Trusted capture · EU-sovereign · eIDAS path

Proof that travels
with the photo.

ClaimWard turns any phone camera — in a browser, no app to install — into tamper-evident, independently verifiable evidence for any claim, return, or inspection. Every frame is hashed on the device and sealed into an append-only chain of custody. Don't take our word for it — re-verify a sealed capture yourself, right here.

append-only · witnessed checkpoints · you can re-verify in this browser
SHA-256 3f9a…c2 checkpoint #01847 L1 sealed DEMO DATA

Live proof-of-concept. This is the real capture engine; the product internals around it are demo data, clearly marked.

The problem

The photo was supposed to settle it.
Instead it starts the argument.

Your process already runs on customer-submitted images — first notice of loss, a returned parcel, a move-out condition report, a field inspection. But the file that arrives is blurry, cropped, screenshot-recycled, or metadata-stripped, and there's no reliable way to know when it was taken, whether it's been edited, or whether it's even the right item. So it goes back and forth: a re-shoot request, a push-back, a deposit that becomes a dispute. And the timing is brutal — the camera in every pocket made remote self-capture the default right as generative AI made a convincing fake a thirty-second exercise. The question flipped from “can we take the photo remotely?” to “can we still believe the photo?”

Back-and-forth

Re-shoots and follow-up requests stretch cycle time and burn adjuster hours on evidence hygiene instead of decisions.

Leakage

Low-quality or recycled images let questionable claims through — and make legitimate ones slower to fast-track.

Disputes you can't defend

When it's contested, an ordinary image file carries no independent proof of origin. You're arguing credibility, not facts.

no provenance · unverifiable
SHA-256 3f9a…c2 · 2026-07-08T14:22Z · sealed (illustrative)

A claims photo can be re-saved, re-shot, or restaged in ten seconds — and no one downstream can tell. That's the gap ClaimWard closes.

How it works

One link. Guided capture.
A receipt anyone can verify.

You send a link — by SMS, email, or embedded in your own portal. It opens the customer's phone camera in the browser. No app, no account, no download. Here's what happens from the lens to the ledger.

01

Capture

On-screen guidance walks the customer through exactly the shots this subject needs — the VIN plate, all four corners, the serial number, the water line on the wall. Live light, focus, and steadiness meters mean they get it right the first time, not the third.

02

Seal

The moment each frame is captured, it's hashed on the device and linked to the one before it — an append-only capture bundle, tamper-evident from the instant of ingest. Facts about when and how are committed, not asserted later.

03

Verify

You receive a sealed bundle and a receipt that re-verifies in any ordinary browser — no ClaimWard login required to check it. The verify page replays the whole chain of custody as a timeline.

On-device hashing is a commitment to what was captured — a browser can't prove the hardware by itself, so we never say it does. What it does prove: the bytes haven't changed since the seal, and any later edit shows.

Everything above is live in the demo → try it on your own phone.

Calibrated assurance

Four honest levels.
You always know which one you're holding.

Assurance is never a single green checkmark. Every capture carries a level, computed at read time from evidence that could actually be verified — never assigned by us. Higher levels need more infrastructure (a qualified timestamping authority, independent witnesses), and we show the level on every receipt. A bundle can't wear a level it didn't earn.

L3 gate

L3 requires a live qualified trust-service provider and ≥2 witnesses that are genuinely separate legal entities. Until both are present, we don't render the “qualified” gold — and neither should anyone else. In this demo those top-tier services are illustrated, not live; the word “qualified” appears on a real bundle only when a real QTSP has actually signed the checkpoint.

“Court-ready” describes the integrity and origin of the record under EU eIDAS — subject to legal sign-off per market. It is never a promise that the depicted event is real, and never sold as a guaranteed admissibility verdict.

Independently verifiable

Don't take our word for it.
That's the whole point.

ClaimWard is built so a third party — your customer, their lawyer, a regulator, a court-appointed expert — can confirm the evidence for themselves. Re-verify a sealed demo bundle below. The real cryptography runs client-side, in your browser, against a sealed demo bundle — no ClaimWard server in the loop. If everything matches, the Ward closes to sealed. If a single byte was changed, it flags a tamper-evident mismatch.

Independently verifiable means you never have to trust ClaimWard's servers — or ClaimWard.

bundle CW-DEMO · 5 links
Ready to verify — nothing computed yet.
Trust · compliance · sovereignty

Built for the people who'll be
asked “how do you know?”

Your DPO, your legal team, and your regulator ask the same question in different words: where does the data live, who can prove what, and does it hold up. ClaimWard answers with EU data-sovereignty by design, a defensible chain of custody, and a documented path to qualified, court-ready evidence — without pretending the demo is the destination.

EU data-sovereign

Your evidence plane is isolated and can run in-region. A sovereign edition keeps data in your jurisdiction, with egress narrowed to the qualified trust-service provider and the witnesses. Data-sovereign by design — not air-gapped, and we say so plainly.

eIDAS-aligned path

The architecture targets eIDAS qualified timestamps and seals (ASiC-E · JAdES) on the witnessed checkpoint — the recognised European standard for electronic evidence.

Chain of custody, end to end

From on-device capture through every later annotation, the record is append-only and auditable. You can reconstruct exactly what happened to a bundle, and when.

Honest by design

A published capability-degradation matrix and a strict language policy. We describe what the system does — append-only, tamper-evident, publicly auditable, witnessed — and nothing it doesn't.

RFC-3161 · ASiC-E · JAdES · C2PA · eIDAS 2.0
Domain-agnostic engine

Insurance is the wedge.
The engine is every “prove the condition” moment.

Under the insurance framing, ClaimWard is a general trusted-capture engine. A new use case is a configuration — a subject_type and a guided shot script — not a rebuild. The same sealed-evidence core that proves storm damage today proves a returned handbag tomorrow.

DEMO DATA

Insurance FNOL

Vehicle, property, and contents capture at first notice of loss — guided to the shots your adjusters actually need.

DEMO DATA

Returns & warranty (RMA)

Condition-verified returns that cut “arrived damaged” and wrong-item disputes.

DEMO DATA

Move-in / move-out

Deposit-grade condition reports both tenant and landlord can independently verify.

DEMO DATA

Field inspection

Roadside, property, and asset inspections with a defensible, timestamped record.

One engine, many shot scripts — the addressable surface is every remote photo a decision depends on.

The return

Where the return shows up.

The figures below are illustrative and directional — they show the levers ClaimWard pulls, not a promise for your book. In a pilot we agree your baseline first, then report the delta. We don't publish an invented ROI multiple.
ILLUSTRATIVE

Fewer re-shoots

Guided, first-time-right capture cuts the back-and-forth.

lever: adjuster hours / claim on evidence hygiene
ILLUSTRATIVE

Faster settlement

Better evidence on day one means faster triage and fewer stalled files.

lever: time-to-decision on evidence-dependent claims
ILLUSTRATIVE

Reduced leakage & disputes

Tamper-evident, verifiable capture deters recycled and manipulated images and gives you a defensible position when contested.

lever: leakage rate · dispute / appeal volume

Directional context from widely cited public sources — illustrative, not ClaimWard measurements: insurers and industry bodies have long estimated that a meaningful share of claims value is lost to fraud and inflation each year, commonly quoted in the single-digit-to-low-double-digit percent range across markets; e-commerce returns run to hundreds of billions of dollars annually, with return fraud and “wardrobing” a persistent line item. These are order-of-magnitude framings to size the pain, not ClaimWard statistics.

Honesty, in writing

The words we refuse to use.

A trust product that over-claims once is finished. So we hold ourselves to a published language policy — on every product surface, not just this page.

immutabletamper-proofunhackablecan't fakeunfakeable100%trust score
append-onlytamper-evidentpublicly auditablewitnessed checkpointschain of custodycalibrated assurancecourt-ready

We describe what the system does, and nothing it doesn't. In a market full of “trust us” black boxes, saying what we can't do is the most persuasive thing we can say.

Get started

A pilot that proves it on your own claims —
free, and low-lift.

  1. Scope one workflow

    One claim type, return lane, or inspection — and we agree the shot script for it.

  2. Agree the baseline

    Before go-live we capture your current numbers: re-shoot rate, cycle time, dispute volume. That's what we measure against.

  3. White-label setup

    ClaimWard runs on your domain, in-region, behind a pilot flag. Free during the pilot — billing is a switch we don't flip yet.

  4. Go live with a cohort

    Route a slice of real requests through guided capture. Your customers self-capture; your team receives verifiable bundles in the tools they already use.

  5. Measure the delta

    After the pilot window we report the movement on the agreed levers — honestly, against your baseline, no invented figures.

  6. Flip to GA

    If the numbers hold, general availability is a configuration change — same platform, same data, no migration.

LIVEInteractive capture → seal → in-browser re-verify
DESIGNEDAssurance ladder L0–L3, capability matrix, EU-sovereign plane
IN BUILDQualified eIDAS sealing + external witness network (the road to L3)
FORMINGFirst design-partner pilots

Turn the phone in your customer's hand into evidence you can defend.

Live demo Book a pilot