-
Notifications
You must be signed in to change notification settings - Fork 0
What is TrustSignal
Navigation
- Home
- What is TrustSignal
- Architecture
- Verification Receipts
- API Overview
- Quick Verification Example
- Vanta Integration Example
TrustSignal is evidence integrity infrastructure for compliance artifacts. It issues signed verification receipts and preserves the information needed to later confirm that a verification result still corresponds to the artifact and policy context originally evaluated.
TrustSignal helps teams:
- create signed receipts when evidence is evaluated
- retrieve those receipts later for audit, review, or partner workflows
- re-verify stored receipts without depending on screenshots or manual notes
- export normalized evidence payloads for downstream systems
TrustSignal fits behind an existing platform such as:
- a compliance operations system
- an evidence collection workflow
- a partner portal
- a vertical workflow such as deed verification
The upstream platform remains the system of record. TrustSignal adds integrity evidence at the boundary.
At a product level, the model is straightforward:
- An upstream system submits a verification request or artifact reference.
- TrustSignal evaluates the request against the configured policy and data dependencies.
- TrustSignal returns a decision plus a signed verification receipt.
- Downstream systems use the receipt as a stable audit artifact.
- Later checks can confirm receipt integrity, status, and lifecycle state.
In the current codebase, the integration-facing /api/v1/* routes implement that model by validating requests in the gateway and delegating the major lifecycle actions to the engine interface.
TrustSignal is not:
- a replacement for compliance workflow software
- a legal decision engine
- a guarantee that an upstream source system is correct
- a substitute for environment-specific security evidence or control validation
This repository currently exposes:
- the integration-facing
/api/v1/*API surface - the legacy
/v1/*API surface used by the JavaScript SDK - the DeedShield application module as the current product surface in-repo
The product framing remains broader than a single module: TrustSignal is the integrity layer that sits behind workflow-specific applications.