Audit Trail vs Emailed Certificates: What a Buyer Needs

A buyer in Europe or the US asking about your cocoa, shea, or timber shipment does not want a PDF sitting in an old email thread. They want to see evidence they can check today, that is still valid tomorrow, and that someone independent has looked at. That is the difference between an emailed certificate and an audit trail.

This guide explains what buyers actually mean when they ask for 'proof of compliance', how Passmark turns scattered documents into a single trust score, and what a Ghanaian exporter should have ready before that question comes up. It builds on our guides to the COCOBOD export licence and EUDR requirements for Ghanaian exporters.

Why an emailed certificate falls short

A certificate emailed as an attachment answers one question: did this document exist on the day it was issued? It cannot answer the questions a buyer actually has right now — is this still valid, has anything changed since, and can I verify it without calling your office?

Certificates also go stale quietly. A licence renewed last year, a farm boundary that shifted, a lab result that expired — none of that shows up in an inbox. The buyer either trusts you blindly or starts asking for the same documents again, every quarter, by email.

What an audit trail actually is

An audit trail is a live record of evidence, not a single snapshot. It shows what was submitted, when, by whom, and — critically — whether anyone independent has checked it. A buyer can open it at any time and see the current state, not the state on the day someone happened to send an email.

On Passmark, every piece of evidence carries a verification level: self-declared, AI-checked (matched automatically from an uploaded document), or Passmark-verified, meaning a human has reviewed the actual document. The scoring pillar tied to verification stays capped until that human review happens, so a buyer can tell at a glance how much weight to put on what they are seeing (source).

How Passmark scores this

Passmark reduces all of this to one number: the Passmark Score, a 0-100 benchmark built from five weighted pillars — regulatory readiness (40 points), certifications (20 points), traceability (15 points), verification (15 points), and track record (10 points) (source).

Scores sit in four bands: Provisional (0-39), Developing (40-64), Trusted (65-84), and Passmark Verified (85-100) (source). Reaching the top band is not just a numbers game — Passmark Verified requires a composite score of 85 or higher and human verification of the organisation and its documents, so a high score alone will not get an exporter there (source).

The result lives on a public profile with a live badge, which an exporter can share directly with a buyer — in a WhatsApp message, dropped into a quote, or linked on a marketplace listing — instead of attaching a static file (source).

Worked example: two exporters, same shipment

Picture two Ghanaian exporters, both preparing shipments and both holding a COCOBOD export licence and paperwork relevant to the EUDR. A European buyer asks both for proof of compliance before confirming an order.

Exporter A emails a scanned certificate and a licence copy. The buyer files it and, soon after, asks again for an updated version because there is no way to check status without another email round.

Exporter B instead shares a Passmark profile link. The buyer sees a composite score built across the same five pillars — regulatory readiness, certifications, traceability, verification, and track record — and can see which pieces of evidence are self-declared versus already reviewed by a human (source). If Exporter B's score sits in the Trusted band (65-84), the buyer knows real evidence backs the claims, even before every document has had a full human review; if it later crosses 85 with verification completed, the profile moves into the Passmark Verified band (source). Over the following months, as more documents get reviewed, the badge updates on its own — no repeat email chain needed.

Comparison: emailed certificate vs audit trail

Get your Passmark Score

If you are tired of re-sending the same certificates by email, build a profile buyers can check themselves. Start with your existing documents and let the score do the explaining.