Verify a consent record

Check that a consent record existed at a particular time, without taking anyone's word for it — including ours.

Where the evidence lives

Records are exported nightly to write-once storage that neither we nor an administrator can alter or delete before its retention period ends, held in the region shown with each result. The daily fingerprint is then attested by an outside party wherever one is available.

Not every anchor is equally strong, and a result will tell you which kind it is. An independent timestamping authority is the strongest: you can check its signed token yourself. A permissioned ledger entry is replicated beyond us but carries no signed time. A self-signed anchor is only our own word that the fingerprint has not changed — we show it rather than hide it, but it is not proof of when.

What this proves

Every night we take the latest entry from each of our tamper-evident logs, combine them into a single fingerprint called a Merkle root, and send that one fingerprint to an independent timestamping authority. They sign it and return a token saying, in effect, "this fingerprint existed by this moment".

If your record is covered by one of those fingerprints, then your record existed before that timestamp. Nobody — us included — can move it later, change it, or quietly insert something before it, because the fingerprint would no longer match.

What this does not tell you

This page will not say who a record belongs to, which organisation it came from, or what was agreed. It only confirms that a given fingerprint was published, and when. That is deliberate: a public checking tool must not become a way to learn about other people.

Checking it yourself

You do not have to trust this page. A successful result gives you the timestamp token and the short list of sibling fingerprints needed to recompute the root by hand, using ordinary tools.