Tsubacheck
ESENCAPT Contact

Compliance

Designed in reverse: from what a court accepts.

Proof is only useful if a third party can check it independently. That is why every layer of the engine rests on a public standard, not on our word.

  • eIDAS 2

    Reports are signed with an advanced electronic signature in PAdES LTA format, verifiable in any EU country and over the long term, even if the certificate expires.

  • GDPR

    Minimal data and explicit consent. The engine does not track continuously: it records only the moment of the action that has to be proven.

  • Biometrics

    Liveness detection certified against presentation attacks under ISO/IEC 30107-3: masks, photos, replayed videos and deepfakes.

  • Operator

    Number and device verification with the GSMA Open Gateway APIs, at telecoms operator level.

  • Blockchain

    Every record leaves a fingerprint on a public chain. Anyone can check it has not been altered, without asking our permission.

  • ISO 27001

    Certification of the information security management system in progress.

  • eIDAS
  • GDPR
  • GSMA
  • ISO 27001

What we do not promise.

A court or an authority decides whether to accept a piece of evidence. Tsubacheck does not control that decision. What it does is make sure the evidence arrives complete, sealed and verifiable, so the argument is about the facts and not about whether the document is genuine.