Skip to main content
Trust center

Verify.Don't take our word for it.

One place for the real state of the platform: measures in place, sub-processors, legal documents and the public verification of a document, without an IRON ID account.

Public verification

A file, or a token.

The fingerprint is recomputed in your browser; only the fingerprint is compared. The file does not leave your machine. The result says what is verified, and only that: the content has not changed since sealing, a fingerprint existed at a given date, which issuer produced each attestation.

Verify a documentNo account
Drop the file hereor the ironid-evidence-….zip bundle · the fingerprint is computed locally
or
Offline verification possible with open source tools.Demonstration on fictitious data: no file is read or sent.
Documents and states
SecurityMeasures and statesEncryption, isolation, audit, key management; in place, in progress, not claimed.Open →TechnologyThe nine layersPublished standards on the path of the proof, evidence bundle, what is claimed and what is not.Open →LegalDPA and privacyRoles, data categories, breach, end of contract, audit of the processor.Open →QuestionsFAQThe published answers, with their real state, by theme.Open →
Sub-processors

Three, and only for the public site.

During the B2B phase, only three sub-processors are involved, for the site, its forms and the contact mailbox, under standard contractual clauses. They will be replaced by the production infrastructure before launch. Any change comes with 30 days' notice, a right to object and termination without penalty.

Sub-processorRoleLocation
Vercel Inc.Hosting of the public site iron-id.ioUnited States · standard contractual clauses
ResendTransactional emails from the site's formsUnited States · standard contractual clauses
Namecheap Private EmailThe contact@iron-id.io mailboxUnited States · standard contractual clauses

Never the platform's data. List of production sub-processors published at launch.