For vendors

Any system can seal to the Standard.The mark goes on the evidence, never on the product.

The Standard is open to every vendor. A vendor whose system meets it seals its packages with the words Sealed to the FusionTrace Evidence Standard, under the vendor's own name. This page says what that takes.

For every vendor

What a system must do to carry the mark.

The same for every vendor. The first implementation is held to it like any other.

  1. Seal the package.Every file hashed with SHA-256, an index of those hashes, a manifest, and an Ed25519 signature over the index and the manifest, so whoever holds a package can check it in a browser without asking the vendor.
  2. Publish the signing key.The public half of the key, at an address a reader can see belongs to the vendor from outside the package. The Verify page shows the fingerprint; the vendor's published key is what it is compared with.
  3. Show the mark only on evidence.The words appear on a sealed package and its cover sheet. Never on a screen, a box, a brochure or a sales page.
  4. Carry no credit line.The product stays the vendor's. No "built on" line and no FusionTrace™ logo on the product.

What it means for your customers

A system built to the Standard leaves every determination to a person, 100% of the time. It keeps a business's records in the business's own account, under its control. It never puts a name to a person. Every package is sealed. Whoever holds a sealed package can check it.

Nothing is sold. A business decides, one request at a time, what it releases to a law enforcement agency. The agency sees a record only after a named person at the business approves its request. The release opens the record to the agency for 90 days, and every look in the system that holds it is logged. A copy the agency downloads is kept as long as the case and the law require, and a certified agency commits to log every access to it.

Certification is never for a product. FusionTrace Certified™ is for law enforcement agencies and investigators. A vendor's system is held to the Standard by the people who verify its packages, not by a badge. When assessment of implementations opens, every implementation, the first included, will be assessed against the same published text, and the result will be public.

Questions about sealing to the Standard.

Write to standard@fusiontrace.io.

Read the Standard · Try the Verify page

Disclosure

The Standard is stewarded by Stephen Pales and Jim Cords, co-founders of BlueWave Technology, Inc., which builds software to it. Any vendor may build to the Standard, and every implementation, the first included, is held to the same rules. U.S. Patent No. 11,830,346 B2 · 3 additional patents pending. BlueWave Technology, Inc. will license any patent claim essential to implementing the Standard on reasonable and non-discriminatory terms.