Security
Cryptographic Security
SHA-256 Hashing
All data is hashed using the SHA-256 cryptographic algorithm, ensuring data integrity and creating unique digital fingerprints.
Ed25519 Signatures
Digital signatures using Ed25519 elliptic curve cryptography provide authentication and non-repudiation. Our signing public key is published so anyone can independently verify signatures.
Merkle Trees
Merkle tree structures enable efficient verification of large datasets while maintaining cryptographic proofs.
Immutable Records
Blockchain records are permanent and any modification is cryptographically detectable. You can redact your submitted data while the underlying proof records remain intact and verifiable.
Data Protection
- Zero-Knowledge Architecture: We store only cryptographic hashes and any metadata you choose to provide
- Encryption in Transit: All communications use TLS 1.3 encryption
- Secure Authentication: API access via expiring, revocable API keys with secure hashed storage
- Access Controls: Role-based permissions and team isolation
Infrastructure Security
Application Security
- Secure coding practices
- Regular dependency updates
- Automated security scanning
- Input validation and sanitization
Operational Security
- Monitoring and alerting
- Incident response procedures
- Backup and recovery systems
- Environment isolation
Verification & Transparency
Our security model is built on transparency and verifiability:
- All timestamps can be independently verified using cryptographic proofs
- Blockchain ledger provides transparent audit trail
- Open verification tools allow third-party validation
- Cryptographic evidence can be verified offline
Reporting Security Issues
If you discover a security vulnerability, please report it to our team at [email protected]. We appreciate responsible disclosure and will work with you to address any issues promptly.