Whoever controls the record
controls the truth.

Built for courtroom scrutiny. Sealed on your device. Timestamped by three independent witnesses. Locked in immutable storage that no one can alter or delete.

Claim a Charter seat
Hedera Consensus · Live
Bitcoin Timechain · Anchored
RFC 3161 Timestamp · Active
Sealed on your device
Never on ours
The asymmetry
Your AI provider has the record. You don't.
Until now.
The architecture
Sealed on your device before it reaches anyone's servers.
Not a policy. A technical fact.
The proof
Three independent timestamp witnesses. No single point of trust.
Hedera · Bitcoin · RFC 3161 — independently verifiable on public blockchains
The standard
A record that predates any dispute. Structured for court in one click.
FRE 902(14) · eIDAS · ESIGN Act
Evidentiary
Designed for FRE 902(14)
Regulatory
eIDAS 910/2014 · ESIGN Act · EU AI Act Art. 12
Cryptographic
RFC 3161 · RFC 8032 · FIPS 180-4/202
Architecture
Zero-Knowledge · 256-bit AEAD · Client-Side Encryption
The structural problem

In 2025, courts began disqualifying attorneys — not fining them, disqualifying them — for AI-related misconduct.Johnson v. Dunn, N.D. Ala. 2025; Mata v. Avianca, S.D.N.Y. 2023 The common thread: no verifiable record of what the attorney actually asked or verified.

Your AI provider built the tool, holds the record, and controls what a court sees. They are the evidence and the witness simultaneously.

In New York Times Co. v. Microsoft Corp., No. 1:23-cv-11195 (S.D.N.Y.), OpenAI spent two and a half months preparing 20 million user chat logs before producing them under court order. Two and a half months of deciding what gets de-identified, what format is used, what context is included, and what is omitted.

The professional whose conversations those were had no equivalent record. They had nothing that predated the provider's version.

Apostillum gives that ownership back to you — sealed before the preparation window begins.

Without Apostillum

Attorney receives a bar complaint alleging reliance on unverified AI output. She verified every citation manually — but has no record of doing so. Her ChatGPT history is on OpenAI's servers, unverifiable, and outside her control. The careful attorney and the reckless attorney look identical.

With Apostillum

The same attorney exports a sealed record showing her prompt at 2:14 PM asking the AI to verify citations, the AI's response, and her follow-up corrections — all sealed with three independent timestamps before the complaint was filed. Her diligence is visible and provable.

A screenshot
  • Can be edited after the fact
  • No proof of when it was taken
  • No chain of custody
  • Easily challenged in court
An Apostillum record
  • Cryptographically sealed at creation
  • Three independent timestamps
  • Full chain of custody declaration
  • Designed for FRE 902(14)
How it works

Here is how it works. You change nothing about how you work.

It runs silently in the background — a sealed record is created the moment any AI conversation occurs. You change nothing about how you work. If you ever need to prove what was said, the record already exists.

01
Use any AI tool normally
ChatGPT, Claude — with Harvey, Gemini, and Copilot on the roadmap. You change nothing about how you work.
02
Captured at the moment of creation
A small piece of software running locally seals the conversation the moment it occurs. Nothing leaves your machine in readable form.
03
Encrypted on your device
The plaintext — the actual words — never leaves your machine. We store a locked box whose combination we were never given.
04
Three witnesses confirm the moment
A mathematical fingerprint is sent simultaneously to Hedera, Bitcoin via OpenTimestamps, and an independent RFC 3161 timestamp authority. Three systems that have never shared infrastructure.
05
Encrypted data locked in immutable storage
An unbreakable encrypted blob of your data is sent to Amazon Web Services Write Once, Read Many storage (AWS WORM) — the world's largest cloud infrastructure, operating across dozens of data centers on six continents. Once written, the record cannot be deleted or overwritten through any API operation during the retention period — a minimum of twenty years. Not even Amazon Web Services, Apostillum, or a court order directed at us can alter or delete it before the retention period expires. This is not a policy. It is enforced at the infrastructure level.
06
Structured for court in one click.
Full conversation, all three timestamp proofs, WORM storage confirmation, and a plain-English chain of custody written for a judge who has never heard the word blockchain. Because timestamps live on public blockchains and encrypted records are locked in Amazon's immutable storage, your proof remains independently verifiable for a minimum of twenty years, regardless of any party's continued existence.
Immutable by design

Write once. Read many. Delete never.

Every sealed record is written to WORM storage — Write Once, Read Many infrastructure provided by Amazon Web Services, the world's largest cloud platform, operating across dozens of data centers on six continents. The storage uses Amazon S3 Object Lock in Compliance mode — a configuration where no record can be deleted or overwritten through any API operation before its retention period expires. Not by Apostillum. Not by Amazon Web Services. Not by a court order directed at either party. The constraint is absolute: it is enforced at the infrastructure level, not by policy.

If Apostillum shuts down
Your sealed records survive.
Your sealed records survive in immutable storage. Independent verification remains possible via public blockchains. Our existence is not required for your records to be valid.
If someone demands deletion
WORM Compliance mode cannot be overridden.
Not by the storage provider (Amazon Web Services), not by the account holder, not by Apostillum employees. This is an infrastructure constraint, not a policy.
Twenty-year retention
Every record carries a minimum twenty-year lock.
After twenty years, records can be renewed or released at the account holder's discretion.
Amazon Web Services S3 Object Lock · Compliance Mode · WORM-certified storage
The real cost of not having this

The cost of proof is nothing.
The cost of having none is everything.

In 2025, over 200 attorneys faced documented sanctions for AI-related misconduct. — Thomson Reuters, AI & the Legal Profession: 2025 Survey

Firm policies do not protect you. Records do. At charter rates, Apostillum costs less than a single court filing fee.

Digital forensic audit after litigation
$25,000 – $75,000
Disqualification from a matter
Career event
Malpractice policy gap for AI use
Uninsured
Apostillum — enterprise
$1,499 / seat / month
Apostillum — standard
$699 / seat / month
Apostillum — charter membership
Limited · Locked permanently
$299 / month
The compliance clock
August 2, 2026
EU AI Act Article 12 enforcement begins. Your AI audit trail should already exist.

Article 12 requires automatic recording of events over the lifetime of high-risk AI systems, with minimum six-month retention and broader documentation kept for ten years. Over 40% of companies currently fail Article 12 audits due to incomplete or unavailable logs. — European Commission, AI Act Readiness Assessment, 2025 Fines reach €35 million or 7% of global turnover.

In the United States, over 300 judges have issued AI-specific standing orders. — ABA Standing Committee on Ethics & Professional Responsibility; Law.com AI Standing Order Tracker The ABA's Formal Opinion 512 requires competence, confidentiality, and transparency in AI use. New York now requires two annual CLE credits in AI competency.

The question is not whether documented AI governance will be required. It is whether your records will predate the requirement.

Common questions

What people ask before they start.

"Doesn't ChatGPT already keep my history?"
It does — on their servers, under their control, in a format you cannot authenticate. Could you subpoena OpenAI's servers, get a record, and present it as admissible evidence with a verified chain of custody? Our record is yours. Encrypted so only you can read it, with cryptographic proof that it hasn't been touched since the moment it was created.
"My malpractice insurance covers this."
The ABA Standing Committee on Lawyers' Professional Liability noted in 2025 that no comprehensive AI malpractice coverage currently exists for legal professionals. Insurers are already adding sublimits — $500K caps on AI-related claims even on $10M policies. And even when insurance pays, it doesn't save your bar license. It doesn't stop disqualification.
"I'm careful — I always verify what the AI tells me."
Your carefulness is invisible if you have no record of it. If someone alleges you relied on an AI response without verification, and you have no log, you can't prove you verified anything. The careful attorney without a record and the reckless attorney without a record look identical to a court.
"What happens to my data? Is it private?"
Your conversations are encrypted on your device with a key only you hold — Apostillum never sees the content. For long-term archival, the archive is protected by a separate key split into five shares, all generated and downloaded on your device. You decide how to manage them — keep all five for sole control, or distribute shares to trusted parties for institutional governance. Apostillum never sees, stores, or transmits any key share. Our employees cannot read your conversations. Not today, not if we're acquired, not ever. The fingerprint we write to the blockchain contains no readable content — it's a mathematical hash, like a serial number.
"Can't I just screenshot my conversations?"
Screenshots can be edited. They have no cryptographic proof of when they were taken or that they haven't been modified. A lawyer who presents a screenshot as evidence of their due diligence is likely to face challenge. What we provide is the chain of custody — the same standard evidence labs use.
"Has this actually been admitted in court?"
Not yet. Apostillum's architecture is designed to meet the technical requirements of FRE 902(14), eIDAS, and ESIGN. We are actively working with legal technologists and forensic practitioners to establish formal validation. We invite scrutiny — that is the point. The system is built so that any qualified examiner can independently verify every record.
"What if Apostillum shuts down?"
Your records are encrypted on your device — not ours. The timestamps are written to public blockchains that will outlast any company. Even if Apostillum ceased to exist tomorrow, your records remain independently verifiable by any third party, for a minimum of twenty years. We designed the system so that our survival is not required for your records to be valid. No vendor lock-in. No dependency. The proof stands alone.

We built it so that even we cannot lie.
That is not a feature. That is the product.

If anyone — including us — altered a single record, the cryptographic hash would no longer match the three independent timestamps. The math would catch it before any human could.

Claim a Charter seat Verify a record →
Claim a Charter seat