One-time evidence

CERTavia Basic

Cryptographically signed infrastructure evidence for a domain – audit-ready, DNS-anchored and delivered in 90 seconds. The entry point into SOVP compliance documentation.

What's included

  • Full Scan – SOVP validation based on the Ψ_core engine, tailored to the EU AI Act: 80+ technical parameters: TLS, DNS, DNSSEC, MTA-STS, BIMI, CAA, SPF, DKIM, DMARC, HTTP security headers and more
  • Sovereign Vault available for 90 days (local archiving required afterward) – an immutable, publicly verifiable proof with a cryptographic timestamp, checkable independently of CERTavia
  • JSON + CSV protocol output – machine-readable, compatible with Excel, BI tools and GRC platforms
  • CES score – Compliance Evidence Score on a 0–100 scale, aligned with EU AI Act Art. 50 and DORA requirements
  • DNS anchoring – the evidence hash is anchored in the audited domain's DNS, so authenticity and timing can be independently verified
  • 90–120 second delivery – no manual processing, no waiting

Suitable for

First AI Act compliance documentation Auditor submissions Vendor assessments One-time evidence for tenders Due-diligence processes SMBs without a dedicated compliance team

What still holds after 90 days — and what doesn't

Permanent: the PDF audit report, the cryptographic Ed25519 signature and the DNS-anchored timestamp remain valid indefinitely. The evidence documents the infrastructure state at scan time — immutable, verifiable independently of CERTavia. You can still submit this report to auditors years after purchase.

90 days only: the Sovereign Vault's online retrieval URL (for third parties to verify easily in a browser). After it expires, the report remains fully valid — the URL is only a convenience link, not part of the evidence itself.

For a permanent vault link and machine-readable verification URL: CERTavia Pro. For continuous monitoring: Annual Starter.

Thorsten Litzki
Thorsten Litzki Founder, CERTavia & Litzki Systems LLC

Basic is the first cryptographic step toward compliance documentation – deterministic, verifiable, in under two minutes.

LinkedIn →

Price in EUR (plus VAT for B2C, reverse charge for B2B within the EU as well as for businesses in Switzerland and Austria). Billed via Stripe. Stripe receipt sent automatically after payment. Formal invoice on request via our contact form. The report is delivered directly by email via the scan access code; customer portal access is available on request.

Basic – one-time license

EUR 490

one-time · one domain

plus VAT · vault availability 90 days

Delivered in 90–120 seconds after payment


  • 80+ technical parameters
  • SOVP protocol, cryptographically signed
  • Vault availability 90 days (local archiving afterward)
  • JSON + CSV included
  • DNS-anchored timestamp
  • One-time license, no subscription
  • Secure payment via Stripe
  • Customer portal access on request
80+ technical parameters
Delivery 90–120 sec.
Cryptographically signed
DNS-anchored · independently verifiable