Cryptographic assurance, engineered for enterprise trust.

HashOrigin turns every document into verifiable evidence. Five stages each add a layer of assurance — and together they form a tamper-evident chain of trust that anyone can verify independently.

Every document processed by Twala is assigned a unique cryptographic hash — a fixed-length digital fingerprint generated using Secure Hash Algorithms (SHA). Even the smallest edit produces an entirely different hash, providing a reliable way to confirm that every document remains exactly as intended.

Prior to incorporation into the Merkle Tree, every document hash is sealed with Twala’s own digital signature. This platform seal is applied by Twala using Twala’s private key, cryptographically binding every sealed document to the Twala platform. The process is aligned with the requirements of electronic signature laws, including the Philippine Electronic Commerce Act, the Supreme Court Rules on Electronic Evidence, and comparable regulatory frameworks internationally.

The seal certifies that each document was processed through Twala and preserves its integrity, so any modification is immediately detectable.

To secure these fingerprints at scale, HashOrigin organizes document hashes into a Merkle Tree, a cryptographic structure purpose-built for efficiently validating large volumes of data. Individual document hashes form the base of the tree; these are progressively paired and hashed together to form a single root hash representing a cryptographic summary of all documents within the structure.

This architecture enables the integrity of any single document to be independently verified by tracing it back to the root hash — any change to a document is immediately reflected in the root hash, making it instantly detectable.

The root hash of each Merkle Tree is recorded on a blockchain — a decentralized, immutable ledger. Once recorded, the root hash is permanent, establishing an enduring and independently auditable chain of trust.

Each root hash is cryptographically linked to the one preceding it, forming a continuously extending chain of custody. As this chain grows, every new root adds to the computational assurance behind the records before it, so document security grows stronger over time.

HashOrigin is built on a foundation of internationally recognized cryptographic and digital signature standards, including:

While HashOrigin is built on blockchain-based innovation, it remains fully interoperable with traditional PKI systems through support for the widely adopted X.509 certificate standard. As a member of the Cloud Signature Consortium (CSC), Twala adheres to global standards for cloud-based digital signatures, ensuring compatibility with established PKI frameworks and alignment with international regulatory expectations.

Twala’s signatures are designed to be compatible with the Adobe Approved Trust List (AATL), enabling signed documents to display as trusted and verified the moment they are opened in Adobe Acrobat and Adobe Reader — with zero certificate setup for recipients.

Twala also supports Long-Term Validation (LTV), embedding the certificate, revocation status, and timestamp information required to verify a signature’s validity directly within the signed PDF. This ensures that signatures remain independently verifiable long after the signing certificate itself has expired — a critical requirement for documents that must retain legal and evidentiary value over extended periods.

This combination of blockchain anchoring, PKI interoperability, AATL compatibility, and LTV support allows enterprise clients to adopt Twala’s document security while staying fully compatible with existing digital certificate infrastructure and long-term document validity requirements.

Twala’s platform operates on secure, enterprise-grade cloud infrastructure engineered for high availability and operational resilience. The infrastructure strategy incorporates a formal Disaster Recovery Plan and Business Continuity Plan, designed to maintain service continuity and safeguard data integrity.

Recovery capabilities span multiple geographic regions, keeping business-critical operations highly available for enterprise clients.

HashOrigin delivers a set of assurances designed to meet the standards expected by regulated enterprises: