Is this report the one we issued?
Every iDharma audit report is fingerprinted the moment it is generated: its SHA-256 digest is sealed into our tamper-evident, Article 12-style audit ledger. Paste a report's digest below to confirm the file is authentic and unmodified.
How to get a file's digest
Run one command against the PDF you received:
- Windows:
certutil -hashfile report.pdf SHA256 - macOS / Linux:
shasum -a 256 report.pdf
How this works
When a report is generated, iDharma computes the SHA-256 digest of the exact bytes delivered and seals it — with the audit reference, version and timestamp — into an append-only, hash-chained audit ledger built for EU AI Act Article 12-style record-keeping. Each ledger entry folds in the hash of the entry before it, so altering or deleting any historical record breaks every later link and is detected.
Verifying a digest therefore proves two things at once: the file matches what we issued (digest equality), and the record of issuing it has not been rewritten (chain integrity). This digest-based scheme is the pragmatic precursor to full C2PA content credentials, which will embed a signed manifest inside the report file itself — the verification address stays the same.