Timestamp any digital file to prove its existence at a point in time

Veridocx provides you with evidence, subject to the rules of admissibility in your jurisdiction, of the existence of a digital file at a point in time.

As a timestamp service we provide you with a timestamp certificate generated by our state-of-the-art Timestamp Server, traceable to a national time source.

Once timestamped, you or anyone you provide your file to can use our service to verify the timestamp.

Timestamp your file now

Testimonials

I completed a business proposal which I was planning to present to a prospective client. After a few days, I showed it to a friend who is also a business-minded person. To my surprise, after a week I was informed by the prospective client that my proposal had been rejected. I found out that my friend had submitted the same proposal a day before I submitted mine, and got the contract. I need protection but how?


More Information

How Veridocx works

When you submit a file to us we generate a unique fingerprint of that file, called a hash. This statistically unique hash is digitally signed by our timestamp infrastructure.

By verifying the integrity of the timestamp certificate, and comparing the signed hash with your file, a suitably competent person can show that the file existed at the time contained in the timestamp, and that it has not been modified. This is true even if our service is not available.

Our service also keeps a record of your file's fingerprint which enables you or anyone you share your file with to present the file to us to verify the timestamp and integrity of the file.

Timestamp certificates

Our timestamps are standard PKCS#7 certificates. We are compliant with and significantly exceed the requirements of ETSI TS 101 861 for both certificate key length and hash algorithm security.

To ensure the highest reliability of our timestamps in the future, we use 4096 bit RSA keys for our timestamp certificates and SHA512 to compute all file hashes.

Once a file has been timestamped we provide you with a PDF certificate, and an attached PKCS#7 timestamp.

Secure storage

Our timestamping service is hosted on Microsoft's Azure hosting platform, which is trusted by companies including Boeing, 3M and Lockheed Martin. In addition, your data and personal information is strongly encrypted to provide additional security.

All sensitive information is encrypted using AES (Advanced Encryption Standard) using the maximum key size (256 bits). AES is used by the U.S. Government to protect classified information, and provides significant additional security for your information.

Verifying timestamps

Timestamps can be verified by using the Verify section of our website. Even if our service is not available, a timestamp can be verified by a suitably competent person.

By using the Verify section of our website you can easily upload a file to see the date and time that exact file was timestamped.

Alternatively, our timestamp infrastructure generates standard PKCS#7 timestamps, as described by IETF RFC 3161. The timestamp contains the time and date our timestamp infrastructure saw the hash of your file, the hash itself, and a Time Attribute Certificate auditing the accuracy of our Timestamp Server. All this information is digitally signed by our server.

A competent person familiar with timestamp certificates generated in accordance with RFC 3161 can verify that the timestamp is valid, and also verify that the hash within it matches the hash of your file.

Timestamping infrastructure

Our timestamps are created using a Thales Timestamp Server, audited every 12 hours by the National Institute of Standards and Technology (NIST) in the United States.

Our Timestamp Server is compliant with ETSI (European Telecommunications Standards Institute) TS 101 861, ETSI TS 102 023 and PKIX (RFC 3161). It has been validated to FIPS 140-2 Level 3 and Common Criteria EAL4+.

For additional security, we house our timestamp equipment in a secure datacentre, separate from our website infrastructure, behind multiple levels of physical and network security.

The National Institute of Standards and Technology (NIST), an agency of the U.S. Department of Commerce, audits our Timestamp Server every 12 hours and issues a Time Attribute Certificate which is included with every timestamp that we supply to verify the accuracy of our server.

Veridocx's timestamps are generated by a tamper proof hardware security module which ensures that no one can compromise the timestamping process. Any attempts to tamper with the Timestamp Server will invalidate the last successful audit and the Server will not be able to issue timestamps until the next successful audit.

In the event that NIST audits are not available, we may obtain audits from other sources.