Trust — EpochCore LLC

Per-surface trust collateral.

Sealed (the SMB attestation product) carries the deepest published trust documentation today — reflecting that it's the customer-facing surface most likely to be audited. Other surfaces share the same chain substrate and cryptographic guarantees described below.

Sealed (seal.epochpay.today)

Full trust center, security disclosures, privacy + terms.

/trust →
/security →
/privacy →
/terms →

Last reviewed: 2026-05-14

Quantum AI Platform (epochcoreqcs.com)

API + entitlements gateway. Twelve IBM-listed quantum-AI agents.

Visit →

Last reviewed: 2026-05-14

Public Chain Verifier (chain.epochcoreqcs.com)

Independent verification of any seal hash. No EpochCore credential required.

Verify a hash →

Last reviewed: 2026-05-14

Merkle Aggregator (flash-sync.epochcoreqcs.com)

Hourly weighted-consensus Merkle commits. Live aggregator status.

Status →

Last reviewed: 2026-05-14

Compliance posture.

FIPS-140-2HSM-wrapped attestation on every Merkle root via IBM Key Protect. Signing-key CRN published in each verifier response.
NIST FIPS 203/204/205Post-quantum primitives in production: ML-KEM key exchange, ML-DSA-87 signatures (Security Level 5), SLH-DSA fallback.
SEC 17a-4WORM-aligned retention model (not certified). 7-year retention baseline; configurable upward per customer plan.
SOC 2 Type IIIn progress · Evidence collection live · Type II report target: Q4 2026.
IBM Partner PlusEnrolled. Twelve agents listed in watsonx Orchestrate marketplace.
Cloudflare Trust hubOperating on Cloudflare Workers + Durable Objects + R2 + D1. Workers-AI inference path with Anthropic failover.

The shared cryptographic substrate.

Every seal across every EpochCore surface chains into a single audit log:

Step 1 · Document sealSHA-256 hash + φ (golden-ratio) deterministic salt fold. Published as SHA-256+PHI in the receipt envelope.
Step 2 · Hourly Merkle rootAll hashes in the hour collected, weight-folded, Merkle-rooted. One commit per hour to the public chain.
Step 3 · Hybrid signatureEach root signed by both Ed25519 (classical) and ML-DSA-87 (NIST FIPS 204 post-quantum). Forging requires breaking both.
Step 4 · HSM wrapIBM Key Protect HSM wraps the signed root. Signing-key CRN is part of the public attestation.
Step 5 · Public verificationAny seal hash queryable at chain.epochcoreqcs.com/v1/verify — no credentials required.

Genesis seal: 437EC394E97ACCE9 · RAS root: 40668c787c463ca5. Every seal across every surface chains back to this genesis.

AI-training opt-out.

All EpochCore-operated surfaces publish a machine-readable AI-training reservation at /.well-known/tdm-policy (W3C TDMRep JSON-LD format) and set X-Robots-Tag: noai, noimageai, noml on every response. Public artifacts are not made available for model training under any third-party agreement.

Security disclosure.

Responsible-disclosure path for vulnerabilities in any EpochCore-operated surface: seal.epochpay.today/security. Same-day acknowledgment; coordinated-disclosure timelines on request.