.epi artifact — the AlgoVoi post-quantum profile of the .epi portable-compliance-evidence
format — that anyone you hand it to can check on their own.
An add-on to Records Vault. It exports the evidence Records Vault already
preserves; it adds no new system of record.
Portable, verifiable anywhere
Export an evidence set as a single.epi artifact and send it. There’s nothing to install on your
side beyond Records Vault, and nothing for the recipient to connect to — the artifact carries
everything needed to verify it.
Verify-it-yourself — on the recipient’s side
The export bundles a redistributable verifier. The recipient runs it against the.epi artifact
and gets a clear pass/fail, offline:
- No AlgoVoi software, service, account, or network is involved in their verification.
- The verifier’s entire trust base is two public, audited-primitive libraries — it re-derives the signatures and hashes itself, from the public key carried in the artifact.
- Change a single byte of the evidence and verification fails.
.epi files
they need to check (see the verifier’s licence for redistribution terms).
Built to outlast the keys that signed it
Health and legal records are retained for decades — well past the safe lifetime of classical signatures..epi artifacts are Falcon-1024 (post-quantum) signed, so evidence you export today
stays verifiable through the migration to post-quantum cryptography, not just for the next few years.
How it fits
| Base | Records Vault — preserves your records as tamper-evident, offline-verifiable evidence |
| This add-on | exports that evidence as a portable .epi artifact a third party verifies independently |
| Custody | composes with Bring Your Own Keys — your signing key can stay in your own HSM / KMS / Vault |
Availability
An add-on to Records Vault, available from the suite store (AV-EPI — requires a Records Vault licence). One licence token installs the export engine; the
redistributable verifier ships inside it.
See also
- Records Vault — the base product this exports from
- Bring Your Own Keys — keep the signing key in your own estate