Security

SECURITY SCOPE

This page describes the security architecture, integrity controls, and custody protections applied to VerifiedClimate™ Records and the RegistryRail™ evidentiary infrastructure.
It explains how submissions are processed, protected, and preserved to support institutional scrutiny, focusing on issuance integrity, storage security, access controls, and long-term evidentiary resilience.
‍

1. Infrastructure & Architecture

Submitted documents are handled by an access-controlled backend environment with:
a) Secure, independently audited cloud hosting.
b) Redundant storage and disaster-recovery capabilities.
c) Automated processing and file custody controls.
d) Strict segregation between operational layers.
e) No storage of sensitive files on the public-facing website.
‍

2. Encryption & Data Protection

AES-256 encryption at rest.
TLS/HTTPS encryption in transit.
No human handling of submitted files.
No public disclosure unless explicitly enabled.
No indexing, scanning, or automated processing of submitted material for content interpretation or evaluation.
‍

3. Access Controls

Least-privilege access across operational systems.
Segregated environments for development, staging and production.
Logged administrative access and activity trails.
All workflows are deterministic and auditable.
Access is strictly limited to operational personnel under segregated duties, with no exposure of submitted files to public-facing components.

4. Integrity Controls

A standards-aligned timestamp is applied at issuance and recorded as immutable for evidentiary purposes. Supporting artefacts are preserved exactly as submitted and made tamper-evident through cryptographic hashing recorded at issuance. Integrity of all artefacts can be independently verified by recomputing the recorded hash values against the preserved content.
‍

5. Resilience

Multi-zone, replicated storage.
Automatic failover.
High-availability delivery mechanisms.
Independent supplier audits including ISO and SOC standards.
‍

6. Scope of Security Controls

The security controls described on this page apply solely to the protection, custody, and integrity of VerifiedClimate™ Records at issuance and during storage and access. These controls ensure that Records remain tamper-evident, retrievable, and verifiable over time.
‍

7. Ongoing Assurance

Planned developments include: Independent penetration testing.
Additional assurance materials and testing may be undertaken as institutional requirements evolve.

Technology readiness level (TRL) declaration

Project milestone completion declaration

Laboratory testing and validation declaration

Methodology or boundary definition declaration

Dataset provenance and methodology declaration

Procurement eligibility declaration

Consortium or joint-venture commitment statement

Governance oversight declaration

ESG governance assertion (CSRD-relevant)

Monitoring and verification milestone declaration

Management assertion memo (audit-ready)

Grant milestone submitted — Renewable-heating programme (Cork · 2025-05-27T14:37 UTC)

Prototype test logged — Circular-materials project (Galway · 2025-05-24T11:02 UTC)

TRL-3 lab validation — Carbon-removal pilot (Dublin · 2025-05-20T09:14 UTC)