SEALMATTERCERTIFIED DE-IDENTIFICATION
SM/WEB/2026 · PUBLIC RECORD
VERIFY.SEALMATTER.COM · CONSOLE
§1 · PURPOSE OF THE SERVICE

What leaves your organisation is clean, and you can prove it.

Sealmatter removes and substitutes personal information in documents, for subject access requests, archiving and AI use, and closes every matter with a signed, verifiable certificate. EU resident by default. Fully on premises where procurement demands it.

EUR 1.2BN IN GDPR FINES ISSUED IN 2025 · EUR 7.1BN SINCE 2018 · DLA PIPER SURVEY, JAN 2026
MANUAL DSAR HANDLING COSTS EUR 100 TO 1,500 PER REQUEST IN STAFF TIME

SPECIMEN · SM-2026-0142 · p. 3 of 1,204detect → substitute → probe

Regarding the departure of Katharina BrennerPerson A, employee number DE-88231ID-40017, her manager T. OseiManager 1 confirmed the review of 14 Marcha date in Q1 was closed.

Records for IBAN DE44 5001 0517 5407IBAN withheld and the address Torstrasse 118, BerlinAddress 3 are retained under the statutory schedule.

rec 04180 · sha-256 3d51fc09…c4b8 · surrogates consistent across 1,204 pages SEALED
§2PROCEDURE
SIX STAGES
ONE SIGNATURE

Six stages in. One signature. One certificate out.

Every stage appends a record to a tamper-evident chain. The only judgement call sits at the probe, and a named person signs the matter exactly once.

iIntakematter.opened

Upload, forward by email, or receive requests through a hosted portal. A matter opens and every document is snapshotted and hashed.

iiDetectledger.updated

Deterministic patterns find the obvious identifiers; models find the contextual ones and resolve who is who across all documents.

iiiSubstitutesubstitution.applied

Identities become consistent, plausible stand-ins. The same person carries the same surrogate on page 4 and page 1,104.

ivProbeprobe.scored

An adversarial model attacks the cleaned output and tries to re-identify the subjects. The scored report is retained as evidence.

vSignsignoff.recorded

A named reviewer signs the matter once. The signature, thresholds and model versions become part of the permanent record.

viCertifymatter.certified

A deterministic chain replay issues the certificate. Export bundles, restore permitted originals, and hand over with confidence.

§3THE
CERTIFICATE

Redaction is a commodity. The seal is the product.

Every matter closes with a certificate stating what was in scope, what was substituted or withheld, how the probe scored the result, and who signed it. Behind it sits a hash chain with no model in the path: anyone holding the certificate can verify the record at a public endpoint, years later, without trusting us.

CERTIFICATE OF DE-IDENTIFICATION
Matter
SM-2026-0142 · DSAR export
In scope
1,204 documents · 4,918 pages
Substituted
6 classes · 2,516 occurrences
Probe
0.91 · pass · log retained
Reviewer
signed · key 7A21
Chain head
9f3ac1…e02d · anchored
§4DEPLOYMENT
TWO MODES

Hosted in the EU, or inside your own walls.

MODE A

Hosted, EU jurisdiction

  • Documents encrypted at rest in EU jurisdiction storage
  • Running in minutes, no infrastructure on your side
  • Single-tenant deployments available
MODE B

Resident, on premises

  • Documents never leave your network
  • Local models do the reading and the swapping
  • Only hashes and chain records leave the building
§5PUBLIC
VERIFICATION

Holding a Sealmatter certificate?

Enter its identifier to replay the chain and confirm the record. Verification is public, read only, requires no account, and never exposes matter contents.

§6PILOT
TERMS

Bring one matter. Leave with a certificate.

Pilots start with a single real case: an ex-employee request, an archive batch, or a claims folder you want AI-ready. Flat monthly pricing, no per-page fees, and a signed data processing agreement from day one.

CONTACT
pilot@sealmatter.com

Tell us the matter type and rough page count. We reply with a scoped pilot plan within two working days.

Write to us