Case data that never leaves — compliance you can prove

Privilege protected

Case files processed and stored on-premise only.

Qualified eIDAS seal

Sign & seal documents (PAdES/B-LTA) on your own token.

Audit on demand

Every access hash-chained with a stated purpose.

Records office built-in

Czech spisová služba / NSESSS retention & disposal.

← Back to home

Under the hood

The technical capabilities behind this — from the live feature inventory.

Digital records office (spisovna)

Unified intake, SHA-256 + PDF/A conversion, an immutable append-only frozen (0440) archive with manifest.json; maps 1:1 to Czech spisová služba / NSESSS (retention & disposal).

Qualified eIDAS seal + signature

GLG QSeal applied as PAdES on a QSCD token (the key never leaves the token) → PAdES-B-LTA (seal → signature → timestamp). A physical person can also sign with their own QES (Flow B) — full multi-party PAdES.

Self-maintaining validity

A renewal pass re-timestamps before expiry, layering (never replacing) new archival timestamps, so documents stay legally verifiable indefinitely — no document vault on the market offers this.

TRUSTED verification, proven

A sealed + timestamped B-LTA verifies as INTACT:TRUSTED with live OCSP/CRL revocation, chaining to PostSignum Root QCA 4; a pre-verified demo PDF lets a third party check the seal + timestamp in their own reader.

Provable-ownership ledger

Per-(tenant, project) append-only hash-chained chain_entry; tamper-evident, fail-closed access log with a stated purpose on every view/download.