Arkova is a compliance audit automation platform in early access, built on top of a production-grade, cryptographically-anchored evidence layer. The audit-automation product — scorecard, gap detection, remediation, regulatory-change alerts, PDF export — is being built and refined with pilot customers.

How much faster is an audit with Arkova going to be vs. the manual process?

Typical compliance audits take weeks: compiling evidence across many tools, mapping it to controls, and producing a report. Arkova is designed to map evidence to the rules in your operating regimes automatically, rank gaps by severity and penalty risk, and produce an audit-ready export. Our pilot target is collapsing weeks of audit prep into hours.

Which regulations are on the roadmap?

US federal (FERPA, HIPAA, SOX, FCRA, GLBA, ADA, FLSA, GINA), EU/UK GDPR, Kenya DPA, Australia APP, Canada PIPEDA, Singapore PDPA, Japan APPI, India DPDP, South Africa POPIA, Nigeria NDPR, Colombia Law 1581, Thailand PDPA, and Malaysia PDPA. Prioritized by pilot-customer footprint.

What will the scorecard show?

A per-jurisdiction posture score and breakdown, a severity-ranked gap list, a prioritized remediation plan, a regulatory-change feed, and an audit-ready export. Designed for GRC leads, CISOs, internal audit, and outside counsel.

Is the evidence chain auditor-grade?

The evidence layer is cryptographic and independently verifiable: every anchor is a SHA-256 fingerprint committed to a public network, and lifecycle events are in an append-only audit log. Our own SOC 2 Type II and ISO 27001 work is in progress.

Is my data safe? Do you see our documents?

No. Documents never leave your device. Fingerprinting is client-side. Only PII-stripped metadata flows to our systems. Even if we were breached, your documents remain private because we never had them.

Join the waitlist on arkova.ai. We reach out to scope pilots — the best fits right now are compliance teams operating across multiple jurisdictions who are tired of the quarterly audit fire drill.

Compliance · eIDAS

European UnionPrivate Beta · Building

eIDAS-grade evidence anchored on a public ledger.

eIDAS gives qualified electronic signatures and qualified trust services the same legal weight as handwritten signatures across the EU. Arkova adds an independent verification layer on top of your existing trust service provider — every signed document gets a cryptographic receipt that survives the trust service's archive, your DocuSign tenant, and any future migration.

Request Early Access All frameworks

What it is

eIDAS in plain English.

eIDAS — short for "electronic IDentification, Authentication and trust Services" — is the EU framework that defines three legally distinct tiers of electronic signature: Simple (SES), Advanced (AES), and Qualified (QES). Only QES, issued via a Qualified Trust Service Provider (QTSP) using a Qualified Electronic Signature Creation Device (QSCD), has the same legal effect as a handwritten signature in every member state.

The original Regulation 910/2014 has been amended by the eIDAS 2.0 framework, which introduces the European Digital Identity Wallet (EUDI Wallet) — a member-state-issued wallet every EU citizen and resident will be able to use across the bloc. eIDAS 2.0 is being phased in through 2026.

eIDAS applies to every service provider relying on or issuing trust services in the EU. In practice, any cross-border B2B contract executed via electronic signature with EU counterparties touches eIDAS — even if the signing platform is American.

Key requirements

What eIDAS actually asks of you.

Tiered signature recognition

Member states must recognize SES, AES, and QES executed in any other member state. Higher tiers carry stronger evidentiary weight in court.

Qualified Trust Service Provider (QTSP) supervision

QTSPs are listed on the EU Trusted List and audited every two years. Their certificates and timestamps carry presumption of integrity.

Qualified Electronic Time Stamps (QETS)

Qualified timestamps issued by a QTSP carry presumption of accuracy and integrity of the data they sealed at the moment of timestamping.

Qualified Electronic Seals

For legal persons (companies). Provide presumption of integrity and origin for sealed documents — the corporate-entity equivalent of QES.

Cross-border interoperability

EUDI Wallet under eIDAS 2.0 will give every EU citizen a portable digital identity recognized across all 27 member states by 2026–2027.

How Arkova fits

Where Arkova adds an independent layer.

eIDAS gives you legally recognized signatures and timestamps. It does not give you an evidence layer that survives your QTSP changing pricing, going under, or sunsetting an archive format. Arkova anchors a SHA-256 fingerprint of every signed document to a public ledger at the time of signing. The QTSP's qualified timestamp + Arkova's ledger anchor are independent attestations of the same fact: this exact document existed at this exact time.

For cross-border B2B contracts where the QTSP is in one country and the relying parties are in another, the public-ledger anchor sidesteps the cross-border QTSP-trust-list lookup entirely. Anyone with the document can verify the anchor independently using shasum and a public block explorer.

Layer cryptographic evidence on top of your eIDAS program.

If you operate cross-border in the EU and want eIDAS evidence that does not depend on your QTSP staying in business, we'd like to discuss an early-access pilot.

Arkova is in private beta. Features described on this page are being built and refined with pilot customers right now. Some controls and integrations are live today; others are in active development. Talk to us about the parts most relevant to your workload.

Request Early Access