A report is only worth something if it can be trusted later. These are rules the application enforces, most of them in the database itself.
Issuing freezes the data, renders the PDFs and stores the SHA-256 fingerprint of each. The database refuses any later change. A correction is a new revision; a report issued in error is withdrawn with a reason and stays on record.
Every PDF carries a QR code to its verification page. A visitor can check their copy there: the file is fingerprinted in their own browser, and only the fingerprint is sent.
Storage is never public. Files travel straight between the browser and storage through links that expire after five minutes, and every download is recorded.
Signing, review, issue, withdrawal, share links, downloads, permission changes and client acceptances are written to an append-only log; the database refuses to change or delete an entry. Sign-ins are recorded per person and never shown to another employer.
Every record belongs to one organisation, and every query is limited to it. Each feature is tested to prove that one organisation cannot read or change another's data, not even through a guessed address.
Staff can protect their accounts with an authenticator app, and an organisation can require it of everyone. People are deactivated, never deleted, so signatures and history stay intact.
AI features are off until an owner switches them on. Only then are the documents you choose sent to our AI provider, Anthropic. What AI produces stays a draft until a person confirms it, and their name is recorded.
Payments are taken on the checkout of our merchant of record, Paddle. The application never sees a card number.
You choose where your organisation's files are kept when you sign up: report PDFs, scan data, drawings and dossiers stay in that region. The records database is kept in Europe.
An owner can export everything at any time: every record of the organisation, its people and, if wished, its files, as one download. Nothing is held back, so you are never locked in.
Several backup copies of everything, kept within your hosting region, and automatic backups of your records and files to your own computer: weekly on every plan, daily or hourly on paid plans.