Skip to main content

Trust Model Overview

SignChain's trust model is designed so that no single party -- including IntrigSoft -- needs to be fully trusted for the system to provide its guarantees.

Trust Distribution

Trust distribution

What Each Component Is Trusted For

ComponentTrusted to...NOT trusted with...
Desktop AppCorrectly hash the document and embed signaturesNothing leaves the machine except hashes and encrypted data
API ServerRelay transactions to the blockchain honestlySigner data (it only sees encrypted blobs)
BlockchainMaintain an immutable, timestamped recordNothing sensitive is stored on-chain
Verification AppDisplay results honestlyThe decryption key never leaves the browser

What Makes This Different

vs. Traditional Digital Signatures (PKI)

Traditional signatures depend on a certificate authority (CA) hierarchy. If your CA is compromised, all certificates it issued become suspect. If the CA goes out of business, verification may stop working.

SignChain anchors on a public blockchain. The proof exists independently of any company, CA, or server. Even if IntrigSoft disappears, the on-chain record remains verifiable by anyone.

vs. Centralized Signing Services

Centralized services are the sole authority on whether a signature is valid. You trust them completely -- with the document content, signer identity, and the validity determination.

SignChain separates these concerns:

  • Document content never leaves the signer's machine
  • Signer identity is encrypted with a key the server never sees
  • Validity is determined by public blockchain state, not a company's database

vs. Pure Blockchain Signatures

Putting everything on-chain is transparent but destroys privacy. Anyone can read signer names, emails, and document details. SignChain achieves blockchain immutability while keeping signer data private through client-side encryption.

The "Hit by a Bus" Test

What happens if IntrigSoft ceases to exist?

ScenarioImpactMitigation
API goes offlineNew signatures cannot be anchoredSmart contract is public; anyone can build a relay
Website goes offlineQR verification stops workingSelf-hostable; contract interface is public
Company dissolvesNo impact on existing signaturesBlockchain record is permanent

The only permanent dependency is the blockchain itself. As long as the chain exists and the smart contract is deployed, every past signature remains verifiable.