Audit-ready pack for Verae DataCubes on Peergos. Not a HIPAA/SOC2/ISO certificate.
Find a file
George Lambert e60776f43a
Some checks are pending
ci / markdown (push) Waiting to run
Use the verae.com header wordmark on a white background.
The previous PDF put VeraeFullLogo.png on a dark box, which is not
how the mark appears at the top left of verae.com. Flatten the
official wordmark onto white and drop the dark header plate.
2026-09-16 01:01:45 -04:00
.forgejo/workflows Sphinx HTML and 17-page LaTeX PDF for the audit-ready pack 2026-09-15 23:59:54 -04:00
build Use the verae.com header wordmark on a white background. 2026-09-16 01:01:45 -04:00
source Use the verae.com header wordmark on a white background. 2026-09-16 01:01:45 -04:00
.gitignore Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
BAA-DPA.md Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
CHECKLIST.md Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
HOWTO.md Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
LICENSE Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
Makefile Sphinx HTML and 17-page LaTeX PDF for the audit-ready pack 2026-09-15 23:59:54 -04:00
MODULE.md Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
PEERGOS-VERIFICATION.md Initial pack: Peergos EU audit verification and DataCube audit-ready checklist 2026-09-15 23:57:04 -04:00
README.md Rewrite audit-ready briefing: software is not a certificate. 2026-09-16 00:55:21 -04:00

Making yourself audit-ready with Verae DataCubes

Software alone does not make an organization HIPAA certified, SOC 2 attested, or ISO 27001 certified.

The Verae DataCube Solution gives you tools to store, communicate, timestamp, verify, and audit. To obtain those certifications and attestations, the organization still has to write policies, run procedures, operate internal controls, and sit with an independent auditor. Verae provides the tools, the background, and the software infrastructure for the technical portion of that work.

A Verae DataCube Server Solution provides secure communications and storage for data in transit and data at rest: point-to-point encryption (routing remains visible), IPFS content-addressed encryption at rest with Peergos hash verification, global timestamped receipts, and a write-once Iceberg archive.

Peergos was independently evaluated twice in Europe (Cure53, Berlin, 2019; Radically Open Security, Amsterdam, 2024). Those reports are public component evaluations. They are not a HIPAA, SOC 2, or ISO certificate.

Document

Sphinx sources in source/. Each chapter starts on a new page in the PDF. The Verae wordmark is at the top left of every page; Verae Inc contact is in the footer. Last chapters are biographies of James H. Garfinkel (FINRA CRD 5052743), Stuart Haber, and George Lambert.

make html
make latexpdf

Pack (Markdown companions)

File Use
PEERGOS-VERIFICATION.md Sourced Peergos/EU audit facts
BAA-DPA.md Counsel briefing
CHECKLIST.md Evidence list
HOWTO.md How to hand this to an auditor
MODULE.md Callers / non-runtime

https://www.verae.com · https://git.georgelambert.org/marchon/system-git-sync