Audit Integrity Verifier

Cryptographically verify that any LexCompliance audit record is authentic and unaltered using SHA-256 Merkle proofs.

How does it work?

Every day, LexCompliance builds a SHA-256 Merkle tree over all audit log entries. The root hash is stored in S3 with Object Lock (5-year retention). You can verify that any specific record is included in the tree without accessing the full dataset.

Audit record ID

Manual verification

1. Obtain the leafHash of the record (SHA-256 of auditLogId:hmac).

2. Apply the Merkle proof (proof[]) bottom-up.

3. Compare the result with the snapshot rootHash.

You can use any standard SHA-256 tool (openssl, Python hashlib, etc.).