Offline-verifiable signature evidence

Every competitor's audit trail is checkable only while that vendor exists and your account is open. Ours is a folder you can check on a laptop with the wifi off.

Ask your current provider a simple question: in seven years, when the contract is disputed and your account with them was closed four years ago, what exactly do you hand the other side?

For most platforms the honest answer is a PDF and a login that no longer works. The audit trail lives in their database. The verification page runs on their servers. If the company is acquired, changes its export format, or simply goes away, what you have left is a document and an assertion.

What we hand you instead

A folder. Inside it:

File	What it is

|---|---|

certificate.json	Every fact the certificate asserts, machine-readable
events.json	The full hash-chained event trail
signed.pdf	The executed document
manifest.json	Every file above, with its size and SHA-256
verify.mjs	A checker that runs on any machine with Node

Run node verify.mjs in that folder. No install, no network, no account. It reports whether the document is the document, whether the certificate matches its own seal, and whether the event chain is unbroken — and it exits non-zero when something does not hold.

The part that makes it trustworthy

The verifier is not written twice. It is assembled from the same hash, chain, seal and verify modules the platform itself runs, read off disk at package time. There is nothing to keep in step because there is nothing else — the code you run *is* the code we run.

Shipping files you would have to reimplement our hashing scheme to check is not portability. It is a puzzle.

What a verifier should refuse to say

If a certificate was sealed under an earlier definition of the seal, the honest response is to recognise it and report it valid under that one — not to call a genuine document altered. And a global chain means a corrupted row belonging to a stranger can break a check that has nothing to do with your agreement. That is a limit on what we can prove, reported as a caveat, rather than a finding against your document.

Check ours

Download a real package — about 12 KB — and try to break it. Edit one character of a signer's address and run it again.

Last reviewed 2026-09-21. Pactlyra produces a detailed evidence record for every completed document. Electronic signature validity depends on your jurisdiction, the document type, and how the transaction is carried out; nothing here is legal advice.