How strong is your evidence?

Your compliance records look solid.

Until someone challenges them.

Records in email, Slack, SharePoint, Vanta and Teams carry a creation date that can be changed. Courts and regulators know this, they now ask for independent proof that your records existed when you say they did. immut creates that proof, in seconds.

See how it works
Add the trust layer in seconds. Blockchain used as legal evidence in 88 countries, 171 jurisdictions.
The question

The law does not ask whether you have records. It asks whether you can prove when they existed.

That is a different, much harder question. It is the question HMRC, the IRS, the ICO and courts in four jurisdictions are now deciding cases on.

Your records may be correct. The problem is that no-one can prove, independently, when they existed.

MARCH 202617WHEN?
The three properties that make evidence defensible
01
Contemporaneous
Created at the time, not assembled later from memory or AI.
02
Tamper-evident
Any change to the record is mathematically detectable.
03
Independently verifiable
By a party that does not trust you, and does not trust us.
=
The result
A successful defence of evidence.
The architectural flaw

Your common systems make authenticity easy to challenge.

01
The burden of proof falls on you.
Not on the platform.
02
Defending it is expensive.
$25,000 to clear one challenged document. Slow, too.
03
You rely on others to help.
Forensic experts, vendor support, audit logs you can't control.
Vanta MSA · clause on customer data

Customer, not Vanta, shall have sole responsibility for the accuracy, quality, integrity ... of all Customer Data.

This is not a flaw in any one product including Vanta. This is an architectural property of centralised storage. Self-produced records carry a date that is, architecturally, the date someone typed in.
Where the editable date lives
Email
Headers are plain text. Any client can rewrite the date before sending or forwarding.
Slack
Exports show edit timestamps, but the underlying audit log sits in a system your admin controls.
SharePoint
Version histories can be configured. Effective dates can be set retrospectively.
Google Drive
File timestamps can be rewritten with free tools in thirty seconds.
Compliance platforms
Customers set the effective date on uploaded evidence. The platform disclaims responsibility for it.
inspection-record.pdfCREATED12 Mar 202DATE FIELD · EDITABLE BY ANYONE WITH ADMIN ACCESS
What courts have already found

Four cases. Four jurisdictions. All failed on evidence challenges.

In each case, the substance of the records may have been correct. What failed was the ability to prove when those records were created. The records did not survive the challenge.

Case 01
Two days, not one year.
SPV-LS v. Transamerica
US, 8th Circuit · 2019

Metadata on a retainer agreement proved the document had been created two days before it was submitted to court, not a year earlier as its date claimed. The timing inconsistency was strong evidence of fabrication. The attorney faced sanctions under Rule 26(g).

Evidence type: a discovery document from a centralised file system.
AUTHENTICFABRICATEDFORENSICALLY IDENTICAL
Case 02
$15M+ conceded.
Lakepoint Land II v. Commissioner
US Tax Court · 2023

Supervisory approval forms produced by the IRS itself were found to have been backdated. The IRS had submitted false declarations to the court about when the approvals were obtained. The Tax Court sanctioned the IRS.

Over $15M in penalties conceded. Taxpayer awarded attorney fees. Internal government records from centralised agency systems.
RETAINER AGREEMENTCLAIMED DATE ON DOCUMENT14 January 2018METADATA · FORENSIC EXTRACTCreationDate: 16 January 2018 09:42 UTCModificationDate: 16 January 2018 09:48 UTCProducer: Microsoft Word 16.0TWO DAYSAFTER FILINGBACKDATED · METADATA WINS
Case 03
Custody lost.
Lenihan v. Shankar
Ontario Superior Court · 2021 ONSC 330

In a custody dispute, multiple emails and digital records produced from the party's own devices were found to have been spoofed or fabricated. The pattern of fabrication was comprehensive.

Credibility entirely destroyed. Custody was awarded against the party. Records from personal devices and centralised accounts.
CASE NO. 2021-ONSC-330AFFIDAVITWHEN?UNPROVEN DATEDISPUTED EXHIBIT
Case 04
Criminal.
Bennett Verby
UK · Corporate Criminal Offence · August 2025

First corporate Criminal Finances Act prosecution of an accountancy firm. £16M in R&D tax claims. English literature graduates wrote the technical reports retrospectively.

Trial September 2027. Manchester Crown Court. 12 weeks.
The Evidence Audit
See how strong your own evidence would stand up in a challenge.

Send one real sample. We walk through, live, how opposing counsel's forensic expert would attack it, and how an immut certificate on the same file changes the answer.

See all 43 rulings on record
Introducing immut

The Evidence Trust Layer.

immut is the proof layer that sits underneath your existing systems. Your records keep living where they live. immut anchors each one to a public ledger the moment it is saved, so the date is no longer something a regulator has to take your word for.

Underneath
Beneath your tools, not instead of them.

immut sits below Email, SharePoint, Drive, Slack, Vanta and the rest. The records stay where they live. We make them provable.

At the moment of creation
Proof formed on save.

Every file is hashed and anchored to a public ledger the moment it exists. Not weeks later. Not in response to an audit.

Independent
Verifiable without us.

The proof lives on a public blockchain. A regulator, a judge, or opposing counsel can verify it without trusting immut, and without trusting you.

Try it in your browser

See independent proof form, in seconds.

Drop a file. The hash is computed locally in your browser using the same primitive a regulator or a court would accept. Nothing is uploaded. The certificate you see is the same shape we issue in production.

crypto.subtle.digest('SHA-256', file)
Try it · fully on-device
Drop any file here.
We hash it in your browser. Nothing is uploaded. You watch the proof form.
+
Want to see this on your own evidence, with a forensic walk-through of how it would hold up in an adversarial proceeding?
How it works

Independent proof in four steps. Nothing leaves your device.

The proof outlives immut. If immut ceased to exist tomorrow, every certificate already issued remains independently verifiable on the public blockchain.

01
Hash it on your device.

immut generates a SHA-256 fingerprint of your file on your own hardware. The file itself never moves.

02
Record it on the public ledger.

The fingerprint is written to the XRP Ledger, a public distributed blockchain, with a precise timestamp.

03
Get your certificate.

immut returns a verifiable certificate showing the file fingerprint, the timestamp, and the public ledger record.

04
Anyone can verify it.

A judge, a regulator, or opposing counsel's expert can verify the certificate on the public ledger. Without trusting you. Without trusting us.

1 / 4
inspection-record.pdf
SAVED
#14523XRPL#14524XRPL#14525XRPL#14526XRPL#14527XRPLPUBLIC LEDGER · TAMPER-EVIDENT · INDEPENDENT
Certificate of proof
immut · valid
SHA-256 · 9f86d081…b0f00a08
XRPL block #14525
Verifiable by anyone, on the public ledger, without trusting immut.
COURT
READY
Integrations

Works inside the tools your team already uses.

immut protects evidence in the workflows you already have. No migration. No new home for your files. The originals stay where they live, and the proof stays with them.

YOUR EXISTING TOOLSEmailSlackDriveSharePointVantaIMMUT · EVIDENCE TRUST LAYERHash · Anchor · Certify#14523#14524#14525#14526#14527PUBLIC LEDGER · XRPL
Examples shown. Microsoft 365, Google Workspace, Slack, GitHub, Vanta, Drata, Notion, Box and more. Custom integrations on request.
Standards

The standards your evidence is judged against.

If you operate under any of these frameworks, immut produces records that survive the scrutiny their auditors apply. Examples below. The list is not exhaustive.

ISO 27001
Information security management
ISO 9001
Quality management
ISO 14001
Environmental management
ISO 45001
Occupational health & safety
SOC 2
Trust services criteria
CE Marking
EU product conformity
GDPR
Data protection records
HSE
Health & safety inspections
KYC / AML
Customer due diligence records
HMRC R&D
Additional Information Form
EU AI Act
Article 10 dataset governance
HIPAA
Protected health information audit trail
Not seeing yours? We work with any framework that requires dated, tamper-evident records.
Already accepted as evidence

Accepted in courts and across 88 countries.

Blockchain-anchored evidence is not theoretical. Courts and regulators have already ruled. 171 jurisdictions. Four continents.

US Federal Court
United States
US v. Sterlingov (2024). Daubert challenge survived. Blockchain evidence holds the same evidentiary standing as DNA analysis in US federal court.
EUIPO · all 27 member states
European Union
AZ Factory v. Valeria Moda (France, March 2025). Blockchain timestamp accepted as standalone proof of copyright ownership.
Supreme People's Court
China
1,400+ IP cases accepted as evidence since the 2018 ruling on blockchain-recorded timestamps.
Regulation 2025/2531
European Commission
Qualified electronic ledgers recognised in the regulation on electronic identification and trust services.
88
Countries
171
Jurisdictions
1,400+
IP cases in China
On the record

What immut is not.

Not a compliance platform.

Vanta, Drata and Secureframe collect your evidence. They do not prove when it existed. immut is the proof layer that sits underneath.

Not a document management system.

We do not store your files. We prove their existence on a public ledger, and your originals stay on your hardware.

Not a notarisation service.

You do not have to trust immut. The proof lives on a public blockchain, verifiable by anyone, independent of us.

Not a crypto product.

A blockchain wallet runs under the hood. You never touch it. All the strength of blockchain, none of the complexity. No tokens, no seed phrases, no volatility.

Before the question is asked

The question is not whether you will be investigated. It is whether you will be ready.

15 minutes. No slideware. You send one real sample. We show you, live, how it would hold up against opposing counsel's forensic expert, and how an immut certificate on the same file looks side by side.

Blockchain accepted in 88 countries. Verified cases in US, UK, Canada, Australia, EU.