Checking an audit record outside Kanonik
A recipient can check that an exported audit history has not changed since it was signed, instead of relying only on the sender's word.
Hash-chained history
General meaning: Each entry contains a cryptographic link to the preceding history, making changes detectable against a trusted reference.
Why it matters
A recipient can check the covered history instead of relying only on the sender's assurance that it has not changed.
With Kanonik
Audit exports let recipients check the integrity of covered history against a trusted reference.
What to consider
An integrity check needs a trusted reference. It detects changes within its coverage; it does not prove that the events describe reality.
Related scenarios: Hash-chained history | Glossary definition
Digitally signed records
General meaning: A digital signature lets someone check that particular data was signed using a particular key and has not changed since.
Why it matters
The covered data can be checked against what was signed and against the expected key. A recipient can assess a record without relying on its appearance.
With Kanonik
Verification materials are supplied for checking the signed, covered history in an audit export.
What to consider
The recipient must trust the signing key and establish which content is covered. A valid signature does not establish that a control worked or a claim was true.
Related scenarios: Digitally signed records | Glossary definition
Offline verification
General meaning: Checking a file on your own machine without contacting the service that produced it.
Why it matters
A customer or auditor can inspect the covered record on their own machine. They do not need to join your workspace simply to perform the local integrity checks.
With Kanonik
The audit export includes the event chain and verification materials. Recipients can recompute the sealed record's hash chain in their own browser, on their own machine, with no Kanonik account.
What to consider
Verification covers defined properties of the export, not every file or factual assertion. Offline checks also cannot establish current status changes that happened after the export was created.
Related scenarios: Offline verification | Glossary definition
Portable assurance
General meaning: An assurance record remains useful and inspectable outside the application that created it.
Why it matters
The recipient has something they can inspect rather than making every review depend on access to your software. Useful history is less likely to be trapped in one interface.
With Kanonik
Audit exports carry recorded history and local verification materials outside the workspace. A recipient can inspect that covered history without joining your team. A Proof Snapshot is free on both plans, with no cap.
What to consider
An export is not automatic migration to another product. Local integrity checks do not establish current status or guarantee recipient acceptance.
Continue reading
Run your own record on Solo.
Solo is $99 a month and starts with a 14-day trial.