Package integrity
The manifest and every named member must match byte-for-byte. Missing, extra, or altered evidence is refused.
For recipients · free public verification
.obcase is not a file you are expected to already own. The Obsign Evidence Workstation creates it from an ordinary image, then hands it to a recipient. This page lets that recipient independently check every byte, signature, custody link, and portable computation.
The missing first step, made explicit
Start with a PNG, JPEG, TIFF, BMP, or WebP. The local Windows workstation preserves the source, creates an encrypted examiner identity, records custody, applies the portable operation, signs every claim, verifies the finished package, and exports one .obcase file.
Creator access is currently issued directly while the public Windows installer completes organization code signing and external release validation.
Select a supported source image. Obsign copies its original bytes exactly before processing.
Create an encrypted examiner identity in the app or choose an organization-managed key.
The package is not released unless the native verifier reproduces its operation and validates every binding.
The recipient gets the evidence, receipts, report, and reproducible operation inside one .obcase.
Received a package? Continue here.
No login. No upload. No “trust us” API call. The verifier runs in an isolated browser worker using the same memory-safe core as the standalone verifier.
.obcase package
No file selected
Your evidence stays yours. Package bytes and findings remain in this browser. Only the public page assets are fetched.
Independent verification result
Nine layers. One unambiguous answer.
A package can be intact and still come from an unauthorized issuer. It can carry a valid signature and still fail custody. Obsign reports each question separately.
The manifest and every named member must match byte-for-byte. Missing, extra, or altered evidence is refused.
The signature must verify, then the signer is assessed against the recipient’s trust policy—not its own claims.
Preserved source bytes and the canonical working image must remain cryptographically bound to the case.
The registered portable operation runs again in your browser. A claimed result that cannot reproduce does not pass.
The delivered file and its decoded pixels are checked against the signed result—container and content, separately.
Content Credentials and independent time are shown as explicit layers and can be mandatory under your policy.
Designed for the receiving side
Verification is free because trust only works when a newsroom, court, client, auditor, or opposing expert can inspect the evidence without buying Obsign or trusting our servers.
Read the evidence package specificationEvidence that can answer back
The workstation creates the package from an ordinary image. This public verifier lets every recipient challenge it independently.