George Lambert
5df7ed87d5
Some checks are pending
ci / markdown (push) Waiting to run
Those certifications require organizational policies and external auditing. This briefing covers that process from software through organizational planning. |
||
|---|---|---|
| .forgejo/workflows | ||
| build | ||
| source | ||
| .gitignore | ||
| BAA-DPA.md | ||
| CHECKLIST.md | ||
| HOWTO.md | ||
| LICENSE | ||
| Makefile | ||
| MODULE.md | ||
| PEERGOS-VERIFICATION.md | ||
| README.md | ||
Making yourself audit-ready with Verae DataCubes
Software alone does not make an organization HIPAA certified, SOC 2 attested, or ISO 27001 certified.
The Verae DataCube Solution gives you tools to store, communicate, timestamp, verify, and audit. To obtain those certifications and attestations, the organization still has to write policies, run procedures, operate internal controls, and sit with an independent auditor. Verae provides the tools, the background, and the software infrastructure for the technical portion of that work.
A Verae DataCube Server Solution provides secure communications and storage for data in transit and data at rest: point-to-point encryption (routing remains visible), IPFS content-addressed encryption at rest with Peergos hash verification, global timestamped receipts, and a write-once Iceberg archive.
Peergos was independently evaluated twice in Europe (Cure53, Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those reports are public component evaluations. They are not a HIPAA, SOC 2, or ISO certificate.
Document
Sphinx sources in source/. Each chapter starts on a new page
in the PDF. The Verae wordmark is at the top left of every page;
Verae Inc contact is in the footer. Last chapters are
biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart
Haber, and George Lambert.
make html
make latexpdf
- HTML:
build/html/index.html - PDF:
build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.pdf - Published: https://docs.pfc.georgelambert.org/audit-ready/
Pack (Markdown companions)
| File | Use |
|---|---|
PEERGOS-VERIFICATION.md |
Sourced Peergos/EU audit facts |
BAA-DPA.md |
Counsel briefing |
CHECKLIST.md |
Evidence list |
HOWTO.md |
How to hand this to an auditor |
MODULE.md |
Callers / non-runtime |
Related
https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync