Security & Integrity
Accountability needs stronger proof than a password.
Individual identities, trusted devices, step-up verification and an immutable history make each record attributable to a real person, at a real place, at a real time.
Controls
Built in, not bolted on.
Individual identities
Every person has their own account. No shared manager logins.
Trusted devices
Critical actions require an enrolled device.
Passkey / OS biometric step-up
Fresh verification on critical actions. Biometric verification remains on the user's device.
Rotating store challenge
A time-limited code shown in store confirms on-site presence.
Camera capture integrity
Server-checked private media hashes and one-use task permissions. Browser captures are not equivalent to native hardware attestation.
Separation of duties
Nobody reviews or approves their own work.
Strict store / department scope
People only see and act within their assigned scope.
Secure invitations
Accounts are created by invitation, tied to a role and scope.
Device recovery
Controlled re-enrolment when a device is lost or replaced.
Encrypted pending photo recovery
Browser camera photos may be AES-GCM sealed after a short connection loss and resynced only under the original live server permission. Expired permits require recapture. Native encrypted offline capture is not yet released.
Immutable history
An append-only event trail. Corrections are new events, not edits.
Preservation holds
Pause media expiry for records under investigation.
Immutable history
Corrections add to the record. They never rewrite it.
Every operational event is written to an append-only ledger with its actor, time and context — the foundation of every score and every audit.
Event history · Ilford · 26 Sep (click event to inspect)
Append-only- task.submittedAmara Osei · Clean waffle machine · Ilford
↳ WorkSubmission rev 1 · 2 live camera assets · SHA-256 verified
- evidence.reviewedPriya Shah · Approved · first pass
- stepup.verifiedPriya Shah · Passkey · trusted device
- challenge.matchedPriya Shah · Store code 4 8 1 7
- closing.walk.completedPriya Shah · 5 stations · 5 captures
Transparency
What Standvera does not claim
No system makes physical-world collusion mathematically impossible. Standvera makes it harder, more visible and more costly — and records what happened.
Risk signals prompt review rather than automatic accusation. A person always makes the judgement.
FAQ
Security questions
Run every site to the same standard.
Start with a focused pilot across 3–5 representative sites. See team execution, manager integrity and evidence quality side by side before you scale.