The platform

Every change explained.
Every valid version, recoverable.

ROOTKey seals every version of your files, tables and databases, shows what changed - who, when and where - and restores the last valid version, cryptographically verified.

Built for regulated organisations · EU-based infrastructure · Enterprise-ready

Three layers

The symbol,
layer by layer.

The three layers of the ROOTKey platform symbol are the three components of its technology.

  • Layer 1Independent public registryEvery version gets a unique fingerprint, sealed with a timestamp.
  • Layer 2CryptographySHA-256 fingerprints, encrypted vaults and cryptographically anchored records.
  • Layer 3Pixel- and cell-level comparisonCompares the file with its sealed original and shows only what was altered.
AnchorPermanent digital record
Fingerprinta3f8c2d1...7e4b9f2a
Status✓ Sealed in the independent public registry
02 · Anchor

A permanent
digital record

Every version of every file, table or record gets a unique fingerprint, sealed in an independent public registry with a timestamp.

Whatfield "iban" · row 1042
Whoapi-key ·7f2
Where185.x.x.x · PT
03 · Detect

Continuous
change detection

ROOTKey continuously compares your data with the sealed record. Any change is caught and explained: what, who, when and where.

Valid versionv10 · sealed at 09:14
ScopeFile · table · row
Result✓ Cryptographically verified
04 · Recover

Recovery that is
provably clean

Restore the last version proven valid, down to one file or one row - not a backup that may be compromised.

Any file

Photos, contracts, tables.
One kind of proof.

PDF, images, Word, Excel, PowerPoint, tables and databases: whatever the file, ROOTKey compares it with its sealed original and shows only what was altered.

  • invoice-2026-0412.pdfIBAN and total changed
  • service-agreement.pdfLiability cap and signature changed

SaaS · Private cloud · On-premiseSharePoint · OneDrive · Amazon S3 · Cloudflare R2 · tables and databases · REST API and webhooks

SourceFiles · Tables · Databases
Integration methodsDirect connectors · REST API · Webhooks
DeploymentSaaS · Private cloud · On-premise
01 · Connect

API
integration

Connect your repositories and databases through direct connectors or the REST API - without replacing the tools you already use.

05 · Prove

Immutable
audit log

Cryptographically anchored records prove exactly what happened, when and by whom - providing verifiable accountability and regulator-ready audit reports.

Complete platform

Everything your
infrastructure needs.

  • See everything done with your dataOrganisation and IP intelligence, risk trends and the Information Flow graph turn raw activity into an actionable view of risk.
  • Contain an attack before it spreadsBlock access instantly when you are under attack, then coordinate the response centrally across teams and systems.
  • Prove compliance in secondsGenerate audit-ready NIS2, DORA and GDPR compliance reports on demand.
  • Control who can do whatModel complex organisational structures with multiple organisations, teams, roles and delegated administration.
  • VaultsEvery critical workflow in its own dedicated, encrypted vault.
Reliability

Infrastructure built for
high availability.

Uptime SLA99.9%

A target on the platform plans, contractual on Enterprise

Recovery window< 4h

Full data recovery after an incident

AlignmentISO 27001

Alignment under way · certification in progress

“ROOTKey is an agile, flexible, and highly skilled company. They demonstrated the ability to quickly adapt their API to the specific needs of our project.”Paul Edge · Director of Blockchain and Metaverse, EDP

Ready to deploy

Infrastructure that
verifies itself.

Start with the free plan and scale as you grow - or talk to our team to map ROOTKey to your compliance needs.

Need enterprise-grade SLAs, dedicated infrastructure or custom integrations? Learn more about Enterprise → · Calculate ROI and cost of a breach

Frequently asked questions

Questions about
the platform

How does ROOTKey detect a change?

ROOTKey continuously compares your data with the sealed record, so any change is caught and explained: what, who, when and where. Every version of every file, table or record gets a unique SHA-256 fingerprint, sealed in an independent public registry with a timestamp. A detected change shows the row, cell or field before and after, the user, account or integration behind it, and the system, repository or table.

What can ROOTKey protect?

ROOTKey protects files, tables and databases, including PDF, images, Word, Excel and PowerPoint. It connects through direct connectors to SharePoint, OneDrive, Amazon S3 and Cloudflare R2, and through a documented REST API with webhooks to every other system. Integration partners connect the systems where your data is created, such as your ERP or CRM.

How does restore work?

ROOTKey restores the last version proven valid, down to one file or one row - not a backup that may be compromised. Only what was altered returns to the sealed original, cryptographically verified, and every backup is independently verified for integrity before any recovery operation begins. One-click recovery restores the exact state of your data, from any snapshot, in under 4 hours.

Can an auditor verify a proof without access to our systems?

Yes: every critical action produces an independent proof that external auditors can verify without access to the original data. Each version's fingerprint is sealed in an independent public registry, and anyone can check compliance reports issued through ROOTKey on the public verification portal.