What a vault certificatecertifies.

A certificate is produced only after a deposit has been divided, banked in two cities, and tested. It is not issued at the time of biopsy, and it is not issued for a deposit still awaiting results. The sequence is fixed: tissue arrives, fibroblasts are grown, the line is tested for contamination and identity, twelve vials are frozen, six are mirrored to a second city, and only then is the certificate written and signed by the laboratory director.

This order matters because a certificate is a record of something that has already happened, not a promise of something that will. We do not issue provisional certificates, and we do not amend a certificate after issue except to correct a clerical error. If something about a line changes – for instance if additional vials are later withdrawn for genetic testing – that is recorded separately, in the vault's registry, not by reissuing the certificate.

The registry number is the field owners rely on most, because it is what connects a certificate to a physical location in the vault and to any later request, whether that is a genetic panel, a request for cells for stem cell therapy, or, eventually, a cloning consultation. Losing the certificate does not lose the line – the registry itself is the permanent record – but the certificate is the convenient proof a client holds.

The two cities listed are not decorative. Every line is banked whole in one city and mirrored whole in another, at −196 °C in each location, so that no single facility, and no single country's regulatory or logistical disruption, can end the line's existence. This is described in more detail in Two cities; the certificate is simply the document that states which two cities apply to a given deposit.

Each certificate carries a rosette, a small drawn mark unique to that deposit. It is generated from the same cryptographic hash as the sigil used elsewhere in the registry system, so the two marks – rosette on the certificate, sigil in the digital record – can be checked against one another without either being forgeable independently. If the rosette on a certificate does not correspond to the sigil held in the registry for that registry number, the certificate is not valid for that deposit.

This exists for a narrow, practical reason: certificates are physical paper, and physical paper can be lost, copied, or altered. The rosette-sigil pairing means that authenticity does not depend on the paper alone. A client, an institution, or a future owner of the animal's descendants can confirm a certificate against the registry rather than trusting the document in isolation.

It is worth being clear that the rosette certifies the record, not the biology. It does not certify that the cells will survive indefinitely, that a future cloning attempt will succeed, or that the animal's genome carries no undesirable traits. Those are separate questions, addressed elsewhere – in testing reports, in consultation, and in the plain limits we state about cloning and how long frozen cells last.

We choose this narrow scope deliberately. A certificate that claimed more than it can support would not be more reassuring; it would simply be less honest. Clients considering preservation for breeding programmes in particular sometimes want the certificate to double as a pedigree or health document. It is neither. Pedigree and health records should be kept alongside the certificate, not replaced by it.

The certificate is a printed summary of an entry that lives, in full, in a digital registry maintained independently of any single office or piece of paper. That registry records the same fields as the certificate – registry number, species, date of deposit, both cities, the rosette-sigil pairing – along with an internal log of any later event tied to the deposit, such as a vial withdrawn for testing or a change of authorised contact. The certificate is derived from this record, not the other way around.

The registry itself is backed up across systems independent of either laboratory city, so that a disruption at one physical site – the kind of event the two-vault design already protects the cells against – does not also put the administrative record of who owns what at risk. This is a separate layer of redundancy from the biological one: one protects the cells themselves, the other protects the record of which cells belong to which client.

Access to make changes in the registry – updating a contact, authorising a new requester, logging a vial withdrawal – is restricted to a small number of staff and requires the registry number plus identity verification from the client or an authorised representative. An owner cannot amend their own entry directly, and neither can a single staff member without that verification step, which is a deliberate constraint rather than an oversight.

The registry number on the certificate is what you provide when requesting a genetic panel, discussing stem cell or PRP therapy with a veterinarian, or opening a cloning consultation years later. Because every deposit is mirrored across two cities, the registry number also remains valid if a client later moves countries: the line does not need to move with them for the certificate to remain meaningful.

Keep the certificate somewhere ordinary and safe, as you would an insurance document. It is not a decorative object, though the rosette is drawn carefully enough that many clients frame it. Its purpose is narrower and more durable than that: it is the proof that, on a stated date, a stated line, from a stated animal, was banked and confirmed to exist in two places.