PERISCOPE
An anchor chain running continuously from the vessel into the sea

Chain of custody intelligence

A chain is only usefulif every link holds.

Findings are only worth having if they survive scrutiny. Any sentence in a PERISCOPE report can be followed, step by step, back to the preserved original evidence, and forward again from any record to every statement that depends on it.

Footage: Gram Film / Pexels

Bidirectional trace

Six links, in both directions.

  1. 01
    Report sentence

    The statement a board, regulator or counterparty reads.

  2. 02
    Finding

    The substantiated conclusion that sentence rests on, with its classification.

  3. 03
    Anomaly

    The specific contradiction in the records that produced the finding.

  4. 04
    Calculation

    The deterministic computation, by version, with its stated inputs.

  5. 05
    Source record

    The exact rows examined, named and countable.

  6. 06
    Original evidence

    The preserved file as received, with its integrity value recorded on intake.

Sanitized evidence chain - illustrative
REPORT §9.1 → FINDING PF-F-0001 Approved
FINDING PF-F-0001 → ANOMALY PF-A-000101 Substantiated
ANOMALY PF-A-000101 → CALCULATION PF-CALC-0001 v1.3 Validated
CALCULATION PF-CALC-0001 → SOURCE RECORDS 3,184 rows
SOURCE RECORDS → EVIDENCE PF-EVID-000002 · preserved original · SHA-256 recorded on receipt

Sanitized illustration. Methods, thresholds and detection logic are proprietary and are not published.

Intake discipline

What happens the moment we receive a record.

  • The original is preserved exactly as received and is never worked on again.
  • A SHA-256 integrity value is computed on receipt and recorded against the item.
  • Custodian, source system, transfer method, time and condition are recorded.
  • Confidentiality and access class are set at intake, not later.
  • Acceptance into evidence is a separate, authorised review step with a named reviewer.
  • Every subsequent action appends to the ledger. Nothing is overwritten or deleted.

Event ledger

Append only, by design.

A custody ledger that can be edited is not a custody ledger. Corrections are recorded as new events that reference the earlier one, so the history of the history remains visible.

  • Every event carries an actor, a role, a timestamp and a subject.
  • Gaps are reported as exceptions rather than quietly closed.
  • Custody completeness is stated as a figure in every report.
  • The ledger and event timeline can be exported as PDF or CSV.

Custody completeness below one hundred percent is disclosed, not hidden. A report states what was preserved, what was not, and what that limits.

If the numbers have stopped agreeing with each other, that disagreement is evidence.

Request an examination