Skip to main content

Proving a Selection Was Random

Every random selection in FairTest is independently verifiable. You can generate a tamper-evident PDF report and share a public verification link that lets auditors, employees, or unions re-run the same selection algorithm in their own browser and confirm the result matches.

This is what makes FairTest defensible in a dispute or compliance audit — the randomness isn't something you have to take FairTest's word for.

How verification works​

When you run a random selection, FairTest records:

  • The random seed — a cryptographically generated number that drives the shuffle
  • The algorithm version — currently v1, a mulberry32-seeded Fisher-Yates shuffle
  • The full eligible pool at the moment of selection, in original sort order
  • Which employees were selected

Anyone with the verification link can re-run the same algorithm against the same pool and seed in their browser, and confirm that the resulting selections match exactly. If even one employee in the pool changes, or the seed differs, verification fails.

Generate a verification PDF​

The PDF is the document you give to auditors, regulators, or employees who ask for proof.

  1. Open the selection from the Selections list
  2. In the Verification section of the selection detail page, click Download Verification PDF
  3. The PDF saves as selection-verification-YYYY-MM-DD.pdf

The PDF contains:

  • Selection date, organisation, and scope (e.g., site or department)
  • Pool size and number selected
  • The random seed and algorithm version
  • A QR code that opens the live verification page
  • The full eligible pool — every employee with their rank, identifier, and whether they were selected

The PDF is generated locally in your browser, not on a server, so the act of generating one doesn't affect the verification record.

Use a link when you want someone to verify online without sending a file.

  1. Open the selection detail page
  2. Click Copy Verification Link
  3. Paste the link into an email, message, or audit document

The link looks like:

https://app.fairtest.com.au/verify/<selection-id>?token=<token>

The token is a signed, read-only credential — it grants access only to that specific selection's verification page and reveals no other organisation data. Employee names are shown as initials only; external IDs are visible so the recipient can cross-reference against their own records if appropriate.

What the recipient sees​

When someone opens the verification link they see:

  1. Selection metadata — date, pool size, selected count, status, the random seed, and algorithm version
  2. A Run Verification button — clicking it re-runs the algorithm in their browser. They'll see either:
    • Verification Passed — the recomputed result matches what FairTest recorded
    • Verification Failed — something doesn't match (this should not happen for legitimate selections)
  3. The full pool — every employee in the eligible pool, with selected employees highlighted

The verification runs entirely client-side, so the recipient doesn't need a FairTest account and doesn't need to trust the FairTest server for the cryptographic check itself.

When to use this​

SituationWhat to share
Compliance auditVerification PDF for the audit period
Employee asks "why me?"Verification link
Union requestVerification PDF + verification link
Internal recordsPDF, attached to your selection event log
Regulator inspectionPDF, signed off by the responsible manager

Privacy​

Verification links and PDFs are designed to be shareable safely:

  • Employee names appear as initials only (e.g., J.S. for Jane Smith)
  • External IDs are shown so internal teams can cross-reference, but they aren't personally identifying outside your organisation
  • Test results, contact details, and any other employee data are never exposed
  • The verification token only unlocks the verification view — it cannot be used to access any other part of FairTest

If you revoke a selection or delete the underlying data, existing verification links stop working.

Re-verify any time​

You can run verification yourself directly from the selection detail page using the Verify Selection button. This is the same algorithm the public verification page uses — handy as a sanity check before sharing.

Related Articles: