Evidence integrity
Know what each check tells you
Provio helps you inspect files, signatures, and available timestamps. The result is useful when you understand both the check and its limits.
Package contents
Check that the evidence archive contains the expected media and metadata. Missing or unreadable entries need attention before you rely on a package.
Content hash
Compare a SHA-256 hash of the file with its recorded hash. A match means the bytes match that value; it does not establish what happened in the scene.
Digital signatures
Check a content signature, and a metadata signature when present, against the included public key. A valid signature does not by itself verify the identity of the person holding the device.
Capture sequence
Check the package’s hash-chain data. A complete history requires the relevant preceding records; a single shared file cannot establish an entire chain of custody.
Timestamp status
An independent timestamp is available only when a timestamp service returns a token. Review token validation, certificate trust, and any warnings separately from the device’s recorded capture time.
Overall result
Read each check and any failure or warning. Passing an integrity check does not guarantee that a claim is true or that evidence will be accepted in a legal proceeding.
Choose the right verification
The public hash lookup checks for a matching record in Provio’s registry. To inspect the file itself, use the evidence-package verifier and review its individual results. A registry match alone is not a fresh cryptographic verification of your copy.