My RBTP Credentials User Guide
Contact Us
If you still have questions or prefer to get help directly from an agent, please submit a request.
We’ll get back to you as soon as possible.
A guide to creating, sharing, and managing your Digital Facility Records, and storing the credentials you hold.
Prefer a quick start?
Download a short starter guide that walks you through issuing your first Digital Facility Record.
What is My RBTP Credentials?
My RBTP Credentials helps you securely share verified facility data and proof of assessment conformance, so companies can trust and use it across the tools and platforms they already work in.
Key Benefits:
Create the verifiable records that customers ask for
Produce standardized, verified digital records on demand.
Respond more quickly to information requests
Share a single link rather than emailing files and different reporting templates back and forth to different customers.
Ask the same of your suppliers
Request credentials upstream to standardize data about your supply chain, and keep them in your Credential Library.
Keep information up-to-date and immediately verifiable
Keep facility and assessment conformance information current and ready to share.
What is RBTP?
Responsible Business Transparency Protocol
It is RBA's industry data protocol for sharing verifiable digital information about your facilities, the materials they handle, and their assessment results. RBTP is built on the UN Transparency Protocol (UNTP), so the records you create follow a standardized, internationally-recognized format that is interoperable with platforms and standard schemes that align to UNTP.
What Can You Do in My RBTP Credentials?
Issue and Update Digital Facility Records
Create a profile of your facility with relevant site details and any country-of-origin claims or assessment results you wish to include.
Link Digital Conformity Credentials
Attach assessment credentials, such as a VAP or RMAP result, to give recipients immediate, digitally verified proof of conformance.
Share securely with a link
Every record has its own link. For sensitive records, issue an encrypted version and share the link only with trusted partners.
Store credentials in the Credential Library
Keep every credential you hold in one place, including external credentials you receive, verified and ready to view or share.
Two Kinds of Credentials: DFRs and DCCs
You will see two terms throughout this guide. Here is the difference:
You issue it.
A profile of one of your facilities. It holds the facility’s site details, your country-of-origin claims for mined and secondary (recycled) materials, and links to any assessment results you choose to include.
Think of it as your facility's digital identity card.
RBA issues it.
A record of an assessment result, such as a VAP or RMAP assessment. It is created from an assessment conducted by an approved third-party and signed by RBA, so customers or other supply chain partners can verify it independently.
Think of it as the official, digital proof behind a VAP and/or RMAP.
How do I access My RBTP Credentials?
In RBA Online, open Supply Chain and select My RBTP Credentials. Sign in with the email associated with your RBA Online profile, then enter the one-time passcode emailed to you.
1. Find it in RBA Online
2. Request a code
3. Enter the passcode
Direct link
You can also go straight to dfr.credentials.responsiblebusiness.org and sign in there.
About the passcode
The one-time passcode confirms it is really you before you enter. If you do not see the email, check your spam folder or choose Resend.
Not in RBA Online yet? Companies whose facilities are not registered in RBA Online need to register once before they can sign in. The Starter Guide for New RBA Online Users (PDF) walks you through registering, adding your facilities, and issuing your first record.
My RBTP Credentials – Landing Page
When you open the tool, you will see your facilities list. Use the tabs at the top to switch to the Credential Library.
Navigation tabs
Switch between My RBTP Credentials (your facilities and records) and the Credential Library.
Refresh Data
Facility data from RBA Online is refreshed daily at 6:00 AM ET, so recent changes may not show yet. Use Refresh Data to reload the list.
Your facilities
The list is drawn from your facilities in RBA Online. Each row is one facility you can issue a record for.
Issue New Digital Facility Record
Click this button on any facility to start creating its record.
Toggle Dropdown
Click to see more information.
Issuing Digital Facility Records
The issue form (1 of 2)
123
1DFR Record Name
Give the record a name for your reference (up to 50 characters). It does not appear on the credential itself.
2Facility Details
Review the facility’s name, ID, address, and status. These are pre-populated from RBA Online.
3Issue Buttons
When you are ready, choose Issue Unencrypted or Issue Encrypted. Records are issued in English, except non-English data from RBA Online.
The issue form (2 of 2)
456
4Conformity Credentials
Any VAP or RMAP results found for the facility appear here. Choose what to include (see Including VAP and RMAP Credentials).
5Country of Origin
Optional: complete for any mined minerals or secondary (recycled or scrap) materials associated with the facility.
6External Credentials
Optional: attach verified, unencrypted credentials from your Credential Library (see Attaching External Credentials).
Adding Country of Origin Information
It is not required to add this information in order to issue a Digital Facility Record. Please review any customer requests or requirements to provide additional data in your Digital Facility Record.
1Select the mineral / material
Choose a mineral / material from the drop-down list.
2Select source countries
Choose one or more countries of origin for that mineral / material.
3Add more with + Add Claim
Repeat for each additional mineral / material associated with the facility.
Self-declared claims show as “Unassured” on the issued record. See the FAQ: What does “Unassured” mean next to my country-of-origin information?
Including VAP and RMAP Credentials
If a facility has no current assessment result, the section says “No RBA assessments exist for this facility.”
RMAP results: choose what to include
Summary Data
Overall conformance status and summary conformance on OECD Steps 1–5.
Due Diligence Data
Detailed conformity report on subsections of OECD Steps 1, 2, 3 and 5. Automatically includes Summary Data.
Country of Origin/Sourcing Data
Third-party validated countries of origin for each metal’s mined and recycled material, from the RMAP assessment.
VAP results
Important: VAP results and RMAP Country of Origin/Sourcing Data can only be included in encrypted records. If you select Country of Origin/Sourcing Data, Issue Unencrypted is disabled. If you issue an unencrypted record, VAP credentials are excluded automatically.
Attaching External Credentials
Attach credentials from your Credential Library, such as a product passport or certification you received from an external source. Only verified, unencrypted external credentials are listed.
12
1Choose credentials
Check each credential to include in the DFR. Click View to open one in a new tab first.
2Review your selection
Checked credentials appear under Selected to attach. Click Remove to take one off before you issue.
Good to know: An attached credential is linked from the DFR at the address its source serves it from. On an unencrypted DFR, anyone who can see the DFR can open that link.
Confirm to Issue
After you click an “Issue” button, a confirmation appears so you can review what you are about to create.
Unencrypted
Anyone with the link can view
An unencrypted record can be viewed by anyone who has the link or the facility ID. Use this when the information is meant to be openly discoverable (e.g. equivalent to information you would already share about your facility on your website).
Encrypted
Link plus access key
An access key is generated when the record is issued. The record can only be opened by someone who has the URL that contains the key. Share only with trusted parties.
The Rendered DFR
Opening a record shows it the way your recipients will see it. The header fields identify what the record is and who issued it.
123
1Type, Issued by, Valid from
Every record opens with these fields. Type says whether it is a facility record or a conformity credential, Issued by shows the issuer’s identity, and Valid from shows the date the credential took effect.
2Rendered, JSON, Download
Switch between the human-readable view (Rendered) and the underlying data (JSON), or download the record.
3Update Facility Record, Open in Viewer
Update Facility Record lets you issue a new version. Open in Viewer opens the record in a separate tab. Scroll down for Issuance Details such as the credential ID, URL, and version.
Managing and Sharing Your Records
Each issued record has a set of actions in its row. Here is what each one does.
View DFR Opens the full record inside the tool, with options to see the rendered view or the machine-readable version of the credential.
Issue New Version Opens the record so you can update claims and issue it as a new version. The old version is not deleted, and anyone opening its link is pointed to your newest version.
Copy link Copies the record’s link to your clipboard. For encrypted records, you can copy or open the link.
QR code Shows a scannable QR code for the record.
Share out (arrow icon) Opens the rendered unencrypted record in a new window.
Sharing by QR Code
Click the QR code icon on any record to display a scannable code you can share or copy as an image.
Unencrypted record
Copy Image
Use Copy Image to drop the QR code straight into an email or document.
Encrypted record
The link contains the access key
For an encrypted record, the access key is built into the link shown in red. Share it only with trusted parties.
Digital Conformity Credentials (DCCs) on the Landing Page
Scroll below your facilities list to find the Conformity Credentials and VAP Conformity Credentials sections. These are the assessment-based DCCs available for your facilities.
What appears here
Each facility with a current RMAP assessment is listed with its metals and valid-from date. A Facility Standard row shows whether a Facility Standard DCC has been issued. VAP credentials have their own section and are always encrypted.
Share actions
Use the icons on the right to open, show the QR code for, or copy the link to a credential.
Reminder: DCCs are issued by RBA as third-party assessment results. You do not create them yourself.
Viewing a Digital Conformity Credential
A Digital Conformity Credential opens in the same rendered layout as a facility record, so the view stays familiar. The same header fields apply.
12
1Same header fields
The layout matches a facility record, with one difference: Type now reads Digital Conformity Credential and Issued by shows RBA's identity rather than your own.
2Assessments (RMAP Example)
Below the header, the credential lists the metals and facility that the assessment included in scope.
Viewing a Conformity Credential, Continued
Further down, the credential shows the detail of each assessment and confirms that RBA issued it.
12
1Assessment details
Each assessed metal shows the facility and products covered, the assessment date, and the standard that was applied.
2Issued by RBA
The Issuing details confirm the credential was issued by RBA, with the date it became valid.
Credential Library – Overview
Select Credential Library at the top of the page. My Credentials lists every credential you hold, from any source, in one place.
1234
1Credential Library tab
Opens your library. Switch back to Facility Records at any time.
2Add External Credential
Add a credential you received from an external source.
3Filters
Narrow the list by type, source, issuer, encryption, issue date, or facility.
4Open a record
Click any row to open the full record with its verification status, notes, and versions.
Credential Library – Reading the List
Each row is one credential. In the tool, hover over the ? next to a column name for a quick definition.
| Column | What it means |
|---|---|
| Subject | What the credential is about (a facility, an organisation, or a product or shipment), not the issuer. |
| Type | DFR (Digital Facility Record), DCC (Digital Conformity Credential), DPP (Digital Product Passport), DTE (Digital Traceability Event), or DIA (Digital Identity Anchor). |
| Source | My Credential: your organisation issued it. RBA or RMI: issued on your behalf. External: you added it. |
| Issuer | The party that signed the credential. |
| Verification | Verified means the credential is authentic, untampered with, and not revoked by its issuer. It is not an endorsement of the issuer. |
| Validity | Reflects the credential’s validity dates (“Date not set” if it has none). It is not a compliance result and does not check for revocation. |
| Enc. | Whether the credential is Encrypted or Unencrypted. |
Filtering the list
Click any filter above the list to narrow what you see. The example shows the Type filter.
Available filters
FacilityTypeSourceIssuerEncryptionIssuedCredential Library – Adding an External Credential
Click Add External Credential. The system retrieves the credential at the link you supply, verifies it, and stores a copy in your library, so you don’t depend on the source staying online.
1234
56
1Source URL
Paste the public https:// link where the credential is hosted (the link you received).
2Credential type
Choose DFR, DCC, DPP, DTE, or DIA. The retrieved credential is checked against your choice.
3Decryption key
Only for encrypted credentials. It is used once to open and check the credential, and is never stored. See the FAQ: How can I still see an encrypted credential I added from an external source, if My RBTP Credentials does not store the key?
4Preview
Check the credential before you add it.
5Your notes
Add a record name (required), the date received, and any notes. These are for your reference only.
6Add Credential
Saves the verified copy to your library. Click Cancel to leave without adding.
Credential Library – Viewing a Credential
Click any row in the library to see the full record. This example is a DFR your organisation issued.
123456
1Record summary
Source, version, encryption, and whether the credential is in your library.
2Actions
Issue New Version, Revoke, and Share appear when they apply to this credential.
3Not available
Actions that don’t apply are listed here. Hover over the ? to see why.
4Tabs
Switch between the Credential, your Notes, and its Versions.
5Verification
Confirms the credential is authentic, untampered with, and not revoked. Click Verify Signature to check again.
6Credential details
Issuer, subject, validity dates, and issuer lifecycle. Scroll down to see the rendered credential.
Credential Library – Notes, Versions, and Sharing
Each credential has tabs for your own notes and its version history. Use Share to send a credential your organisation issued to someone else.
Notes
Your notes
Record name, credential type, date received, and notes are for your internal reference only and never attach to the credential. Click Edit Your Notes to change them.
Versions
Version history
Older versions aren’t removed, just no longer current, and their links point to your newest version. External credentials have no version history: ask the source for a new link and add it. See the FAQ: Why does the old version of my digital credential still exist?
Share
Share this credential
Shows a QR code and a link to copy. Available for credentials your organisation issued or RBA issued on your behalf. Share encrypted credentials only with trusted parties.
Credential Library – What You Can Do With Each Credential
Available actions depend on where a credential came from. Only the organisation that issued a credential can issue a new version of it or revoke it.
| Action | My Credential (your organisation issued it) |
RBA or RMI (issued on your behalf) |
External (you added it) |
|---|---|---|---|
| Share | ✓ | ✓ | — Not shareable from My RBTP Credentials |
| Issue New Version | ✓ | — Contact RBA | — Ask the issuer for an updated credential |
| Revoke | ✓ When its revocation status can be read | — | — |
| Remove from Library | — The current version stays in your list | ✓ | ✓ |
Why is an action unavailable? Unavailable actions are listed under “Not available on this credential.” Hover over the ? next to each one for the reason.
Issuing a new version updates a record; the old version isn’t deleted, and anyone opening its link is pointed to your newest version. Revoke only when a record should no longer be relied on at all. Revoking is permanent and cannot be undone. See the FAQ: What does revoking do?
FAQs and Support
My RBTP Credentials FAQs
Answers to common questions about access, issuing, sharing, versions, revoking, and the Credential Library.