture — starting with PAT testing, built to grow into every certificate type your business issues.
Set up the businesses you test for and every site they operate — correspondence address kept separate from physical sites.
Create a certificate directly, or from a scheduled appointment. Record every appliance, reading, and result as you go.
One click generates a branded PDF, stores it permanently, and freezes an immutable snapshot of exactly what was issued.
Send by email, SMS, or WhatsApp, or let your customer download it. Renewal reminders are scheduled automatically.
Certificate types
Security
Multi-tenancy and immutability aren't features bolted on top — they're the foundation the schema was designed around.
Tenant isolation is enforced by PostgreSQL policies on every table and every storage object — never by a client-supplied organisation ID.
A database trigger physically blocks edits to an issued version. Corrections always create a new version — the original, and its original PDF, never change.
Every certificate and appointment event is logged automatically. There is no update or delete path for audit history — not even for organisation owners.
Set up your organisation in under two minutes. No card required.
Get started free