Azure Artifact Signing (Trusted Signing) — is a US LLC formed in 2025 (under 3 years old) eligible for Public Trust Organization validation under current GA?

No. Under current GA, Public Trust organization validation still requires a verifiable tax history of three or more years for organizations. A US LLC formed in 2025 and currently under 3 years old is not eligible for Public Trust Organization identity validation.

Supported facts from current documentation:

1. Region eligibility Public Trust certificates are available to organizations in the United States, Canada, the European Union, the United Kingdom, Australia, New Zealand, Japan, South Korea, Singapore, Switzerland, Norway, and Israel.
2. Organization age requirement for Public Trust The MSIX signing guidance states that Public Trust certificates are available to organizations in the USA, Canada, the European Union, and the United Kingdom, and that organizations must have a verifiable tax history of three or more years.
3. Exception path No exception path for organizations under 3 years is documented. The public identity validation guidance only states that if more documentation is required, the service can request it during validation, but the accepted Microsoft Q&A example shows an organization incorporated less than 3 years ago was declined on that basis.
4. If identity validation fails or special onboarding is needed The documented support path is to create a support ticket in the Azure portal. The FAQ also says that if another identity validation is needed for the same organization with a different primary email address, support must be contacted to continue onboarding.
5. Supported alternatives For production distribution, the documented alternatives are:
   • Azure Artifact Signing as the recommended option when eligible.
   • OV code signing certificate from a CA as the production alternative.
   • Microsoft Store distribution, where the package is signed by the Store on submission.

For the specific goal of signing under the company name today, the supported alternative explicitly listed is an OV code signing certificate from a CA. The provided context does not document EV as a supported Artifact Signing alternative or any exception that would allow a sub-3-year organization to obtain Public Trust organization validation through Artifact Signing.

References:

• Sign an MSIX package
• Quickstart: Set up Artifact Signing
• Artifact Signing FAQ
• Trusted Signing - Identity Validation failed - Microsoft Q&A
• Code signing options for Windows app developers