immut is the Evidence Trust Layer. It sits underneath your existing compliance tools and anchors every file to the XRP Ledger blockchain with a precise timestamp. This creates tamper-evident, independently verifiable proof that a document existed at a specific moment, court-admissible in 88 countries.

Is blockchain evidence accepted in court?

Yes. Blockchain-anchored evidence has been accepted as legal evidence in US Federal Court (US v. Sterlingov, 2024), the EUIPO across all 27 EU member states (AZ Factory v. Valeria Moda, 2025), China's Supreme People's Court (1,400+ IP cases since 2018), and under EU Regulation 2025/2531. immut certificates are accepted in 88 countries and 171 jurisdictions.

Does my file leave my device?

No. immut generates a SHA-256 hash of your file and only that hash is recorded on the blockchain. Your original file is not stored by immut. Public proof. Private work.

Does immut replace Vanta or Drata?

No. immut is the proof layer that sits underneath your existing compliance tools. Vanta and Drata collect your evidence. immut proves when that evidence existed. They complement each other. immut adds the independent timestamp your compliance platform cannot provide.

Which compliance standards does immut support?

immut produces records that satisfy evidence requirements in ISO 27001, ISO 9001, ISO 14001, ISO 45001, SOC 2, GDPR, HMRC R&D, HSE health and safety, KYC/AML, EU AI Act, HIPAA, and more. Any standard that requires dated, tamper-evident records is supported.

What happens if immut shuts down?

Every certificate already issued remains independently verifiable on the public XRP Ledger. The proof does not depend on immut existing. A regulator, a judge, or opposing counsel can verify your certificate on the public blockchain at any time, with or without immut.

immut is the proof layer for digital files, built on the XRP Ledger blockchain. It creates permanent, independently verifiable proof that any digital file existed at a specific moment, unchanged, attributable, and court-ready.

immut generates a cryptographic hash (fingerprint) of your file. Only the hash is recorded on the public XRP Ledger blockchain with a precise timestamp. Anyone can verify the proof on the public ledger without trusting immut.

What industries does immut serve?

immut serves any regulated industry where contemporaneous evidence matters: ISO-certified organisations (ISO 27001, ISO 9001, ISO 45001), R&D tax claimants (HMRC, IRC §41), life sciences and GxP (FDA 21 CFR Part 11, ALCOA+), financial services (SEC Rule 17a-4), and health & safety compliance (UK HSE Sentencing Framework).

Is immut accepted in court?

Yes. immut certificates are accepted as legal evidence in 88 countries across 171 jurisdictions. Precedent cases include US v. Sterlingov (2024), AZ Factory v. Valeria Moda (France, 2025), and the China Supreme People's Court (2018, 1,400+ IP cases).

Does immut store my files?

No. immut only records a cryptographic hash of the file on the public blockchain, not the file itself. Your confidential work remains private.

Our Mission

We are building the proof layer for every digital file in regulated industries.

Rules exist to protect people and businesses. We are making it possible to prove the rules were followed, without anyone having to take someone else's word for it.

Source systems

TeamsSlackSharePointDriveGmailNotionGitHubFigmaSalesforceDropboxVanta

The proof layer

immutHash · Anchor · Verify

Verifiers

CustomerCourt / JudgeRegulatorAuditorInvestorInsurer

Why this matters

Right now, companies mark their own homework.

Regulated industries run on evidence. To show a regulator the rules were followed, companies collect and hand over their own records.

But that evidence can be edited after the fact, created retrospectively, or fabricated outright with AI. An authentic record and a backdated one are forensically identical. Nobody can tell them apart.

A few bad operators exploit exactly this. Regulators respond the only way they can, with more rules and more checks. Honest businesses end up paying for the dishonesty of the few.

The fix

We turn any document into evidence that proves itself.

immut takes a fingerprint of a file on your own device and records it on a public ledger, timestamped and permanent.

That record is cryptographically proven not to have been edited or backdated. Anyone can verify it without trusting you, and without trusting us.

The bigger picture

Proof that works for everyone.

When evidence is independently verifiable, the people doing the right thing finally stop carrying the cost of the few who don't.

Honest companies prove compliance faster.

Verifiable evidence replaces the back-and-forth of audits and challenge letters.

Read on

Regulators find bad actors, not good ones.

Scrutiny shifts to the operators who cannot prove their records are real.

Read on

The whole system gets lighter.

Less regulation needed. Lower cost of compliance. More trust on every side.

Read on

01 · Honest companies

Prove compliance in minutes, not months.

Audits today turn into back-and-forth: prove this date, prove this version, prove this signature was contemporaneous. Companies with nothing to hide still pay the cost in time and lawyers.

A verifiable fingerprint changes the conversation. The record either matches or it doesn't. The questions stop sooner. The cycle gets shorter. Compliance becomes something you finish, not something you survive.

02 · Regulators

Scrutiny moves to where it's needed.

A regulator's job is hard for one reason: they cannot tell the genuine submissions from the fabricated ones. So everyone gets the same level of suspicion, and the same volume of paperwork.

When honest companies can show an independent record of when each file existed, the regulator's attention follows the gap. The operators who can't prove their evidence is real are the ones who get the extra look. The good ones are left alone to do the work.

03 · The system

Less regulation needed. Lower cost of compliance.

Every layer of regulation is a workaround for a question the regulator can't yet answer: did this happen when you say it did? When that question stops being uncertain, the layer it caused is no longer needed.

That is the long game. Fewer audit cycles. Smaller compliance teams. More trust on every side. We are not promising less paperwork tomorrow. We are removing the reason for it.

The picture

One layer. Many verifiers. Trust flowing outward.

Join the mission

Help us build the proof layer.

We are looking for two kinds of people.

REGULATORS

For regulators & government

If you work inside a regulator or government body and want compliance evidence that is independently verifiable, not self-reported, reach out. We want to build with you.

ADVISORS

For advisors & consultants

If you advise regulated businesses on ISO, R&D tax, life sciences, financial services, or health and safety, and you want to give your clients evidence that holds up under scrutiny, let us talk.

Get in touchor write to djh@immut.io

Prove your first file in minutes.

Takes seconds. Works on any file type. No installation required.