chanzo. origin data for due diligence, by Sysmera

Verify an evidence pack

Upload the evidence pack (.zip) as you received it. This page checks that Chanzo signed the pack's manifest, that every file in the pack matches the manifest, and that Chanzo issued the pack. Nothing you upload is stored.

Only have manifest.json and signature.json?

The other files of the pack are not checked this way.

Chanzo public signing key (Ed25519): ejTXhf0KXJ9fdoUtYMxzSmt3qrL5s0r/fJeWBkNDvmY=
Its fingerprint (SHA-256 of the key, the key_id in signature.json): 0df109048d269d97c5d6d1dc2977a91686767a5511b6dcfe927a3d1eafe50e72. The pack's README.txt gives the fingerprint of the key that signed it: compare the two.

Published checkpoints of the audit log

Every day Chanzo publishes, signed with the key below, a commitment to how many events each organisation's audit log holds and the hash of the last. Only Chanzo, or the organisation given its own log key, can open one. A later change to the log would no longer open a checkpoint already published. Keep a copy to check against later.

Newest: chanzo-audit-checkpoint-000001-20261105T195942Z.json (number 1, made 5 Nov 2026 19:59 UTC). All 1 checkpoint