They need to provide an small hash with the api result that can be verified by others.