Evidence Core
Evidence Anchors
Every completed document is independently anchored to 5 parallel verification systems, so its existence and integrity can be checked from multiple independent sources. If any single system is ever unavailable, the others still corroborate the record. Included on every plan.
5 parallel verification anchors
GitHub commit
The document hash and evidence manifest are committed to a public GitHub repository, giving the record a public, timestamped commit history outside our own infrastructure.
GitLab commit
A second, independent commit to GitLab, on infrastructure separate from GitHub, so a single provider outage or dispute doesn't remove the public record.
Sigstore Rekor transparency log
An entry in Sigstore's Rekor transparency log, a public, append-only ledger built specifically for verifiable software and artifact provenance.
RFC 3161 trusted timestamp
DigiCert, SwissSign, and SSL.com each independently issue an RFC 3161 timestamp attesting to the exact content and time of sealing. Three Timestamp Authorities, so the timestamp doesn't depend on any one of them.
Bitcoin blockchain (OpenTimestamps)
The document hash is anchored to the Bitcoin blockchain via OpenTimestamps, a proof that doesn't depend on any company staying in business or any server staying online.
Backed by the rest of the evidence layer
PAdES-LTA with dual-chain OCSP
Every sealed PDF carries a long-term-archival digital signature with embedded revocation data from two certificate chains, so it stays verifiable years later, even offline.
SHA-256 hash-chained audit trail
Every event in the signing process is hashed together with the one before it. Any change after the fact breaks the chain and can be detected.
WORM storage
Completed evidence packages are written to write-once storage with a configurable retention lock, so the record can't be quietly overwritten or deleted before its retention period ends.
Check any document yourself
Every sealed document links to a public verification page. Upload the PDF or scan the QR code printed on it, and confirm the hash, the signer details, and the anchors, no account required.
Included on every plan
Evidence anchoring runs automatically on every completed envelope, Starter plan included. No setup required.