The Seal · the paid independent layer

You cannot notarize your own document.

Verifying a receipt is free and works offline forever — anyone can re-run the math. But a receipt you sealed entirely by yourself is self-attested: real and useful, yet worth little to an auditor on its own. The Seal is the independent layer that makes your evidence audit-credible.

The flag boundary

Where the evidence crosses from your word to an independent one.

Free · local

Self-attested

Seal and verify locally with real Ed25519 + SHA-256. Permanent, honest, and entirely yours — but the seal vouches only for you.

Real cryptography: one changed byte breaks the seal.
Offline, no account, no dependency on us.
An auditor still only has your word that you didn't reseal it.

Sealed · independent

Independently attested

An independent party anchors, timestamps and lists your evidence — so a third party can rely on it without trusting you or us.

Anchored beyond your own systems — you can't quietly rewrite history.
Time bound by an independent authority, not your clock.
Listed in a register a relying party can resolve.

What the Seal adds

Three things you cannot credibly do to your own records.

Anchoring

Your receipts' Merkle root is committed to TSP's independent Evidence-ledger on a fixed cadence — placing your history beyond your own reach. This is the recurring core of the Seal.

Qualified time

Evidence is bound to an independent, eIDAS-qualified timestamp authority over RFC 3161 — never our own clock. A qualified timestamp carries a legal presumption of the integrity of the data and the time it indicates. We bind to an accredited authority; we are not one ourselves yet.

The register

Attested evidence is listed in a public register a relying party can resolve — moving its status from self-declared to independently recorded.

How the boundary is enforced

Honest by construction.

Three reserved states — anchored, qualified-timestamped, registered — are true only through the independent layer, never something you can emit yourself.
Payment never grants official status: the Seal makes evidence credible; it does not rubber-stamp content.
Enforcement is certificate expiry plus authenticated anchoring — no kill switch on your machine, and no remote off-switch for free verification.

The Seal makes your evidence audit-credible. It does not make you compliant — that call stays with your auditor, DPA and counsel.

The independent Seal layer is being built alongside the open protocol; qualified eIDAS time is bound through an accredited authority on a pilot / staging footing. The free local layer works fully today.

See pricing & tiers Try the free local verifier