TrustedForm vs. Jornaya LeadiD: what each one proves about your lead
Updated October 4, 2026
Both tools record the web form a shopper filled out, so a lead buyer can check where the lead came from and what the shopper agreed to. Since January 2026 one company owns both. They still work differently, and what you can check depends on which accounts you have.
Side by side
| TrustedForm | Jornaya LeadiD | |
|---|---|---|
| What the vendor sends you | A certificate URL | A 36-character LeadiD |
| How it's created | A script on the form page records the visit | A script on the form page records the visit |
| What it records | The page as the shopper saw it, every click and keystroke, time, IP address, browser, and page URL | The lead event, the consent text shown, whether the shopper agreed, and how they filled in the fields |
| Playback | Session replay | Visual Playback |
| Contact match | Checks that the phone and email on your lead were entered on the form | Checks that the data you send matches what was entered on the form |
| How you check it | Open the URL in your own TrustedForm account | Query it through your own TCPA Guardian access |
What is TrustedForm?
TrustedForm is ActiveProspect's consent-recording tool. When a shopper loads a form page running its script, it starts recording. When the form is submitted, the seller gets a certificate URL that points to the record.
The certificate holds the page URL, the date and time, the shopper's IP address, browser and operating system, a snapshot of the page as the shopper saw it, and a log of every click and keystroke. Its session replay plays that visit back. The replay is rebuilt from the page and the recorded events rather than filmed as a video.
Phone and email values on a certificate stay hidden until you enter the lead's phone or email. If they match what was typed on the form, the values appear. That check confirms the certificate belongs to the lead you bought.
What is a Jornaya LeadiD?
A LeadiD (also called a Universal LeadiD or LeadiD token) is a 36-character code made of letters, numbers, and four hyphens. Jornaya's script creates it when the shopper lands on the form page, and the seller passes it to you with the lead.
The code itself shows nothing. Its value comes from Jornaya's TCPA Guardian service, which uses the code to look up what happened during that visit. A Guardian report shows the consent text that was on the form, whether the shopper agreed to it, whether the contact details you send match what was entered, and a link to a Visual Playback of the visit.
Can you look up a LeadiD yourself?
Not through a public lookup page. Checking a LeadiD takes your own TCPA Guardian access, either directly or through lead software that connects to it. ActiveProspect's LeadConduit is one platform with that connection.
A vendor can give you the LeadiD. Under ActiveProspect's current policy, it can't hand you its own Guardian report to serve as your compliance record. The same policy says the company contacting the shopper is responsible for checking consent itself. TrustedForm works the same way: the vendor can send the certificate URL, and you keep the certificate in your own account.
Who owns TrustedForm and Jornaya now?
ActiveProspect, the company behind TrustedForm, bought Verisk Marketing Solutions from Verisk. The deal was announced on January 8, 2026. Verisk Marketing Solutions included Jornaya and the data company Infutor. In April 2026, ActiveProspect renamed the data and identity side InfutorData and kept TCPA compliance under the ActiveProspect name.
TrustedForm and Jornaya's TCPA Guardian still run as separate products. ActiveProspect's own use policy, updated in July 2026, covers each one by name.
Do you need both?
You need at least one record that you checked and kept. Whether you need both mostly depends on what your carrier, your compliance team, or your lead software requires. If a vendor sends both, keep both. They come from separate scripts, so one can fill a gap if the other didn't capture the whole visit.
What matters more than the brand is what the record shows and whether you still have it:
- The consent text covers your agency, by name or through a partner list linked from the form.
- The page is an insurance quote form, not a sweepstakes, survey, or free-sample offer.
- The phone and email on the lead match what the shopper entered.
- You checked it before you called, and you stored it in your own account.
Which helps more if a shopper says "I never filled that out"?
Either one can show the form, the consent text, the time, the IP address and device, and whether the contact details on the lead were typed into the form. Both have a playback you can watch or share with your lawyer.
The record that helps is the one you can still open. An unretained TrustedForm certificate is deleted 3 days after it's created, or 90 days if TrustedForm confirms the form was submitted. A retained certificate is stored for 5 years by default. TCPA claims can be filed up to four years after a call (28 U.S.C. § 1658(a)), so retain the record the day you buy the lead.
A record shows what happened in that browser. Keep your own notes too: when you called, what the shopper said, and any request to stop. For a step-by-step check, read how to check a TrustedForm certificate. For why the named company matters, read the one-to-one consent rule.
Every VeroQuote lead carries a TrustedForm certificate, a Jornaya LeadiD, or both, with the consent text word for word. You can see where they sit in a sample lead record.
VeroQuote sells exclusive realtime auto and home leads. Each one comes with its TrustedForm certificate or Jornaya LeadiD and the exact consent text the shopper agreed to.
Request a test batchThis guide is general information, not legal advice.