How ProofIt Protects Files and Evidence
Learn what ProofIt stores, encrypts in transit for platform use, records publicly, retains, and deletes—plus access-control and privacy practices tied to real product behavior.
What stays private
Original uploaded files are hosted for your account use. They are not published on the blockchain and are never sent to the Trusted Timestamp Authority. Only cryptographic hashes and verification metadata are shared with external timestamping and chain systems.
What can be checked publicly
Certificate IDs can be checked through ProofIt’s verify flow. Blockchain records of file fingerprints and related certificate metadata are designed to be independently inspectable on-chain. Private certificate and file-view pages are not intended for public search indexing.
Account and access controls
Access to uploads, certificates, and downloads is gated by authenticated accounts. Certificates may also use optional password protection for file access. Use a strong unique password and keep account credentials private.
What ProofIt stores
Typical stored elements include account profile data, uploaded files (while retained), certificate metadata, SHA-256 hashes, blockchain transaction references, and—where enabled—RFC 3161 timestamp tokens and provider details needed for verification.
Retention after cancellation
Original uploaded files are deleted 30 days after subscription cancellation. Certificate records remain accessible for 1 year; after the original file is deleted, ProofIt can no longer verify that original file unless you provide it again. SHA-256 and blockchain records are permanent. TSA evidence is treated as permanent if you retain the token.
Evidence vs ownership
Security controls protect files and evidence records. They do not turn a ProofIt certificate into automatic legal ownership, a copyright guarantee, or a promise of court acceptance. Evidence of existence, time, and integrity is distinct from ownership.
Related policies
For full legal terms, see Privacy Policy and Terms of Service. Technical detail on hashing, timestamps, and chain anchoring is on the Technology page.
Operated by Global Kingdom International Company Limited, Hong Kong.