Cryptographic assurance, engineered for enterprise trust
Twala Hashproof Technology is the cryptographic foundation underpinning document integrity across the Twala platform. It combines advanced cryptography, blockchain anchoring, and established digital signature standards to deliver a tamper-evident, independently verifiable chain of trust for every document processed through Twala.
Cryptographic Fingerprinting
Every document processed by Twala is assigned a unique cryptographic hash — a fixed-length digital fingerprint generated using Secure Hash Algorithms (SHA). Even the smallest alteration to a document produces an entirely different hash, providing a reliable mechanism for detecting unauthorized changes.
Merkle Tree Architecture
To secure these fingerprints at scale, Twala organizes document hashes into a Merkle Tree, a cryptographic structure purpose-built for efficiently validating large volumes of data. Individual document hashes form the base of the tree; these are progressively paired and hashed together to form a single root hash representing a cryptographic summary of all documents within the structure. This architecture enables the integrity of any single document to be independently verified by tracing it back to the root hash — if a document is altered, the resulting change in the root hash immediately signals tampering.
Infrastructure & Resilience
Twala's platform operates on secure, enterprise-grade cloud infrastructure engineered for high availability and operational resilience. Our infrastructure strategy incorporates a formal Disaster Recovery Plan and Business Continuity Plan, designed to maintain service continuity and safeguard data integrity in the event of unplanned disruptions. Recovery mechanisms span multiple geographic regions to minimize downtime and support business-critical operations for our enterprise clients.
Digital Signature Integration
Prior to incorporation into the Merkle Tree, individual document hashes are encrypted using digital signatures generated from the signer's private key. This ensures each signature is uniquely and cryptographically linked to the signer, in alignment with the requirements of electronic signature laws, including the Philippine Electronic Commerce Act, the Supreme Court Rules on Electronic Evidence, and comparable regulatory frameworks internationally. This process authenticates signer identity, protects the document against tampering, and ensures that any unauthorized modification invalidates the signature.
Blockchain Anchoring
The root hash of each Merkle Tree is recorded on a blockchain — a decentralized, immutable ledger. Once recorded, the root hash cannot be altered, establishing a permanent and independently auditable chain of trust. Each root hash is cryptographically linked to the one preceding it, forming a continuously extending chain of custody. As this chain grows, the computational infeasibility of compromising its integrity increases correspondingly, ensuring that document security strengthens over time rather than degrading.
Underlying Cryptographic Standards
Hashproof Technology is built on a foundation of internationally recognized cryptographic and digital signature standards, including:
- Secure Hash Algorithms (SHA) — for tamper-evident document fingerprinting
- Elliptic Curve Cryptography (ECC) — for efficient, secure encryption and signing
- Blockchain cryptographic protocols — to guarantee the immutability of anchored root hashes
- Digital signatures (public/private key infrastructure) — to authenticate signer identity and ensure legal compliance
- X.509 certificate standards — to enable interoperability with established Public Key Infrastructure (PKI) systems
Interoperability with Public Key Infrastructure
While Hashproof Technology is built on blockchain-based innovation, it remains fully interoperable with traditional PKI systems through support for the widely adopted X.509 certificate standard. As a member of the Cloud Signature Consortium (CSC), Twala adheres to global standards for cloud-based digital signatures, ensuring compatibility with established PKI frameworks and alignment with international regulatory expectations.
Twala's signatures are designed to be compatible with the Adobe Approved Trust List (AATL), enabling signed documents to display as trusted and verified when opened in Adobe Acrobat and Adobe Reader, without requiring the recipient to manually install or configure any certificates.
Twala also supports Long-Term Validation (LTV), embedding the certificate, revocation status, and timestamp information required to verify a signature's validity directly within the signed PDF. This ensures that signatures remain independently verifiable long after the signing certificate itself has expired — a critical requirement for documents that must retain legal and evidentiary value over extended periods.
This combination of blockchain anchoring, PKI interoperability, AATL compatibility, and LTV support allows enterprise clients to adopt Twala's document security without sacrificing compatibility with existing digital certificate infrastructure or long-term document validity requirements.
Enterprise Value
Hashproof Technology delivers a set of assurances designed to meet the standards expected by regulated enterprises:
- Legal compliance — aligned with the Philippine Electronic Commerce Act, Supreme Court Rules on Electronic Evidence, and comparable international electronic signature frameworks
- Tamper-evidence — any unauthorized modification to a document is immediately detectable
- Independent verifiability — blockchain anchoring enables third-party verification of document integrity without reliance on Twala as a single point of trust
- Long-term security — the chained structure of root hashes, combined with LTV support, ensures the integrity and verifiability of records strengthens, rather than weakens, over time
- Standards interoperability — seamless compatibility with blockchain-based, traditional PKI-based, and Adobe-native signature ecosystems
