Choose the situation, not a software category. StateNull tells the responsible person what evidence is required, catches unusable submissions in time, keeps every correction with the original request, and gives the reviewer one history to approve, export or verify.
StateNull structures and protects the record. The responsible professional still decides whether the work, the damage, the compliance or the legal relevance is acceptable.
What every "Available now" card below actually runs on.
You create a Proof Request from one of nineteen built-in request templates across sectors — from contractor work, property condition, installation & commissioning, damage/claim, vehicle handover and service completion through warranty/RMA returns, logistics handover, manufacturing & supplier quality, facility rounds and EHS inspections. Seven of the nineteen are specialist documentation-support templates (for example legal/expert records, journalism provenance and creator IP) that unlock only after you acknowledge their stated limits — they support documentation, they do not replace professional judgement or guarantee admissibility, custody or compliance.
You can rewrite every step: its label, capture type (photo, scan, PDF, video, audio), how many items it needs, whether it is required, and the instruction the person on site reads — then save it as your own reusable template. You cannot add a seventh step in the web office today, so a request holds up to six.
Whoever captures can open one link — no StateNull account, no install, no paid seat.
The First-Pass Proof Check flags low resolution, under- or over-exposure, blur and near-duplicates on the device. It is advisory: it warns, and the reviewer still decides.
A request sent back for correction only reopens on genuinely new evidence for the step that was flagged.
The reviewer approves or requests changes, the customer can acknowledge or flag, and the record exports as a Proof Pack.
Pick the situation
Thirteen sectors that the shipped product can serve today, in the order most people can start on their own. Every card names the decision that is blocked, what StateNull does about it, and what StateNull will not do.
Filter
🏠
Property & private renovation
Available now
Decision
Can the owner approve this stage or hand the property over?
Workflow
Request every room, meter reading, concealed stage, defect and final result before anyone leaves the building.
Value
Owner, contractor and tenant review one correction-and-handover history instead of three different camera rolls.
Limit: StateNull documents the project. It does not certify construction quality, and it does not decide a deposit or a defect claim.
No film yet — read the workflow
See the workflow, what it runs on today, and the sources
Who this is for
Private builders and renovation owners · small landlords and property managers · inventory and check-in clerks · tenants recording move-in and move-out condition.
What the request asks for
Exterior — The building/entrance outside — context for the report.
Rooms — overview — Each room wide, from the door. Floors, walls, ceilings.
Existing defects — Anything scratched, stained or broken — close enough to see it.
Fixtures & appliances — Kitchen, bath, heating — the fittings that get argued about.
Meter readings & keys — Meter digits readable; handed-over keys counted in one shot.
Occupant acknowledgment — Scan the signed protocol if present.
What it runs on today
Ships as the built-in Property Condition report template (six steps, above) in the office wizard and in the app — every label, capture type, minimum count, required flag and on-site instruction is editable before you send.
Shot list — film not produced yet
Open on the office screen creating the request — the six required steps visible, no stock footage.
The guest link opening on a phone with no account and no install.
A blurred room shot returning a retake warning before the person leaves.
The reviewer screen: one exact step requested again, then approved.
The exported record, then the honest-limit card.
Sources
UK guidance recommends an agreed inventory with dated photographs; the 2024 English Private Landlord Survey reports that 80% of landlords made an inventory.
Site before installation — The location as found, incl. existing wiring/plumbing.
Installed equipment — The finished installation, connections visible.
Working state — Displays on, indicator lights, test run readings.
Commissioning report — Scan the signed commissioning / acceptance sheet.
What it runs on today
Ships as the built-in Installation & commissioning template. The First-Pass Proof Check (SNQ1) flags low resolution, under- or over-exposure, blur and near-duplicates on the device before submission; the correction gate will not accept a resubmission that does not contain genuinely new evidence for the step that was sent back.
Film transcript
0:00-0:04
Roughly one in four field jobs needs a repeat visit. Sometimes not because the work was wrong, but because no one could prove it was done.On screen: 1 in 4-5 jobs = a repeat visit
0:04-0:11
A completion photo is just an image plus editable metadata in a vendor's app. It can be recycled from a prior job, or taken at the wrong address. So payment gets disputed and a second truck rolls out.On screen: Editable metadata = disputable proof
0:11-0:20
StateNull seals every completion photo and scanned work order at the moment of capture, on the device: a fingerprint, trusted time, optional signed location, and a hybrid signature. Fully offline, which matters in a rural basement with no signal.On screen: Sealed at capture. Offline. Tamper-evident.
0:20-0:27
A recycled image fails, because its sealed time won't match today's job. Re-timestamping breaks the seal. And here's the part that matters: the general contractor verifies it in a browser or a fully offline desktop tool. Pure math. No upload, and no need to trust the crew's app.On screen: Anyone can verify. Offline. No trust required.
0:27-0:31
So the dispute resolves on the invoice, not with another truck. Verify it yourself.On screen: Cut re-verification truck rolls. → statenull.com
Send each subcontractor the exact milestone evidence required, including whatever is about to be covered up.
Value
Request, capture, correction, approval and export stay in one record, so a hidden detail can still be reviewed months later.
Limit: Documentation supports review. It does not guarantee workmanship, entitle a payment, or settle a dispute.
See the workflow, what it runs on today, and the sources
Who this is for
General and specialist contractors · project managers · subcontractors · owners and clerk-of-works roles.
What the request asks for
Pre-existing condition — Wide shots of the work area BEFORE you start, incl. any existing damage.
Work started — The site set up and the work under way.
Hidden or critical work — Anything that gets covered up: substrate, fixings, seals, connections.
Work completed — The finished result from the same angles as the before shots.
Customer acknowledgment — Scan the signed acceptance / handover sheet if you have one.
What it runs on today
Ships as the built-in Contractor Proof of Work template, whose third step exists purely for work that is about to be concealed. Captures made in the Android app are sealed on the device at capture; a guest capturing from a link is encrypted in the browser under a key that never reaches our servers.
Film transcript
0:00-0:04
Nearly a quarter of claims professionals say they've seen altered photos in the last year.On screen: 22% saw ALTERED photos in 12 months
0:04-0:11
On a smartphone JPEG, the timestamp, GPS and metadata can be edited in seconds. So a snag photo can't actually prove WHEN a defect existed, or WHEN buried work was really documented.On screen: EXIF · GPS · time — all editable
0:11-0:18
A subcontractor waterproofs a bathroom, photographs the membrane, then tiles over it. Six months later, a leak. The contractor withholds payment and says the photos are from another unit, another day.On screen: Membrane covered → leak → 'prove it was there'
0:18-0:26
With StateNull, each photo is sealed the instant it's captured, fully offline: a SHA-256 fingerprint, anchored trusted time, optional signed GPS, and a digital signature. Change one pixel and the seal breaks.On screen: SEALED AT CAPTURE · offline · tamper-evident
0:26-0:32
And here's the part that matters: the contractor, or an adjudicator, can verify that exact image offline, in a browser or a desktop verifier. No account, no upload, no trusting StateNull. The when-and-where fight collapses to math.On screen: Anyone can verify offline. Don't trust us — check.
Sources
Photo-organisation tools already sell this market. StateNull competes on requirement → correction → decision → checkable record, not on storing site photos.
Facilities, cleaning, restoration & contracted site services
Available now
Decision
Can the supervisor accept this visit as complete?
Workflow
Define the areas, equipment and exception views each visit must return — the after shots from the same angles as the before shots.
Value
The supervisor reviews exceptions instead of a chat thread, and every visit keeps its own exportable record.
Limit: The supervisor remains responsible for accepting the service. StateNull records what was returned, not whether it was done well.
No film yet — read the workflow
See the workflow, what it runs on today, and the sources
Who this is for
Cleaning and restoration firms · facilities managers · security and site-round providers · pest control and property service operators.
What the request asks for
Before — Rooms/areas before the service.
After — The same rooms/areas after — same angles.
Checklist / protocol — Scan the signed service sheet if one exists.
What it runs on today
Ships as the built-in Service completion proof template. Recurring rounds, SLA clocks and route lists are not built — each visit is its own request today.
Shot list — film not produced yet
The office creating a visit request with the areas listed.
The operative opening the link on site and shooting before/after.
A near-duplicate warning on a repeated "after" shot.
The supervisor screen showing only the exception, then accepting.
The exported visit record, then the honest-limit card.
🚗
Vehicle rental, leasing, fleet & service intake
Available now
Decision
Who pays for this damage?
Workflow
Require the same walk-around, existing-damage close-ups, odometer and keys at every pickup and every return.
Value
Both sides review the same handover record, captured to the same rules, instead of arguing from two camera rolls.
Limit: StateNull records condition evidence. It does not price damage, decide fair wear and tear, or read an odometer for you.
See the workflow, what it runs on today, and the sources
Who this is for
Rental and leasing operators · fleet managers · workshops and vehicle logistics providers · private lessees recording return condition.
What the request asks for
Walk-around — All four corners + front/back, whole vehicle in frame.
Existing damage — Close-ups of every existing scratch, dent or chip.
Odometer & fuel — Dashboard: km reading and fuel/charge level readable.
Ships as the built-in Vehicle handover record template. VIN/barcode capture, a guided panel diagram and before/after comparison are not built.
Film transcript
0:00-0:04
In 2025, a rental company agreed to an eleven-million-dollar settlement — over damage it billed renters without timestamped proof it happened during the rental.On screen: $11.07M settlement (Sixt, 2025)
No provable timestamp
0:04-0:11
At pickup and return, both sides take walk-around photos. But a phone timestamp can be edited. So when a scratch shows up later, there's no way to prove which panel was clean, or exactly when the photo was taken.On screen: Phone timestamps are editable
= 'your word against mine'
0:11-0:19
StateNull seals each walk-around photo the moment it's captured — a SHA-256 fingerprint, an independently anchored time, and a tamper-evident signature. Change one pixel and the seal breaks. It works fully offline, in an unlit yard with no signal.On screen: Sealed at capture
Fingerprint · trusted time · tamper-evident · offline
0:19-0:27
When a claim arises, either side verifies it — in a browser, or fully offline on a desktop. Pure math, no upload. You don't have to trust the operator, or us. You check it yourself.On screen: Verify yourself.
Browser or offline · no upload · no trust required
0:27-0:32
One tap exports a chain-of-custody PDF for the claim, the chargeback, or the insurer. Disputes move from opinion to evidence.On screen: See how it works → statenull.com
Sources
BVRLA guidance says vehicle condition should be checked and agreed at collection, and that the return assessment can lead to additional charges.
Ask for the product label, serial, packaging, wide view, fault detail and accessories in one request instead of five emails.
Value
Blurred or repeated images are flagged before submission, and support can ask for one precise replacement rather than restarting.
Limit: The manufacturer or seller decides warranty coverage. StateNull does not classify a fault or authorise a repair.
No film yet — read the workflow
See the workflow, what it runs on today, and the sources
Who this is for
Manufacturers and distributors · repair centres · e-commerce and equipment suppliers · warranty administrators.
What the request asks for
Wide context — Wide shots placing the damage in its surroundings.
Damage areas — Each affected area, whole area in frame.
Close-ups & measurements — Close-ups with a scale/tape measure where it helps.
Serial / model numbers — Type plates and serial numbers of affected items.
Mitigation or repair progress — Emergency measures / repair under way, if any.
Final condition — The state at the end of the inspection or after repair.
What it runs on today
A built-in warranty / RMA returns template ships in this release — every label, capture type, minimum count and on-site instruction is editable before you send, and you can save your version as a reusable tenant template. Barcode/serial fields, order lookup and return-label integrations are not built.
Shot list — film not produced yet
The office rewriting the six claim steps into product-return language.
The customer opening the request link from an email, no account.
A blurred label shot returning a retake warning.
Support requesting one exact replacement step, then approving.
The exported return record, then the honest-limit card.
🚚
Logistics, proof of delivery & asset handover
Available now
Decision
What condition did this change hands in?
Workflow
Require the asset identity, package condition, any exception and the recipient's acknowledgement before custody changes.
Value
An evidence layer under the delivery, collected on one link, without replacing the transport system.
Limit: StateNull does not replace carrier tracking, prove that goods were ordered, or determine liability for damage in transit.
No film yet — read the workflow
See the workflow, what it runs on today, and the sources
Who this is for
Local carriers and couriers · equipment rental and asset-transfer operators · installers delivering high-value equipment · warehouses and depots.
What the request asks for
Asset / package identity — Adapt a built-in step: label, unit or serial in frame.
Condition on arrival — Adapt a built-in step: the item and its packaging, whole item in frame.
Exception — Adapt a built-in step: any damage, shortage or refusal — optional.
Recipient acknowledgment — Adapt a built-in scan step: the signed handover sheet.
What it runs on today
A built-in logistics handover template ships in this release; every step remains editable before you send. A separate customer link can be issued for the recipient, whose acknowledgement (or flag) is recorded against the request. GS1 identifiers, multi-stop manifests, geofences and transport-management integration are not built.
Shot list — film not produced yet
The office issuing a capture link for the driver and a customer link for the recipient.
Driver capture of identity and condition at the door.
Recipient acknowledging on their own phone.
The office record showing both sides against one request.
The export, then the honest-limit card.
Sources
GS1's logistics interoperability model treats the signed transport document / proof of delivery as evidence that goods were collected and delivered, and describes archiving and link-based access.
Request the label and lot, the part, the process stage, the test display, any deviation and the final condition you need to see from the supplier.
Value
Objective visual evidence for the quality record, with the correction and the decision attached to it.
Limit: A qualified quality process decides conformity. StateNull holds no ISO certification and makes no conformity assessment.
No film yet — read the workflow
See the workflow, what it runs on today, and the sources
Who this is for
Small and mid-sized manufacturers · supplier-quality teams · contract manufacturers · incoming-goods and first-article reviewers.
What the request asks for
Label & lot — Adapt a built-in step: identification readable in frame.
Part / assembly — Adapt a built-in step: the item under inspection, whole item in frame.
Process stage or test display — Adapt a built-in step: the measurement or indicator readable.
Deviation — Adapt a built-in step: the non-conformity close enough to see — optional.
Final condition & packing — Adapt a built-in step: state at release.
What it runs on today
A built-in manufacturing & supplier quality template ships in this release — rewrite any step for your parts and process, then save the result as a tenant template. A supplier can respond on a guest link without a seat. Lot/batch fields, numeric tolerances, calibrated-measurement metadata, non-conformance workflows and QMS/ERP integration are not built.
Shot list — film not produced yet
The office rewriting a template into incoming-goods language.
The supplier opening the link and capturing label, part and test display.
An under-exposed test-display shot returning a retake warning.
The reviewer rejecting one item and requesting it again, then approving the lot.
The export, then the honest-limit card.
Sources
ISO 9001 describes documented information and objective evidence as part of demonstrating an effective quality-management system. StateNull can help collect that evidence; it is not certified to the standard and does not make you certified.
Request the wide view, damage detail, serial plate, comparison and receipt the reviewer actually needs — and reject a technically unusable submission before it reaches review.
Value
The claim-supporting history stays together for review and export instead of arriving as loose attachments.
Limit: StateNull organises evidence. It does not determine cause, coverage, fraud, repair scope or claim value — the adjuster and the insurer do.
See the workflow, what it runs on today, and the sources
Who this is for
Insurers and loss adjusters · restoration contractors · brokers · policyholders asked to document a loss.
What the request asks for
Wide context — Wide shots placing the damage in its surroundings.
Damage areas — Each affected area, whole area in frame.
Close-ups & measurements — Close-ups with a scale/tape measure where it helps.
Serial / model numbers — Type plates and serial numbers of affected items.
Mitigation or repair progress — Emergency measures / repair under way, if any.
Final condition — The state at the end of the inspection or after repair.
What it runs on today
Ships as the built-in Damage / Claim inspection template. Claim-system APIs, policy references, carrier export schemas and adjuster roles are not built.
Film transcript
0:00-0:04
US insurance fraud is estimated at 308 billion dollars a year. Property and casualty is roughly 45 billion of it.On screen: $308.6B/yr insurance fraud. ~$45B is P&C. — Coalition Against Insurance Fraud, 2022
0:04-0:10
The hard part for a fraud investigator isn't finding evidence. It's proving, months later, when a scene photo was really taken — and that no one altered it.On screen: The challenge: when was this photo taken? Has it been changed?
0:10-0:18
An SIU investigator re-inspects a suspected staged total loss at a salvage yard with no signal. Twelve photos, sealed on the device the instant she captures them: a SHA-256 fingerprint, an anchored trusted time, optional signed GPS, and a hybrid signature. The paper estimate scans into a sealed, searchable PDF.On screen: Sealed at capture — offline: SHA-256 · trusted time · optional signed GPS · RSA-PSS + ML-DSA-65
0:18-0:26
Months later, opposing counsel claims the photos were backdated. One tap made a chain-of-custody report — and anyone can verify it in a browser, or fully offline. Pure math. No upload. No trusting StateNull.On screen: Verify yourself. Offline. No upload. The seal holds or it breaks.
0:26-0:31
Where sealed capture is required at first notice of loss, a reused or altered image simply can't produce a valid seal. StateNull is tamper-evident and built to support your compliance workflows.On screen: Mandate sealed capture at FNOL → altered images can't seal. Tamper-evident. StateNull.
Sources
FEMA's claims guidance requires claim-supporting photographs and states that blurry, out-of-focus or night photographs are not acceptable for its adjustment workflow — the exact failure the First-Pass Proof Check catches on site.
Keep the original file, every correction, the review decision, the export and the integrity check in one record that can be re-read later.
Value
A lawyer, expert, mediator or party reconstructs the evidence history from the record instead of from an email chain.
Limit: StateNull is not a court, a notary, a law firm or an e-discovery platform, and it does not decide admissibility. Legal relevance and evidentiary weight stay case- and jurisdiction-specific.
See the workflow, what it runs on today, and the sources
Who this is for
Lawyers and in-house counsel · court-appointed and private experts · mediators · parties preparing a dispute file.
What it runs on today
Runs on the shipped record: an on-device seal at capture, an anchored RFC 3161 timestamp from an operator-hosted TSA, a per-tenant Merkle audit log, a one-tap chain-of-custody PDF and browser or offline verification. Matter identifiers, legal-hold policy packs and e-discovery integration are not built.
Film transcript
0:00-0:04
In 2023, a company's lawyers tried to escape a recording by claiming it could be a deepfake.On screen: “It could be a deepfake.” — a real 2023 court tactic (NPR)
0:04-0:10
The same move — this photo was staged, edited, or backdated — now targets ordinary evidence photos. Because EXIF metadata and burned-in timestamps can be rewritten by whoever holds the file.On screen: EXIF + burned-in timestamps = self-asserted, editable
0:10-0:17
StateNull seals the photo the instant you capture it — on the device, even with no signal. A SHA-256 fingerprint, an independently anchored time, and a hybrid signature. Change one pixel and the seal breaks.On screen: SHA-256 · anchored time · RSA-PSS + ML-DSA-65 · tamper-evident
0:17-0:25
Two years later, when opposing counsel challenges it, they don't take your word for it. They verify the seal themselves — in a browser, or fully offline. Pure math, nothing uploaded.On screen: They verify it. Offline. No upload.
0:25-0:31
The anchored capture-time predates the dispute, so "backdated" is much harder to sustain. Verify yourself; don't trust us.On screen: Verify yourself. Don’t trust us. → statenull.com
Define the location, equipment, reading display, condition and completion proof every inspection must return, then keep the correction cycle with it.
Value
The responsible inspector reviews what actually arrived, and the audit record exports as one file.
Limit: The responsible inspector calibrates the instruments, interprets the readings and decides compliance. StateNull certifies nothing and validates no measurement.
See the workflow, what it runs on today, and the sources
Who this is for
EHS managers · environmental consultants · site safety officers · contractors carrying out corrective actions.
What it runs on today
A built-in EHS inspection template ships in this release; adapt its steps, send the request to whoever is on site, review the correction and export the record. Calibrated-instrument metadata, numeric limits and units, recurring schedules, CAPA workflow and GIS/EHS integration are not built.
Film transcript
0:00-0:04
A Clean Water Act violation can run up to roughly fifty-nine thousand dollars a day.On screen: Up to ~$59,114 / day / violation — 40 CFR 19.4 (EPA)
0:04-0:11
And many stormwater citations aren't for a spill at all. They're for an inspection that couldn't be proven — logged late, or logged after the fact. On a phone, the time and location are just numbers the device asserts, and anyone can edit them.On screen: Often a documentation failure, not a spill. Date + GPS: self-asserted, editable.
0:11-0:17
This kind of thing is a real pattern. A fuel company reportedly paid about two million dollars to settle allegations it falsified leak-inspection records over several years.On screen: Reported $2M settlement over falsified inspection records (public record — cite source)
0:17-0:25
StateNull seals each inspection photo the moment it's captured — a fingerprint of the image, an independently anchored time, and your optional signed location. Change one pixel and the seal breaks. It works with no signal, in a basement or a tunnel.On screen: Sealed at capture: hash + anchored time + signed GPS. Offline.
0:25-0:31
Here's what changes the fight: a regulator, an insurer, or opposing counsel can verify that file offline, with pure math, without trusting you. And backfilling a sealed log after an incident becomes detectable and infeasible.On screen: Anyone can verify it offline. No upload. No trust required.
Capture a native sealed record, keep the original, and let a recipient check the seal later without having to trust the sender.
Value
A checkable capture history instead of a screenshot that looks identical to the original.
Limit: A valid seal proves facts about the file and its recorded capture path. It does not prove that the depicted event is true, complete or correctly interpreted.
See the workflow, what it runs on today, and the sources
Runs on the Android capture path: the seal is written on the device at capture, with a hardware-backed signature, an always-on ML-DSA-65 post-quantum co-signature and an anchored timestamp. Anyone can verify in a browser or fully offline. Newsroom assignment roles, redaction provenance and publishing-system integration are not built.
Film transcript
0:00-0:04
In Ukraine alone, one human-rights app logged over twenty thousand verified evidence items. The lesson underneath that number: today, a real photo is doubted by default.On screen: 20,000+ verified items (eyeWitness / IBA, 2022) — a real photo is now doubted by default
0:04-0:10
A photojournalist shoots police using live ammunition during a government internet shutdown. No signal. Later, her image is called a fake, and her credibility is the story instead.On screen: Field capture. No signal. "That's fake."
0:10-0:18
StateNull seals each photo, scan and PDF at the moment of capture, fully offline — a SHA-256 fingerprint, anchored trusted time, an optional signed location, and a hybrid classical plus post-quantum signature. Change one pixel and the seal breaks.On screen: Sealed at capture, offline: hash + trusted time + optional signed GPS + hybrid signature
0:18-0:26
When she is back online, an editor runs an offline verifier — pure math, no upload — and confirms the recorded time and location, and that not a pixel changed since capture. Without trusting StateNull, and without taking her word for it.On screen: Anyone verifies it offline. No upload. No trust required.
0:26-0:31
Evidence stays in her custody, not a central server. Verify yourself, with math. Link in bio for the offline verifier.On screen: Verify yourself, with math → statenull.com
Seal drafts, scans, prototypes and milestone exports as the work develops, and keep the versions.
Value
You can show that a specific file existed in its recorded form at a recorded time.
Limit: StateNull does not grant copyright, patent priority or trademark rights, and a seal alone does not prove independent creation.
See the workflow, what it runs on today, and the sources
Who this is for
Designers, photographers and illustrators · studios · product and industrial designers · anyone documenting authorship over time.
What it runs on today
Runs on the shipped capture and archive path, including the optional Long-term Archive retention copy. Version relationships, batch project export and creative-suite integrations are not built.
Film transcript
0:00-0:03
Mailing yourself your own artwork proves almost nothing.On screen: "Poor man's copyright" = not a substitute for registration — U.S. Copyright Office
0:03-0:09
A freelance illustrator sends concept art to a prospect. Weeks later, a near-identical design ships — labelled in-house.On screen: Sent: concept.png → Weeks later: a knockoff, "our original"
0:09-0:14
Without a dated, tamper-evident record, it's your word against theirs — and those disputes can stall or settle below the work's value.On screen: Priority dispute → word vs. word → settles below value
0:14-0:21
StateNull seals your photo, scan or PDF the moment you make it, on your device, even offline: a SHA-256 fingerprint bound to independently anchored time, your signer identity, and a hybrid RSA-PSS plus ML-DSA-65 signature. Change one pixel and the seal breaks.On screen: Sealed at capture: hash + anchored time + your identity. Tamper-evident.
0:21-0:27
When it's contested, one tap gives you a chain-of-custody report — and the other side verifies it in a browser or fully offline. Pure math. No account, no trusting us.On screen: Verify yourself — offline. Don't trust us.
0:27-0:31
It won't replace copyright registration — but it turns a he-said, she-said into evidence anyone can check.On screen: Seal your next delivery. Offline verifier — link below.
Expansion sectors — not offered as specialist workflows yet
The product pattern fits these sectors, and we have researched them. They are a market map, not a shipping promise: each one needs named privacy, regulatory, procurement or integration work first, so none of them carries an availability badge or a purchase link on this page. Where a built-in request template exists for one of these sectors, it is a neutral documentation-support template behind an explicit acknowledgement of its limits — not a specialist workflow, and not a compliance, custody or admissibility guarantee.
🩺 Healthcare, home care & wound documentation Expansion sector
Required views, follow-up intervals, technical image-quality feedback, clinician review history and controlled export map cleanly onto the product.
Required before we market it
Confirmed lawful basis and controller/processor roles for health data
Health-data DPA and a completed DPIA
Consent and notice workflow where applicable
Clinical access segmentation
Retention and deletion policy for clinical records
Breach-response and healthcare procurement review
Wording review proving no medical-device or diagnostic claim is made
🧾 HR incidents & whistleblowing Expansion sector
Preserving an incident file with controlled reviewer access and a durable follow-up history is close to what a Proof Request already does.
Required before we market it
A confidential — and potentially anonymous — reporting channel
Strict case-access walls between reviewers
Reporter-identity protection
Acknowledgement and follow-up deadlines
Retaliation-protection information for reporters
Employment-law and works-council review
Handling rules for special-category and criminal-allegation data
The EU Whistleblowing Directive requires confidential channels, restricted access, follow-up and defined deadlines. A general Proof Request is not a whistleblowing system and must not be sold as one.
🌍 Government, NGO aid & field monitoring Expansion sector
Offline capture, distribution and inspection evidence, integrity checks and audit export are all real capabilities.
Required before we market it
Multilingual low-bandwidth workflow
Procurement and security documentation
On-prem or sovereign-hosting option where required
Beneficiary-identity minimisation
Safeguarding and consent policies
Integration with the actual registry or M&E system
StateNull can authenticate evidence. It cannot prove beneficiary eligibility or stop upstream diversion, and we will not imply otherwise.
Inspection requirements, asset condition, maintenance evidence and controlled export fit the pattern.
Required before we market it
Asset and serial hierarchy
Calibrated readings with instrument provenance
Safety-management-system integration
Offline fleet management at scale
Sector certification and procurement route
High-assurance access and retention packages
🌾 Agriculture, food & cold chain Expansion sector
Delivery and condition evidence, lot and location records, inspection corrections and audit history fit the pattern.
Required before we market it
Lot and batch identifiers
Temperature/sensor ingestion with provenance
Calibrated-device metadata
HACCP and quality-workflow mapping
Traceability integrations
🚔 Law enforcement & formal criminal evidence Expansion sector
A technical fit exists. This is deliberately not a target sector, and we do not market to it.
Required before we market it
Jurisdiction-specific evidence procedure review
Accreditation and chain-of-custody requirements
Disclosure and defence access
Device seizure and key-recovery procedure
Public-sector procurement route
Retention, deletion and subject-rights handling
Independent validation of every forensic claim
Until an independent legal and security review covers all of the above, StateNull is not offered for formal criminal evidence.
Standards & interoperability
Not an industry — the specifications and editions that decide what a StateNull record can be checked against.
🏷️ Content Credentials (C2PA)
StateNull's Android app can embed a real C2PA 1.3 manifest (JUMBF/CBOR/COSE_Sign1) into the JPEG when you export — an opt-in setting (“Embed C2PA credential on export”) — signed with a hardware-backed device key under a StateNull claim-signer certificate. To be exact about what that is and is not: the certificate is not on the public C2PA trust list and StateNull holds no C2PA conformance listing, so stock validators (c2pa-rs, contentcredentials.org) verify the manifest as valid but show it as an unknown source. The explainer film covers what Content Credentials prove, where they break, and what StateNull adds.
Read the transcript and sources
Film transcript
0:00-0:06
AI can now generate a photo of almost anything. So the industry agreed on a fix — a way to show where an image really came from. It's called C2PA, or Content Credentials.On screen: How do you prove a photo is real? The industry's answer: C2PA.
0:06-0:16
Think of it as a nutrition label for a file. At the moment of capture — on cameras like the Leica SL3-S, Sony bodies, and the Nikon Z6 Three — or when an A.I. tool like Firefly or DALL-E makes an image, a signed record is attached: who made it, with what, and when.On screen: C2PA = a signed “nutrition label” attached at creation
0:16-0:26
And it's tamper-evident. Edit the photo, and a new signed record stacks on top of the old one — a chain that reaches back to capture. Change a single byte, and the file no longer matches its signed hash, so verification fails.On screen: Edit → a new manifest stacks on the old · change one byte → the signed hash fails
0:26-0:36
Powerful — but here's the part that rarely makes the poster. The credential lives in the file's metadata. Take a screenshot, or post to a platform that strips metadata, and it can simply be gone. In C2PA's own words, the standard offers no protection against a manifest being removed.On screen: It's metadata. A screenshot or re-upload can strip the credential entirely.
0:36-0:45
And even when the credential is intact, it proves origin — not truth. It tells you which camera or which app produced the file. It does not tell you the scene wasn't staged, or that the caption isn't a lie.On screen: C2PA proves ORIGIN + INTEGRITY — not whether the content is TRUE
0:45-0:55
To be fair, C2PA is closing the stripping gap. Durable Content Credentials add an invisible watermark and a fingerprint, so a stripped label can be looked up again. It's a real step forward. But it leans on a shared industry cloud, and a fingerprint match is a hint to verify — not cryptographic proof.On screen: C2PA's own fix: watermark + fingerprint + a shared-cloud lookup — a soft match, not proof
0:55-1:07
StateNull takes a different route. It writes a real C2PA content credential of its own, signed by a StateNull certificate that no public trust list carries yet — and it also keeps your own independent registry: a content and perceptual-hash index, written into a witnessed transparency log. So if the credential is ever stripped, your provenance is still recoverable by content — and you can prove it offline, with math, on nobody's cloud.On screen: StateNull = real C2PA + your OWN registry + a Merkle proof you can check offline
1:07-1:18
Here's the difference, live. Take a sealed StateNull photo and alter it into a copy — enough to strip a plain credential. StateNull still finds it by content match, and proves it with a transparency-log inclusion proof anyone can recompute. No account. No upload.On screen: Altered copy · perceptual match 2/64 · Merkle inclusion proof ✓ — verified offline
1:18-1:26
So: Content Credentials for reach and interoperability. StateNull for durability, and independent, offline proof. Don't take our word for it — drop a file and check the math yourself.On screen: C2PA for reach · StateNull for durable, independent, offline proof — verify it yourself
Two parties dual-sign a time-locked, tamper-evident record that either side can verify later. Trust-E ships in the app on Google Play and in the direct edition, along with encrypted calls, encrypted messaging and NFC ID-chip reading.
Read the transcript and sources
Film transcript
0:00-0:03
A man went to court to recover three hundred and ninety-one thousand dollars. He lost every claim, because the deal was only a handshake.On screen: $391,000. Handshake. Lost.
0:03-0:09
Verbal deals, and phone photos of a signed page, prove almost nothing about who agreed, to what, or when. Terms get disputed, dates get contested or backdated, and small disagreements turn into expensive litigation.On screen: Poor contracting erodes ~9% of annual revenue (WorldCC)
0:09-0:17
StateNull turns the handshake into a record. Two firms scan a one-page change order on site, and both sign it in the app. It is sealed at capture, with a SHA-256 fingerprint, independently anchored time you cannot backdate, and a hybrid signature. Change one character, and the seal breaks.On screen: Scan → both sign → sealed at capture
0:17-0:25
Months later, the client disputes the extra work. The contractor exports one chain-of-custody PDF: the exact terms, both signatures, the sealed time. And here is the part that matters. The client's own lawyer verifies it offline, by pure math. No upload. No trusting StateNull.On screen: Verify offline. Don't trust us — check the math.
0:25-0:30
No signal required. A tamper-evident record both sides can verify by math — built to support legal workflows, not replace your lawyer. See how Trust-E works, at statenull dot com.On screen: Trust-E · statenull.com — tamper-evident proof, not legal advice
Every capability below is in shipping code. Encrypted calls, encrypted messaging, Trust-E agreements and NFC ID-chip reading ship in the app on Google Play and in the direct edition. This is a capability list, not a certification list — see the standards and compliance matrix for what is independently certified (today: nothing).
Live🔒Seal at capturePhotos, scans and PDFs are locked the instant they're taken — fingerprint, trusted time, optional signed location and a post-quantum signature.
Live📋Proof RequestsNineteen built-in request templates across sectors with editable steps, one guest link per request, and a correction gate that only reopens on genuinely new evidence.
Live🔎Verify anywhereAnyone can check a sealed file in a browser — or fully offline with pure maths. No upload, no account, no trusting us.
Live🧪First-Pass Proof CheckAdvisory on-device check for resolution, exposure, sharpness and near-duplicates — a warning while it can still be retaken, never a judgement on the work.
Live📄Document scannerAuto edge-detect and perspective-correct, multi-page into one PDF — entirely on the device.
Live🔡Searchable PDF & WordOn-device OCR adds a text layer, and you can export to .docx — no cloud, no Google.
Live🧾Chain-of-custody reportOne tap produces a signed PDF: identity, hash, time, signer fingerprint and the full audit trail.
Live🗣️Encrypted callsEnd-to-end-encrypted 1:1 audio and video over StateNull's own relay — no Google push involved.
Live💬Encrypted messagingEnd-to-end-encrypted chat; our servers only ever hold unreadable ciphertext.
Live🤝Trust-E agreementsTwo parties dual-sign a time-locked, tamper-evident record — a handshake you can both later verify.
Live📤Secure sharingView-once or expiring links, encrypted for each recipient.
Live🗄️Long-term ArchiveAn automatic, end-to-end-encrypted retention copy that keeps your sealed captures years after you clear the phone.
Live💧WatermarkingAdd a visible mark and an invisible one that survives re-compression.
Live🪪Read an ID chipTap an NFC passport or residence-permit chip to attach a self-read identity to an agreement.
Live🛡️Device certificates (PKI)Hardware-attested enrolment and CA-rooted signer trust for organisations.
Live🏢Fleet management (MDM)Enrol, secure and manage an organisation's own devices.
Live☁️Recoverable backupEncrypted cloud backup with a recovery code, so a lost phone isn't lost evidence.
Live📴Works offlineAll of it runs on-device — no signal required, and no Google Play Services anywhere.
Long-term archive
Disputes surface years later. Keep the proof that long.
A copyright claim, an audit, a court date — they arrive long after you've cleared your phone. StateNull's optional Long-term Archive keeps your sealed captures as a separate, end-to-end-encrypted retention copy on an automatic weekly or monthly schedule, so the proof is still there when you finally need it. Priced on request — it is not on self-service checkout yet, so tell us how much retention you need and we quote it and enable it on your account. Because it's end-to-end encrypted, StateNull can't read a byte of it.
Why the same workflow holds across all of them
The sector changes the decision and the required evidence. It does not change what sits underneath.
The requirement travelsThe instruction written in the office is what the person on site reads, on their own phone, without an account.
Corrections stay attachedA resubmission is bound to the step it was sent back for — it cannot silently replace the record.
Sealed at capturePhoto, scan and PDF captures made in the app are locked on the device the instant they are taken, with an anchored time.
Verify offline, trust no oneAnyone can check the seal with pure maths — in a browser, no upload, no StateNull.
Sector readiness on this page is stated deliberately: Available now means the shipped product can run the workflow described on the card; Available now · professional decision remains means it can hold the evidence but a qualified person still makes the substantive decision; Expansion sector means the pattern fits but named safeguards are not in place, so we do not sell it. Building a tender or a case workflow? media.supply@statenull.com · Follow on LinkedIn ↗