Trust
This page is rendered from a signed trust-center bundle, produced by the same command any customer can run against their own deployment.
| Bundle digest | 0460f438222a49e03f4d6504b8d77a79a9f1544d03896449499861a136789c8a |
|---|---|
| Generated at | 2026-09-21T12:56:56.360053+00:00 |
| Freshness | FRESH -- generated 11 day(s) ago (2026-09-21T12:56:56.360053+00:00) |
| Signer public key | cef09333b2ff669c79aeb08dc1e51c9fa90c0a9e73e86a812f0799a57e374a23 |
The full signed bundle is available under NDA from sales@actaseal.com. Check its digest and signature against the values above.
SBOM
Not embedded in this bundle.
Resilience drill receipts
| Drill | Result |
|---|---|
| tamper | PASS -- all injected faults detected |
| key_compromise | not included in this bundle |
| restore_corruption | not included in this bundle |
CUEC declaration
Complementary user-entity controls: what the operator of a deployment is responsible for.
| Control | Statement |
|---|---|
| key_custody | ActaSeal never holds a production signing key; the deployment operator is responsible for custody of whatever key is registered as active (KMS/HSM/offline). |
| access_review_cadence | ActaSeal provides the mechanism to record an audit-trail review (who reviewed, what window); deciding who reviews and how often is the operator's own control. |
| retention_profile | Retention duration is DATA the operator selects via a FrameworkProfile (or leaves undetermined); ActaSeal does not hardcode a retention period. |
| tsa_pool | Which RFC 3161 timestamp authorities are trusted is a caller-supplied pool; ActaSeal does not ship or hardcode a fixed TSA set the operator is bound to. |
| approver_role_assignment | Which role is required to approve a given policy decision is operator-set policy data (ApprovalRule.required_role); ActaSeal enforces a mismatch (APPROVER_ROLE_MISMATCH) but does not choose or hardcode who holds that role. |
| network_component_selection_under_airgap | Whether network-touching components (S3 Object Lock anchor, Rekor, RFC 3161 TSA pool, WorkOS/Logto SSO, SMTP/Resend email) are enabled is the operator's own ACTASEAL_AIRGAPPED choice; ActaSeal refuses each by name rather than silently degrading when air-gapped mode is set. |
Security questionnaires
Completed CAIQ-Lite and SIG-Lite questionnaires are available under NDA from sales@actaseal.com.