Evidence Integrity & Chain-of-Custody Statement

RareEarthMinerals.ai applies the following controls to preserve evidential integrity:

1. Immutable Timestamps

Each uploaded document receives a cryptographically signed timestamp at upload.
Timestamps cannot be altered by users or system processes.

2. Cryptographic Hashing

A SHA-256 hash is generated for each document to verify integrity.
Any change to a document invalidates the hash.

3. Read-Only Processing

Documents are never modified, annotated, or overwritten.
All outputs are derivative, non-destructive interpretations.

4. Access Controls

Access to documents is:

• strictly read-only
• audit-logged
• restricted by user roles
• revocable at any time
• subject to identity verification for resets

5. Personnel Verification

Lost credentials or organisational changes require:

• identity verification
• written authority from a senior representative

before access restoration.

6. Secure Deletion

Upon request, documents are deleted securely in accordance with industry standards unless legal retention applies.

7. Compliance Alignment

The system aligns with:

• UK GDPR & DPA 2018
• EU GDPR
• DUAA 2025
• EU Battery Regulation 2023/1542
• EU AI Act risk-management principles