George Lambert
4fcbb9ac95
Open with an executive summary that HIPAA, SOC 2, and ISO 27001 are organizational programs. Verae DataCubes supply store, communicate, timestamp, verify, and audit tools for the technical portion only. Chapters cover transit (HPKE, visible routing), rest (IPFS/Peergos hash-verified restore), receipts, EU Peergos evaluations (Cure53 2019, ROS 2024), cross-blockchain timestamping, and write-once Iceberg archive. PDF is branded with the Verae logo top-left and Verae Inc contact in the footer; last chapters are sourced bios for Garfinkel (FINRA CRD 5052743), Haber, and Lambert.
1.9 KiB
Making yourself audit-ready with Verae DataCubes
Software alone does not make an organization HIPAA certified, SOC 2 attested, or ISO 27001 certified.
The Verae DataCube Solution gives you tools to store, communicate, timestamp, verify, and audit. To obtain those certifications and attestations, the organization still has to write policies, run procedures, operate internal controls, and sit with an independent auditor. Verae provides the tools, the background, and the software infrastructure for the technical portion of that work.
A Verae DataCube Server Solution provides secure communications and storage for data in transit and data at rest: point-to-point encryption (routing remains visible), IPFS content-addressed encryption at rest with Peergos hash verification, global timestamped receipts, and a write-once Iceberg archive.
Peergos was independently evaluated twice in Europe (Cure53, Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those reports are public component evaluations. They are not a HIPAA, SOC 2, or ISO certificate.
Document
Sphinx sources in source/. Each chapter starts on a new page
in the PDF. The Verae wordmark is at the top left of every page;
Verae Inc contact is in the footer. Last chapters are
biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart
Haber, and George Lambert.
make html
make latexpdf
- HTML:
build/html/index.html - PDF:
build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.pdf - Published: https://docs.pfc.georgelambert.org/audit-ready/
Pack (Markdown companions)
| File | Use |
|---|---|
PEERGOS-VERIFICATION.md |
Sourced Peergos/EU audit facts |
BAA-DPA.md |
Counsel briefing |
CHECKLIST.md |
Evidence list |
HOWTO.md |
How to hand this to an auditor |
MODULE.md |
Callers / non-runtime |
Related
https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync