George Lambert
4fcbb9ac95
Some checks are pending
ci / markdown (push) Waiting to run
Open with an executive summary that HIPAA, SOC 2, and ISO 27001 are organizational programs. Verae DataCubes supply store, communicate, timestamp, verify, and audit tools for the technical portion only. Chapters cover transit (HPKE, visible routing), rest (IPFS/Peergos hash-verified restore), receipts, EU Peergos evaluations (Cure53 2019, ROS 2024), cross-blockchain timestamping, and write-once Iceberg archive. PDF is branded with the Verae logo top-left and Verae Inc contact in the footer; last chapters are sourced bios for Garfinkel (FINRA CRD 5052743), Haber, and Lambert.
55 lines
1.9 KiB
Markdown
55 lines
1.9 KiB
Markdown
# Making yourself audit-ready with Verae DataCubes
|
|
|
|
**Software alone does not make an organization HIPAA certified,
|
|
SOC 2 attested, or ISO 27001 certified.**
|
|
|
|
The Verae DataCube Solution gives you tools to **store**,
|
|
**communicate**, **timestamp**, **verify**, and **audit**. To
|
|
obtain those certifications and attestations, the organization
|
|
still has to write **policies**, run **procedures**, operate
|
|
**internal controls**, and sit with an **independent auditor**.
|
|
Verae provides the tools, the background, and the software
|
|
infrastructure for the **technical portion** of that work.
|
|
|
|
A Verae DataCube Server Solution provides secure communications
|
|
and storage for **data in transit** and **data at rest**:
|
|
point-to-point encryption (routing remains visible), IPFS
|
|
content-addressed encryption at rest with Peergos hash
|
|
verification, global timestamped receipts, and a write-once
|
|
Iceberg archive.
|
|
|
|
Peergos was independently evaluated **twice in Europe** (Cure53,
|
|
Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those
|
|
reports are public component evaluations. They are **not** a
|
|
HIPAA, SOC 2, or ISO certificate.
|
|
|
|
## Document
|
|
|
|
Sphinx sources in `source/`. Each chapter starts on a new page
|
|
in the PDF. The Verae wordmark is at the top left of every page;
|
|
Verae Inc contact is in the footer. Last chapters are
|
|
biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart
|
|
Haber, and George Lambert.
|
|
|
|
```
|
|
make html
|
|
make latexpdf
|
|
```
|
|
|
|
* HTML: `build/html/index.html`
|
|
* PDF: `build/latex/peergos-making-yourself-audit-ready-with-verae-datacubes.pdf`
|
|
* Published: https://docs.pfc.georgelambert.org/audit-ready/
|
|
|
|
## Pack (Markdown companions)
|
|
|
|
| File | Use |
|
|
|---|---|
|
|
| `PEERGOS-VERIFICATION.md` | Sourced Peergos/EU audit facts |
|
|
| `BAA-DPA.md` | Counsel briefing |
|
|
| `CHECKLIST.md` | Evidence list |
|
|
| `HOWTO.md` | How to hand this to an auditor |
|
|
| `MODULE.md` | Callers / non-runtime |
|
|
|
|
## Related
|
|
|
|
https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync
|