Case study
A SaaS platform that certifies any document by etching its fingerprint onto a blockchain: tamper-proof evidence, verifiable by anyone, with no trusted third party.
Our impact
We partnered with ARTS Innovation, an aerospace company, and delivered a fully operational document-certification platform in a matter of months.
- Designed and built the platform end to end: multi-tenant architecture, on-chain contract integration, web application, external API and sovereign deployment.
- Gave every user and organization a managed blockchain wallet, so certifying a document takes three taps, without ever handling or exposing a key.
- Opened certification to any third-party system via a secure, documented API, and logged every interaction, down to anonymous access via QR code or share link.
- Anchored dual GDPR and PART-IS compliance (EASA, aligned with ISO 27001) into the architecture: no personal data on-chain, end-to-end encryption and sovereign hosting in France on OVH.
Overview
Our client, in the aerospace sector, needed to prove a document's existence, guarantee it had not been altered and identify its issuer, without relying on a trusted third party. We helped them design and build a platform that certifies any file by recording its cryptographic fingerprint on a permissioned blockchain (a private Ethereum network powered by Besu), all with onboarding as simple as a classic document manager.
The real challenge wasn't the blockchain itself, but making it invisible. For the user, everything fits in three steps: upload a file, choose its type and visibility, certify it. Behind the scenes, the app provisions a wallet for the user, computes the file's fingerprint, stamps a QR code and issues the on-chain transaction asynchronously, without ever exposing a key or blocking the interface.
In the end, each organization manages its own document types, its roles (owner, admin, certifier, auditor) and its storage location, while driving the full document lifecycle: revocation, updates, transfer from one organization to another. Everything is exposed both through the interface and a secure REST API, and every interaction, down to anonymous lookups, feeds an enforceable audit log.
All under a dual regulatory constraint: GDPR (no personal data on-chain, the right to erasure preserved off-chain) and EASA's PART-IS aeronautical regulation, aligned with ISO 27001. Strict on-chain / off-chain separation and sovereign hosting are written into the architecture, not bolted on afterwards.
The application
Organization dashboard
Problems solved
Trust & proof
The platform's reason for being: making every document tamper-proof, verifiable and traceable, with no trusted third party.
Integrity & proof of anteriority
Each document's fingerprint is recorded immutably on the blockchain, with its issuer and date. Altering a file afterwards becomes impossible without the proof giving it away.
Public verification, no account
Anyone can verify a document via its QR code or by re-uploading it on a dedicated page: authenticity, issuer and date confirmed, without creating an account or going through a third party.
Exhaustive audit & compliance
Every interaction is logged, including those of anonymous visitors. No personal data written on-chain: GDPR and PART-IS compliance is anchored in the architecture, not bolted on.
Everyday simplicity
All the blockchain complexity disappears behind simple actions: certify, share and evolve a document.
Invisible blockchain
Every user and organization has a wallet managed on their behalf: keys are never exposed and a document is certified without ever seeing a transaction. All blockchain complexity stays behind the scenes.
Full lifecycle
Justified revocation, updates with version history, and transfer to a third-party person or organization: the owner can change, but the original certifier's identity stays immutable.
Controlled sharing
Share links generated on demand (permanent, temporary or single-use), protected by an optional code and revocable at any time. Every access is logged.
Control & sovereignty
Each organization keeps control of its documents, its access and where its data lives.
Multi-organization & business roles
Siloed organizations, hardened authentication and bespoke roles (administration, certification, audit) whose permissions are set document type by document type.
Sovereign storage per organization
Each organization chooses where its documents are kept, always encrypted. On a transfer between organizations, the file follows, with full traceability.
Open & secure API
The entire platform can be driven without the interface, via a documented API: access is controlled by scoped keys, revocable at any time, to embed certification into any third-party system.
Expertise & technologies
Expertise
Technologies