Making yourself audit-ready with Verae DataCubes

Software alone does not make an organization HIPAA certified, SOC 2 attested, or ISO 27001 certified.

The Verae DataCube Solution gives you tools to store, communicate, timestamp, verify, and audit. To obtain those certifications and attestations, the organization still has to write policies, run procedures, operate internal controls, and sit with an independent auditor. Verae provides the tools, the background, and the software infrastructure for the technical portion of that work.

A Verae DataCube Server Solution provides secure communications and storage for data in transit and data at rest: point-to-point encryption (routing remains visible), IPFS content-addressed encryption at rest with Peergos hash verification, global timestamped receipts, and a write-once Iceberg archive.

Peergos was independently evaluated twice in Europe (Cure53, Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those reports are public component evaluations. They are not a HIPAA, SOC 2, or ISO certificate.

Document

Sphinx sources in source/. Each chapter starts on a new page in the PDF. The Verae wordmark is at the top left of every page; Verae Inc contact is in the footer. Last chapters are biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart Haber, and George Lambert.

make html
make latexpdf

• HTML: build/html/index.html
• PDF: build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.pdf
• Published: https://docs.pfc.georgelambert.org/audit-ready/

Pack (Markdown companions)

File	Use
PEERGOS-VERIFICATION.md	Sourced Peergos/EU audit facts
BAA-DPA.md	Counsel briefing
CHECKLIST.md	Evidence list
HOWTO.md	How to hand this to an auditor
MODULE.md	Callers / non-runtime

Related

https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync