Legal notice

Publisher

The verifbox.com website is published by HTTPS CARD — Internet Identity Card Limited, a company incorporated in England and Wales in 2014, registered at Companies House under number 09168431, with its registered office at 124 City Road, London EC1V 2NX, United Kingdom.

Registered with the Information Commissioner’s Office (ICO), the UK data protection authority: ZA457585.

Director of publication: Michael Benaudis, founder and chief executive.
Contact: contact@verifbox.com

Hosting

Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (Firebase Hosting and Cloud Run services, europe-west1 region, Belgium).

Vulnerability reporting

Security vulnerabilities can be reported to security@verifbox.com. See also security.txt.

Technologies

The post-quantum signature uses the liboqs library from the Open Quantum Safe project on the server, and the noble-post-quantum library in the browser. Anchoring in the Bitcoin blockchain relies on the open OpenTimestamps protocol. Since 10 October 2026, the RFC 3161 time-stamp token is issued by IIC TSA, a non-qualified time-stamping service operated by the same company, HTTPS CARD — Internet Identity Card Limited. The hybrid signature architecture is inspired by the Internet Identity Card post-quantum identity card (internetidentitycard.com).