Safety & Security Policy

Fingerprints are computed in your browser before anything is sent. Uploaded files go to private storage, are never indexed, and are never served on the public verify pages.

Only the details you choose to publish — title, category, verification code, fingerprint, owner name and the sealing date — appear on a public record. If you would rather not publish a file at all, seal a digital presence instead and keep the work itself off the registry.

A fingerprint confirms that the content has not changed since it was sealed. Anyone can drop a copy onto a verify page and see whether it matches the original, without uploading or disclosing anything.

A fingerprint does not prove authorship, ownership or legal title. Treat it as evidence about integrity and timing, and keep your own contracts and drafts.

A verification code is meant to be shared — with a client, a gallery, a commissioner. It reveals only what you published, never the underlying file.

Think before you add a client name, a personal address or private notes to a record. Anything you publish stays visible to anyone with the code.

Upload finished work, contracts and certificates, not identity documents. If a document contains an ID number, a bank detail or a home address, redact it first — the fingerprint will match the redacted version you keep.

Keep an unredacted master copy of anything you seal. The registry holds a fingerprint, not a backup.

Use a password you do not reuse elsewhere, keep it in a password manager and sign out on shared devices. Email verification and two-factor authentication are available on your account and are the strongest protection against a stolen password.

Every notification about sign-ins, plan changes or commissions comes from TataTech. Anyone asking for your password, a one-time code or a wallet seed phrase is not us, whatever the message says.

Membership payments are handled by the payment provider connected to TataTech. Card details are entered in the provider's own checkout and are never stored by us.

We will never ask you to move funds to settle a membership, and we do not request crypto transfers by direct message. Treat any such request as fraud.

If a record appears to be forged, if someone is passing your work off as their own, or if you spot an account that looks fraudulent, report it to the TataTech team with the verification code and what you noticed.

If you think your account has been accessed by someone else, change your password, turn on two-factor authentication and ask us to revoke any record you did not seal.