Nine layers. Eight standards.No proprietary format.
A single trust layer sits under every product. It is organized as a chain of nine layers, from establishing the actor to producing a verifiable proof. Every element listed is implemented and tested in the product.
Identity
Establishing whether the actor is a person or a machine; full life cycle. An account alone is not an identity.
X.509 · Argon2Access
Roles, permissions, scopes; centralized policies rather than ones scattered through features.
Centralized policiesOrganizations
Strict isolation between organizations: perimeters, settings, data.
Isolation (RLS)Assets
Encrypted storage with separation of duties.
AES-256-GCMCryptography
Fingerprints and signatures.
SHA-256 · ECDSADocuments
Long-term verifiable digital signatures and signer certificates.
PAdES B-LTAProvenance
Provenance manifest bound to the content.
C2PAVerification
Electronic timestamping, attestations, public verification.
RFC 3161Audit
Sealed, chained log, checkpoints, public anchoring.
Merkle · OpenTimestampsThe vault
The fingerprint
The same file is protected on one side and demonstrable on the other, without being revealed: only the 32-byte fingerprint leaves the vault. Published when anchoring: the fingerprint, not the document, its name, its size or its type.
Verifiable without IRON ID.
Each certified document exports as a self-contained bundle, verifiable with an open source tool. Since the format is published, a third party can also write its own verification.