# Making yourself audit-ready with Verae DataCubes

**Software alone does not make an organization HIPAA certified,
SOC 2 attested, or ISO 27001 certified.**

The Verae DataCube Solution gives you tools to **store**,
**communicate**, **timestamp**, **verify**, and **audit**. To
obtain those certifications and attestations, the organization
still has to write **policies**, run **procedures**, operate
**internal controls**, and sit with an **independent auditor**.
Verae provides the tools, the background, and the software
infrastructure for the **technical portion** of that work.

A Verae DataCube Server Solution provides secure communications
and storage for **data in transit** and **data at rest**:
point-to-point encryption (routing remains visible), IPFS
content-addressed encryption at rest with Peergos hash
verification, global timestamped receipts, and a write-once
Iceberg archive.

Peergos was independently evaluated **twice in Europe** (Cure53,
Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those
reports are public component evaluations. They are **not** a
HIPAA, SOC 2, or ISO certificate.

## Document

Sphinx sources in `source/`. Each chapter starts on a new page
in the PDF. The Verae wordmark is at the top left of every page;
Verae Inc contact is in the footer. Last chapters are
biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart
Haber, and George Lambert.

```
make html
make latexpdf
```

* HTML: `build/html/index.html`
* PDF: `build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.pdf`
* Published: https://docs.pfc.georgelambert.org/audit-ready/

## Pack (Markdown companions)

| File | Use |
|---|---|
| `PEERGOS-VERIFICATION.md` | Sourced Peergos/EU audit facts |
| `BAA-DPA.md` | Counsel briefing |
| `CHECKLIST.md` | Evidence list |
| `HOWTO.md` | How to hand this to an auditor |
| `MODULE.md` | Callers / non-runtime |

## Related

https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync