Vendor-Proof Model

What happens when your compliance archive vendor disappears? With EvidenceAPI, nothing changes. You still produce records.

Customer-Owned WORM Vault

Your records are written into object storage you control, with retention enforced below the application layer.

Show technical detail

Records live in an S3 bucket you provision in your AWS account. Object Lock (Compliance mode) ensures even root can't delete or shorten retention. We have no admin access.

ObjectLockMode: COMPLIANCE
Versioning: Enabled
DefaultRetention: 7 years

Self-Describing Records

Each record ships with its own manifest so you can verify and rebuild views without vendor indexes.

Show technical detail

Every record has a JSON manifest sidecar stored with it in your vault — not in our SaaS. The manifest contains hashes, metadata, relationships, retention flags, and version links. No "dark data."

record: s3://your-vault/records/2025/06/abc123.eml
manifest: s3://your-vault/manifests/2025/06/abc123.json
sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Offline Production Kit

You can scan, verify, and export without calling our API—proving independent access during an outage.

Show technical detail

The Production Kit is escrowed into your tools bucket with each release. It scans manifests, verifies hashes, and exports records in open formats — with zero calls to our API or license server.

$ ./production-kit scan --vault s3://your-vault
847,293 records verified
export to PDF/A, PST, CSV

No Vendor-Hosted Index

Other systems keep the index in SaaS. We keep it with the data so exports still work when vendors disappear.

Show technical detail

Other "BYOD" solutions keep the index in their SaaS. Vendor outage = can't locate records. We store the index (manifest) with the data. You can always rebuild a searchable view locally.