The record outlives the people who made it, the software that kept it, and us.
A fiduciary is judged on the record made at the time, sometimes decades later, by people who were not in the room. That record has to outlive the people who made it, the software that kept it, and us. These are our commitments. Each one is in force today, with the evidence linked, or carries a date; if a date passes unmet, our own build refuses to ship until this page says so.
Each one in force, or dated.
Your record is yours to take, any day.In force
Your book leaves as one bundle any day, as plain JSON with a SHA-256 manifest. Your decisions, your policies and each decision's prudence file download from the portal any day. When the agreement ends, the whole ledger comes to you in a documented format. No fee and no request; the only limit is on automated bulk extraction.
Check it: Export API · Termination terms
Anyone can check it without us.In force
The seal format is published under CC BY 4.0 for anyone to implement. The verifiers are standalone scripts that need nothing from us, and a foundation's 990-PF proof can be checked against the return fetched straight from irs.gov.
Check it: The seal format · verify_proof.py · Verify a seal
Time is witnessed by someone other than us.In force
Every day the head of each chain goes into a public log, under a timestamp from an independent RFC 3161 authority that anyone can check with openssl. A record dated today cannot later pass for one made earlier, or later.
Check it: The public log · measured by 2 controls on /trust
No one rewrites history quietly, including us.In force
Posted entries and recorded decisions cannot be edited or deleted; a correction is a new entry and both stay visible. The database refuses the change, and a synthetic posting proves it in production every hour.
Check it: The controls, live · measured by 3 controls on /trust
The daily anchor is locked beyond our reach.In force
Every daily anchor written since 26 September 2026 is stored in compliance mode: no one, us included, can shorten or remove it during its seven-year retention. Anchors written before then keep their original lock, and the public log timestamps them all.
Check it: The standard, section 4 · Why it holds
We stay independent of the money.In force
Our own claims are measured in public.In force
The page cannot run ahead of the system.
Every commitment above lives in one file of our code. Before any release ships, a check confirms that each piece of evidence exists, that each control named is one we measure, and that no dated commitment is past its date without being in force. If one is, the release does not ship until the commitment is kept or this page says plainly that it was not.
This charter describes the service; the Terms and your order form are the contract, and where they differ, they control. Not legal or investment advice.
Start with a record you can check.
A foundation's own 990-PF, sealed in seconds. No account.