How RILDocs protects your data, the standards we're built on, and where we are on the compliance path. Our defining control: your file is fingerprinted in your browser and never leaves your device.
Documents are hashed client-side (Web Crypto). We never receive, process, or store your file — only its fingerprint and the metadata you enter.
We hold fingerprints, your metadata, cryptographic artifacts and anchors. There is no document content to breach.
Signing & timestamp keys stay on the production host, owner-only permissions, out of source control and app backups. HSM custody on the qualified-tier roadmap.
Linux on Hetzner behind Cloudflare. TLS 1.2+ everywhere; origin reached only via an authenticated tunnel (no public inbound ports). Key-based SSH admin.
Proofs survive any RILDocs outage — blockchain anchors are permanent, and RFC 3161 tokens + PAdES certificates verify offline.
Anyone can verify a proof with public blockchain explorers, standard OpenSSL, and Adobe Acrobat — no trust in RILDocs required.
| Item | Standard | Status |
|---|---|---|
| Document fingerprint | SHA-256 (NIST FIPS 180-4) | Live |
| Attestation signature | Ed25519 (NIST FIPS 186-5) | Live |
| Trusted timestamp | RFC 3161 | Live |
| Signed PDF certificate | PAdES / ETSI EN 319 142 | Live |
| Evidence admissibility | U.S. Fed. R. Evid. 902(13) & 902(14) | Live |
| Electronic records | ESIGN Act & UETA | Live |
| Privacy | GDPR data-minimization by design | Live |
| Security controls audit | SOC 2 Type II | In preparation |
| ISMS certification | ISO/IEC 27001 | In preparation |
| Qualified timestamps | eIDAS QTSP (EU legal presumption) | Roadmap |
| Provider | Purpose | Data exposed |
|---|---|---|
| Hetzner | Compute / hosting | Stored metadata & fingerprints — never documents |
| Cloudflare | Edge TLS, DNS, DDoS protection | Request metadata in transit |
| Public blockchains | Immutable anchoring | Fingerprint (hash) only |
Found a security issue? We want to hear from you. Report it to [email protected]. We aim to acknowledge reports promptly and will work with you in good faith on remediation.