LAUNCHING SOONWidian is launching soon. Book a Demo

Widian

Security & Trust

Trust is not a badge. It is a provable record.

We would rather state exactly what the current evidence supports than imply more than we can prove.

Evidence register

What we can evidence today.

Each statement carries its own scope. A qualified claim is not a weaker label; it is the boundary that keeps the statement accurate.

Verified

Identity and attribution

Implemented audit events, work-order transitions and review records retain the account and timestamp associated with the action.

Scope: Scoped to implemented events and actor fields on core records.

Verified

Organisation and role boundaries

Access is scoped by organisation and implemented role. Database row-level security enforces those boundaries rather than relying on interface labels alone.

Scope: Verified roles include Widian administrators, surveyors, suppliers and client users.

Qualified

Evidence integrity checking

SHA-256 hashes support integrity checking for inspections, evidence photographs, signatures, work orders and issued reports.

Scope: Hashing is not external notarisation, legal chain-of-custody certification or a claim that every record is tamper-proof.

Verified · issued reports only

Issued-report controls

Once a report is issued, its original bytes, hash and template version are frozen. It cannot be deleted and can only move one way to superseded or withdrawn.

Scope: This control applies to issued reports, not every record in Widian.

Limits kept visible

What we do not claim.

  • Widian does not currently claim an independent security certification.
  • We do not describe every record as immutable or universally tamper-proof.
  • We do not claim that Widian certifies statutory compliance or replaces professional judgement.

Integrity checking

What the hash can prove.

Widian calculates a SHA-256 digest from the relevant digital content. That digest acts like a content fingerprint: if the content changes, calculating it again produces a different result.

  1. 01

    Calculate

    A SHA-256 digest is calculated for supported evidence and record types.

  2. 02

    Retain

    The digest remains associated with the content it was calculated from.

  3. 03

    Compare

    A later calculation can be compared with the retained digest to detect a mismatch.

This can show that checked content no longer matches its retained digest. It does not by itself prove when or why a change occurred, who was responsible, that the original content was accurate, or that every Widian record is legally immutable. It is not external notarisation or chain-of-custody certification.

Current scope: inspections, evidence photographs, signatures, work orders and issued reports.

Assess Widian against your own requirements.

Use a focused demonstration to discuss permissions, evidence handling and the boundaries that matter to your organisation.

Book a Demo