Coming soon

This workflow is in development and is not available yet. It is a preview of a planned application built on the IP Vault evidence engine.

Register your interest
For agencies, freelancers and DevSecOps

Prove delivery before the invoice dispute starts.

Show exactly what was delivered, and when, without exposing source code. Seal a milestone, repository tree or release artefact with a record the client can verify.

Milestone delivery records
Repository tree and AST manifests
A public verification link
Code stays private

Evidence record

Software & Delivery

Coming soon
Record status Sealed and timestamped
Time source eIDAS qualified + Bitcoin
File storage Your cloud or local drive
Version Linked to prior certificate
Verification Shareable public record
Included in the archive
Declaration Manifest .tsr .ots ZIP

The problem

What makes this hard to prove today

Most evidence problems are not about whether a file exists. They are about whether you can show what it was, when it existed and that it has not changed since.

Git dates can be rewritten

Author and committer dates are easy to amend or rebase, so a commit history alone is weak proof of delivery.

Clients dispute the delivery date

A late-delivery claim can appear after the work is already in use, putting the final invoice at risk.

Code can be reused after rejection

Proving what was delivered helps when a client claims the work was built independently in-house.

Supply-chain artefacts need provenance

Binaries, SBOMs and vendor drops need a verifiable record of what was received and when.

What you get

An evidence pack you can actually use

IP Vault produces the sealed record. Your team keeps control of the files and decides who receives the verification link.

01

A timestamped delivery certificate

Seal the exact repository tree or deliverable before handover.

02

A manifest the client can check

File list, tree hash and AST metadata are captured in the record.

03

A public verification link

Attach it to the invoice or handover email so the client can check the record.

04

Release and SBOM attestations

Seal build artefacts or an SBOM without handing over the source.

How it works

Three steps, no new storage platform

1

Package the milestone

Select the repository archive, release artefact or deliverable that is being handed over.

2

Seal the delivery record

The files are hashed and the manifest is timestamped through both time anchors.

3

Send the link with the invoice

The client can verify the record while the code remains under your control.

Regulatory context

Built for software delivery and supply-chain evidence

IP Vault evidences delivery and integrity. It is not an escrow service and does not replace your contract, acceptance process or payment terms.

WIPO Copyright Treaty, Article 4
TRIPS Agreement, Article 10(1)
EU Cyber Resilience Act
US Executive Order 14028
NIST Secure Software Development Framework
SLSA supply-chain levels
UK Late Payment of Commercial Debts (Interest) Act 1998

Who it is for

Built for teams that have to show their work

Talk to us about your workflow →
Development agencies Freelance developers and designers Fractional CTOs DevSecOps teams Software vendors Procurement teams

Common questions

The short answers

Do we have to upload our source code?
No. Files are hashed in memory and the archive is stored in your own cloud or local storage.
Can the client verify it?
Yes. Share the public verification record with the client.
Does it work with CI/CD?
The current product is browser-based. A headless API and CI/CD integration are on the roadmap, not yet available.
Can we seal a release without revealing it?
You can seal the digest and manifest and share only the verification record.

Create the record now, decide who sees it later

Start with a single protection run. Keep the archive, share the verification link, and add revisions when the work changes.