ProofLedge
English
Download

Language

Download for Windows

Digital evidence workstation · Windows beta

Preserve. Compare.
Keep every step on record.

For investigators, lawyers, journalists and compliance teams.

A local-first workstation for digital evidence. Originals stay untouched, every file is hashed at import, and reports keep observed facts apart from interpretation.

Download for Windows How it works

Free during beta · Windows 10/11 x64 · Works offline

Sample data shown. Fictional demo case.
ProofLedge dashboard with evidence items, integrity status and recently imported files (sample data)

How it works

Four steps from a folder of files to a package someone else can re-verify.

  1. Import and preserve

    Add files or folders to a case. Originals are opened read-only while ProofLedge streams a SHA-256 hash and records who imported what, and when.

  2. Inspect

    Check file signatures against extensions, read EXIF, PDF, ZIP, Office, video and audio metadata, and place per-source timestamps on a timeline.

  3. Compare

    Find exact duplicates, near-duplicate image candidates and documents with similar wording. Compare Studio shows byte, metadata, text and pixel differences side by side.

  4. Report and package

    Export PDF, HTML and JSON reports plus a signed Case Package ZIP that can be re-verified on another PC.

Product

One workspace, from intake to report

Each result links back to the original file, its hash and the method that produced it.

01Preserve & verify

Originals stay exactly as they arrived.

Files are opened read-only and hashed with streaming SHA-256 the moment they enter a case. Re-check any item later and see whether it still matches.

  • Read-only import, never re-encoded
  • SHA-256 recorded with who, what and when
  • Signature vs. extension mismatches flagged as observed
ProofLedge evidence view with SHA-256 hashes and integrity status of imported files (sample data)

02Compare Studio

See what changed, not just that it changed.

Compare two files side by side. Byte, metadata, text and pixel differences are each listed as their own type and never merged into a single score.

  • Byte and metadata differences
  • Text and image pixel differences
  • Exact and near-duplicate candidates
Compare Studio showing byte, metadata and pixel differences between two images (sample data)

03Timeline & custody

Every timestamp labeled with its source.

File system, embedded metadata and import times share one timeline, each with its source. Every action goes into an append-only log where each entry carries the previous entry’s hash.

  • Per-source timestamps, never merged
  • Hash-chained, append-only audit log
  • Later edits to the log are detectable
Timeline showing conflicting timestamps from different sources side by side (sample data)

04Reports & packages

Reports someone else can re-verify.

Export PDF, HTML and JSON reports that keep facts, automated signals and examiner notes apart, plus a Case Package ZIP whose manifest is signed with Ed25519.

  • Facts, signals and interpretation in separate layers
  • Ed25519-signed manifest with the SHA-256 of every file
  • Verifier shows the key fingerprint and rejects a forged manifest
Reports view with report generation and Case Package export options (sample data)

And the details that matter

Small, careful checks that keep a case consistent.

  • Hash-chained audit log

    An append-only chain of custody. Each entry carries the previous entry's hash, so later edits are detectable.

    Each entry stores the previous entry’s hash.

  • Signature vs. extension

    Flags files whose content signature does not match the extension, reported as an observed mismatch.

  • Metadata inspectors

    EXIF, PDF, ZIP and Office (DOCX/XLSX/PPTX) properties, read-only. Missing metadata is shown as missing, not as proof of tampering.

  • New in 0.2

    Video and audio metadata

    Durations, tracks, codecs, dimensions and container creation times from MP4, MOV and M4A, plus WAV, MP3 and FLAC basics, without external tools. Embedded location is flagged as a privacy notice.

    • MP4
    • MOV
    • M4A
    • WAV
    • MP3
    • FLAC

    Also parsed: MKV/WebM, AVI, Ogg (Vorbis, Opus, Theora), WMV/WMA and AIFF.

  • New in 0.2

    Signed Case Packages

    Every exported manifest carries an Ed25519 signature. The verifier shows the key fingerprint and rejects an altered manifest, even if its hash file was recomputed.

    The key identifies the workstation, not a person. Compare fingerprints out-of-band.

  • Duplicate candidates

    Exact duplicates by hash, plus perceptual near-duplicate image candidates for you to review.

    • SHA-256
    • dHash
  • New in 0.2

    Similar wording in documents

    Text, JSON, XML, HTML, Word, Excel and PowerPoint files with similar wording are listed as candidates. You confirm or reject each one.

    • TXT
    • JSON
    • XML
    • HTML
    • DOCX
    • XLSX
    • PPTX
  • New in 0.2

    Optional AI-assisted explanations

    Off by default. With your own OpenAI key, you preview the exact summary that would be sent and confirm it. File contents, names, paths, metadata values, hashes and notes are never sent.

    1. Key kept in Windows Credential Manager
    2. Preview the exact payload
    3. Labeled AI-assisted, not evidence

Facts and interpretation never share a line

Every report is organized in four layers, so a reader always knows who or what produced a statement.

  1. FactRecorded by ProofLedge

    The SHA-256 recorded at import matches the file as it is now.

    Matches
  2. Automated signalComputed by a documented method

    Extension says .jpg, but the content signature indicates PNG.

    Mismatch
  3. Examiner interpretationWritten by the examiner

    Why the file was renamed is a question for the examiner, not the tool.

    Examiner note
  4. ExternalImported, shown as-is

    Imported ORIGMA report, shown as-is and never re-scored.

    External result
Illustrative layout. Example statements, not real case data.

ORIGMA

Works alongside ORIGMA

ORIGMA assesses AI-origin, provenance and integrity signals in individual files. ProofLedge does not rebuild that detector. Instead, you can import an ORIGMA report you exported yourself, and ProofLedge attaches it to the case as an external result.

  • The imported report's hash, import time and source are recorded.
  • Fields are preserved as-is. Unknown fields are kept, not dropped.
  • ORIGMA scores are never converted, averaged or re-scored as ProofLedge results.
  • Nothing is uploaded to ORIGMA automatically.

Visit origma.app

ORIGMA

Is this file AI-generated? What do provenance and integrity signals show?

origma-report.json

ImportOne-way import. Nothing is sent automatically.

ProofLedgeExternal result

What changed in this set of files, and can the process be reproduced?

What ProofLedge does not claim

Clear limits are part of a trustworthy tool. ProofLedge reports what it observed and leaves conclusions to people.

The words we use

Observed
Recorded directly from the file or the process.
Matches
Two values were compared and are identical.
Mismatch
Two values were compared and differ.
Inconclusive
Not enough data, an unsupported format or conflicting signals.
  • It does not detect every forgery or manipulation.
  • It never labels a file "100% real" or "100% fake".
  • It does not guarantee that anything will be admitted as evidence in court.
  • It does not decide what happened. A changed hash shows that bytes differ, not why.
  • It does not treat missing metadata as proof of tampering.
  • It supports examiners and does not replace expert review.

Frequently asked questions

Can’t find what you need? Write to us.

[email protected]

Is ProofLedge an AI or deepfake detector?

No. ProofLedge focuses on preservation, comparison, chain of custody and reporting. For AI-origin signals you can import an ORIGMA report, which is shown as an external result.

Does ProofLedge use AI?

Not for its core analysis: hashes, metadata, comparisons and similarity candidates come from documented methods. Optional AI-assisted explanations are off by default. If you turn them on with your own OpenAI key, you preview and confirm exactly what is sent, and file contents, names, paths, metadata values, hashes and notes are never included. AI-origin results from ORIGMA can be imported as external results.

Are my files uploaded anywhere?

No. Analysis runs locally on your PC and works offline. The app goes online only when you click “Check for updates” or use the optional AI-assisted explanations, which are off by default, never send your files, and show you the exact summary before anything is sent.

Does ProofLedge modify my original files?

No. Originals are opened read-only and are never re-encoded or overwritten. Work happens on streams or working copies, and each action is written to the audit log.

How do recipients know a package wasn't altered?

Each Case Package lists the SHA-256 of every included file in a manifest signed with Ed25519. The verifier re-hashes the files, checks the audit chain and the signature, and rejects a forged manifest even if its hash file was recomputed. It also shows the signing key's fingerprint. The key identifies the exporting workstation, not a person, so compare the fingerprint with the sender through a separate channel.

Will my reports be accepted in court?

ProofLedge cannot guarantee admissibility. That depends on jurisdiction, procedure and expert testimony. It helps you keep a consistent, traceable record of how evidence was handled.

How much does it cost?

ProofLedge is free during the beta. Free and Pro editions are planned, and pricing will be announced after the beta. Core preservation features will not be locked behind a paywall.

Which systems are supported?

Windows 10 and 11 (x64) first. macOS and Linux are not part of the initial release. The app itself is available in English and Korean during the beta.

Start a case on your own machine

Your files stay on your PC. Download the Windows beta and keep a record you can re-verify later.

Download for Windows System requirements

Free during beta · Windows 10/11 x64 · Works offline