Answers about the app, making and sharing a file, checking a file someone sent you, plans and billing, business use, and your data. Search, or pick a topic below.
83 questions in 8 topics
An iPhone on iOS 18 or newer, and Android 12 or newer on a phone with a hardware-backed keystore, which is standard on phones from roughly 2020 onwards. The signing key has to be created in secure hardware: the Secure Enclave on iPhone, the keystore on Android, and StrongBox where the phone has it.
For the iPhone, EverStamp is on the App Store. For Android, it is coming soon to Google Play. Whoever receives a file does not need the app: the verification page works in the browser, with four sample files to try.
Not to start. You install the app and take photos, without an account or a password. If you work for a company on Business, you link your phone with a linking code that company gives you, again without an account. Only people who use the dashboard sign in. Whoever receives your file never needs an account.
Nothing. Basis is free and gives you one file per calendar month, sealed the same way as on Plus, with the report, the full archive and everything a recipient needs to check it.
Your photos stay on the phone, so allow for them. A file of twelve captures at 12 megapixels is around 38 MB. An evidence extract of a single capture is about 3 MB.
No. Every photo is signed on the phone the moment you take it. A connection is needed once, to seal the file and record it in the registry, and that can happen later.
Not to you, and not to whoever receives the file: the same captures, the same report, the same verification page and the same checks. The one difference is who vouches for the key inside the phone: Apple on iPhone, Google on Android.
The photos of one moment, kept together: a move-in, a handover, a stage of a job. A checklist says which steps are still open. When you close the file it is sealed with a qualified timestamp, and you get a PDF report and an archive with every capture at full resolution.
The date, the time to the second, the address and your company name, drawn into the image itself so they survive a printout, a screenshot and a photocopy. The time on the bar comes from the phone’s clock, and the file marks it as a stated value. The time that counts is the timestamp, which the file carries next to it.
No. The timestamping service stamps with its own audited clock, and the protocol has no field in which the app could ask for a different time. That is why a file made today can never carry yesterday’s date. Changing your phone’s clock only changes the stated value on the bar; the timestamp is unaffected.
A checklist is a list of steps, each with a minimum number of photos, so the file says what is still missing. A step can also ask for things a photo cannot show: a number plate, a meter reading, a serial number, a date or a choice from a list. Those values travel inside the capture, under the same signature as the photo.
Correct it before you confirm. Text recognition runs on the phone and only proposes a value; what goes into the file is the value you confirm.
When the moment is over. One file per moment works best: the check-in on the day you move in, the check-out on the day you leave, each with its own timestamp. The window around your photos is as wide as the file stayed open: shoot for twenty minutes and it is twenty minutes, leave it open for a week and it is a week. That number is printed in the file.
No. The app only records with its own camera, so every photo in a file sits in the signed series. The photo library is used only to pick your company logo in Settings.
You can strike it through, and the image goes. The fact that something was struck through stays visible, with your reason next to it. A file that shows its own corrections is worth more than one where something quietly disappeared, and removing it without a trace would break every other check.
It uses it for the address on the stamp bar and the position inside the file, and only while the app is open and you are taking photos. There is no background location. If you refuse the permission, the app carries on and your photos carry no position.
On Plus, Business and Enterprise, yes, in a checklist with a signature step. Of the built-in checklists only Key handover has that step. On Business and Enterprise an owner or administrator switches on ‘The customer signs at the end’ in a checklist of their own, for example for a handover. The customer then signs on the phone, and the signature goes inside the file rather than on a separate form.
Open the verification page at everstamp.app/verify and drag the archive, the PDF report or a single photo onto it. The file stays in your browser and does not come to us; only the question whether our registry knows the entry goes to us. The page shows when the file was sealed, by which service, what is inside it, and where that stops.
No. A browser is enough, on any device. Only the person taking the photos needs the app.
For the PDF report: whether the timestamp is genuine and covers exactly this document, whether the service that set it is on the European trust list and was at the time, and whether anything was added after the timestamp. For the archive from the app also the inside: every photo against its signature and its hash, the sequence, the seal over the whole file, the device signature under every photo, and the lower edge of the time window. Which checks appear depends on the file; a light file, or one without a checklist, shows fewer. The verdict only turns green when the file carries a registry receipt that the page can verify.
Almost entirely, and that last bit counts. Every check except the one against our registry runs on public tooling: Adobe Reader shows the signature on the PDF by itself, and by hand it is openssl ts -verify with OpenSSL 3 (the openssl on a Mac is LibreSSL and cannot do this), with the open tooling for Content Credentials for the photos. The section “What you can verify yourself” on the verification page shows how. If we stopped tomorrow, those sums would carry on working. The check against our registry is the one that tells a file from our app apart from something made elsewhere with a real timestamp wrapped around it, and without it the verdict is never green.
Because that is what can be established. The lower edge is a public random value nobody could know in advance, carried into the file; the upper edge is the qualified timestamp. The capture happened in between. The phone’s clock is shown too, as a stated value, and the width of the window is in the file as a number.
The page could not complete that check, and it says so instead of quietly passing it. If our registry cannot be reached, for example, the check against it stays open, and the page says so. Try again later, and look at the registry status page if it persists.
Not necessarily. Something was added to the PDF after it was timestamped, and the page reports it as an addition, with the first stamp date alongside, rather than hiding it. One of the samples on the page shows what that looks like. What the addition means is a question for the sender.
What the photo shows: a photo of a screen is still a photo. The exact moment of capture, only the window around it. That the photographer recorded everything, because they chose what to photograph. And how anyone will weigh it: that is for whoever assesses the file.
In the EU, eIDAS Article 41 presumes the date and time, and the integrity of the data bound to them, to be accurate. In the United Kingdom the same rule applies through assimilated law. In the United States there is no such presumption. What the photos show, and what they are worth in a dispute, is for the court or the other party to weigh.
Yes. The verification page has four samples ready: a genuine file, one added to afterwards, one with a forged date and one stamped by an unknown service, so you can see what a failed check looks like.
Basis is free, with one file a month. Plus is €9.99 a month for five files, with a customer signature at key handover, your logo, a backup to your own cloud and longer share links. Business adds the dashboard, requests, your own templates and an API, from €49 a month excluding VAT. Enterprise is priced on request, and adds the qualified timestamp per photo (by agreement) and delivery into your own system. The seal and the checks are the same in every plan.
On Basis, your next file comes with the next calendar month. On Plus you can buy five more for €4.99 in the app. Files you buy do not expire, not even after your subscription ends: each month the five from your subscription go first, then the ones you bought. Your credit belongs to your subscription. After Plus ends, you use it on the phones that were already linked.
In the app, through the App Store or Google Play: €9.99 a month, or €89.99 a year, which comes to €7.50 a month. Apple or Google handle the payment, so we never see a card.
Plus is a subscription with Apple or Google, so you cancel it where you manage your subscriptions: in the App Store settings on your iPhone, or in Google Play on Android. The files you made stay on your phone, and the seal on them does not depend on your subscription.
Apple or Google handle the payment for Plus, so a refund request goes to them, under their rules. If the owner cancels a yearly Business subscription early, we credit the part that belongs to the remaining whole months. For anything else on Business and Enterprise, write to info@everstamp.app.
Business starts at €49 a month, excluding VAT. You pick a bundle, and the bundles differ only in volume: the files and users a month, and the price of an extra file. Which one fits and what it costs, you see in the dashboard when you subscribe. A user is a person with a linked phone. Paying yearly costs less, with the files pooled across the year. You can try Business free for 14 days from the pricing page, without payment details. After that you pay in the dashboard through Mollie: the first time by iDEAL or card, then by automatic direct debit, in advance per month or per year. Only an owner can pay or cancel; owners and administrators see the payments and invoices.
Yes, for 14 days and 20 files, free and without payment details. Create your account and organisation from the pricing page; you choose the bundle in the dashboard, under Settings, Subscription, also during the trial. During the trial you invite your people, link their phones with a linking code and send orders with your own checklists. Requests from customers and Business share links come with the paid plan. The trial ends after 14 days or 20 files, whichever comes first. You then have thirty days to take a bundle, and everything stays; until you pay, you cannot link new phones or send new orders. Phones already linked keep recording until the end of those thirty days. If you take no bundle, the agreement ends and we delete your organisation’s data after those thirty days; export what you want to keep in that time. A copy you already gave to someone, the archive or the PDF report, stays verifiable on the verification page, because its entry in the public log stays. A share link no longer works by then.
The work carries on. Bundles have a soft cap, and we settle the files over the bundle afterwards at the extra-file price of your own bundle. At 80 and at 100 per cent of the bundle you get a notice, with a button to move up. We do not refuse a file because a counter is full, and there is nothing to buy in advance.
An answered request counts as one file. Sending a request costs nothing.
Nothing extra: it comes with Business and Enterprise. It is off until an owner or administrator switches it on, and from then on every file is kept with us, encrypted. Files stay for as long as the subscription runs, unless you set a shorter term yourself; when the subscription ends you have thirty days to collect everything.
You can try Business free for 14 days, with 20 files: create your account and organisation from the pricing page, without payment details; you choose the bundle in the dashboard. If you want to talk first, or for Enterprise, request a quote with the number of people and the files you expect a month, or write to info@everstamp.app. For Enterprise the quote also covers the volume, the retention term and delivery into your own system.
An owner cancels in the dashboard, under Settings, Subscription, or by email to info@everstamp.app. The subscription then runs until the end of the current calendar month. On a yearly subscription we credit the part that belongs to the remaining whole months; if more files were used than the bundle gave pro rata, we charge those as extra files.
Every payment gets an invoice, already marked as paid. The owners receive it as a PDF by email, and owners and administrators download it in the dashboard under Settings, Subscription. Under Settings, Company an owner can set a mailbox for invoices, such as your accounts department’s, your own reference such as a PO number, and a separate billing address.
The owners get an email and we try the direct debit again after three days; you can also pay right away in the dashboard. If the payment is still missing 14 days after the due date, requests and Business share links close until it is in. Files, the registry and the verification page keep working.
At dashboard.everstamp.app, or through Log in at the top of this site. There is no password: you enter your email address and get a sign-in link that works for 15 minutes, in the browser where you asked for it. You can also sign in with Google or Microsoft. If your organisation requires two-step verification, the dashboard then asks for a code from your authenticator app. The dashboard is part of Business and Enterprise.
A session ends after 8 hours without activity and after 7 days at most. Under Settings, Security, My sessions you see where you are still signed in and end a session, for example on a laptop you lost. An owner can sign a member out everywhere; that applies to the whole account, also at other organisations. A browser that is already open can carry on for at most an hour after that.
Yes. The dashboard then asks for a code from an authenticator app on top of the sign-in link. Under Settings, Security an owner chooses for whom it is required: nobody, owners and administrators, or everyone. The requirement holds in the database itself: whoever needs it and enters no code sees no data of the organisation. The app on the phone does not notice any of it.
You set up an order with an address, a template and a person. It appears on that person’s phone under “Prepared for you”, and in the dashboard you watch it move from prepared to picked up to registered.
An owner or administrator makes a linking code under People and phones for the person who uses the phone. The code works for one phone and expires on the date the dashboard shows. Type it in the app under Settings, Link an organisation. From then on every file from that phone registers under your organisation. A phone belongs to one organisation at a time.
An owner can do everything, including choosing, paying for and cancelling the subscription. An administrator manages people, phones, checklists and orders, opens deliveries and kept files, and can capture as well. A field worker captures with the app and sees the organisation’s list of files. A reader sees that list too and changes nothing. An organisation always keeps at least one active owner.
When someone leaves, deactivate them under People and phones: their phones are unlinked and open linking codes cancelled. If a phone is stolen or misused, block it: a blocked phone no longer gets into the registry, so no captures, no new code and no share links. The files already registered stay in your list.
Send a request: a link or a QR code with your checklist. You send the link yourself, or have the dashboard email it; it works for as long as you choose, 30 days at most. The customer sees who is asking and what for, and takes the photos without an account, in the EverStamp app, which they install first if they do not have it yet. What comes back carries the same device signature, seal and registry entry as a file from your own staff. Requests come with the paid Business and Enterprise plans, not with the trial.
Yes. In the dashboard you set up templates with your own steps, fields and required photos, and everyone in the team gets the same one. Templates are versioned, and each file records which version was used.
Yes, on Business and Enterprise. Under Settings, Stamp bar an owner or administrator chooses which lines it shows: the address, the coordinates, the name of the file, the project, the checklist step, who captured, the organisation and a note. You also choose whether the bar sits at the bottom or the top, whether it is dark or light, and how large it is. The time from the device clock is always on it. An order can have a bar of its own. The evidence lives in the file and the registry, and does not change with the bar.
Yes, in two ways. You link the contractor’s phone with a linking code: the contractor then works in their own app against your orders and checklists, every file lands in your dashboard and the contractor counts as a user in your bundle. Or you send a request, which needs no link and no account. A phone belongs to one organisation at a time: if the contractor’s phone is already linked to another organisation, that link has to be undone first.
By default it shows the registry: fingerprints, sequence numbers, seals and registry receipts. It opens photos in two cases: a delivery answering one of your requests, and files kept at EverStamp once an owner or administrator has switched that on. Only owners and administrators open them, and an API key of your organisation; field workers and readers cannot. Every opening through the dashboard or the API is written to your audit log, with who and when; if that fails, the dashboard opens nothing. Technically EverStamp can open them too, because we manage the key; we do that only at your organisation’s written request, or when a court or authority orders or demands it under the law.
Yes. Plates and meter readings are searchable across every file your team recorded.
Yes. A webhook tells your system when a file is registered or a request is complete, and the API at api.everstamp.app hands over the file with its seal. On Enterprise the archive is delivered to you.
An owner or administrator downloads a zip with all data of the organisation under Settings, Export everything, as JSON and CSV. The photos of files kept at EverStamp are saved by your browser under Settings, Export archives, each file as its original archive, into a folder on your computer. Photos that are only on a phone or in an ordinary share link cannot be exported by EverStamp.
In the dashboard under Help. If your answer is not there, ask your question at the bottom of that page. You get a confirmation with a number, and the answer by email and under My questions. Without the dashboard, use the contact form or write to info@everstamp.app.
Not on the ordinary route: they stay on your phone. There are three exceptions: a share link, which we cannot open; a delivery answering a company’s request; and every file, if your organisation switched on storage at EverStamp. In the last two we hold the key for that company; technically we can therefore open them too, and we do that only at that company’s written request, or when a court or authority orders or demands it under the law.
A fingerprint: numbers computed from your photos that cannot be turned back into an image, with an identifier of your device and the attestation from Apple or Google. If your phone is linked to an organisation, or you answer an organisation’s request, the registry also keeps the name of the file, the checklist and the field values, for that organisation.
No. On the ordinary route your photos never reached us, so there is nothing to send back; our entry in the log only confirms that a file existed. That is why Plus has a backup to your own cloud. Files you delivered in answer to a company’s request, and files made while your organisation had storage at EverStamp switched on, sit with us for that company, and it can open them.
The signing key cannot leave your old phone, so the new one gets a key of its own. The files you already sealed stay checkable, because checking never depended on the phone. The files themselves live on the old phone, so take them with you: keep the archives, or use the backup to your own cloud on Plus.
If your phone is linked to an organisation, its dashboard shows, for every file you register from then on, the name, the checklist and the field values, who made it and when; not the photos. Files made before the link stay your own. If your organisation switched on storage at EverStamp, every file you record as a member is also uploaded, encrypted on the phone first, and owners and administrators can open it, as can an API key of the organisation; each opening through the dashboard or the API is logged with who and when. Technically EverStamp can open it too; we do that only at the organisation’s written request, or when a court or authority orders or demands it under the law. It is off unless an owner or administrator turns it on. If you record for an employer, ask them whether it is on.
No. We put no analytics, crash reporting, advertising or tracking in the app. On Android, Google’s ML Kit text recognition sends Google usage statistics of its own, never an image or the recognised text.
Only if you want it. News about EverStamp is in the dashboard under News. You get product news by email only once you switch it on under My account, and every email has an unsubscribe link. Emails about signing in, payment and your support questions always come; they are separate from that choice.
Your files are on your phone and you delete them there; we cannot do it for you. For what we hold ourselves, such as your account, write to privacy@everstamp.app, and you will have an answer within a month. If it concerns data we process for an organisation, such as a delivery or a kept file, we forward your request to that organisation, which answers it, and we let you know that we did. The entries in the public log are the one limit: they hold hashes and, per file, a device value that differs per file (in entries from before 29 September 2026 the fixed device identifier), and removing one would break the checkability of files other people already hold.
The timestamping service, SK ID Solutions in Estonia, receives a hash from our server and nothing from you. The drand relays see your IP address when the app fetches the public random value. Apple or Google receive a coordinate for the address suggestion and help establish that the device is genuine. The privacy statement lists every one of them.
EverStamp needs iOS 18 or newer on iPhone, and Android 12 or newer with a hardware-backed keystore on Android, because the signing key has to be created and attested in secure hardware. No setting can make a phone that falls short of that work.
Sealing needs a connection, once. Your photos are already signed on the phone; the file is sealed when the phone is back online. The file then shows how long that took, and the window around your photos is wider by that much.
Most often the location permission is off. The address and the position need it, and only while you are taking photos. Turn it on for EverStamp in your phone’s settings; without it the app carries on, but the photos carry no position.
Type the value yourself. Recognition only proposes a value, and what goes into the file is always what you confirm. A sharp photo, taken straight on and in good light, gives it more to work with.
The file was changed after it was sealed. That includes innocent changes: a PDF saved again in another program, or an archive converted or compressed by an email or chat app. Ask the sender for the original, as it came out of the app or through a share link.
The registry status page shows whether the registry and the timestamping service are working. Of the checks on a file, only the one against our registry depends on it.
A sign-in link works for 15 minutes, and only in the browser where you asked for it. If it has expired, or you open it in another browser, enter your email address again on the sign-in page for a new one. If the button in an invitation no longer works, sign in at dashboard.everstamp.app with the same email address; the invitation stays.
Use your backup app if you set one up. Otherwise an owner of your organisation can reset your second step under Settings, Security: your authenticator apps are removed, you are signed out everywhere and get an email, and then you set up a new app. If you are an owner yourself and have lost everything, or you are also a member of an organisation where that owner is not an owner, email support@everstamp.app: EverStamp resets it after checking who you are.
Write to security@everstamp.app. The security page explains how we handle reports and names the companies that run our servers.
One address for everything, and two for the subjects that need their own.
Do not send the photos themselves unless we ask for them. They are yours.