Answers about the app, making and sharing a file, checking a file someone sent you, plans and billing, business use, and your data. Search, or pick a topic below.
95 questions in 8 topics
An iPhone on iOS 18 or newer, and Android 12 or newer on a phone with a hardware-backed keystore, which is standard on phones from roughly 2020 onwards. The signing key has to be created in secure hardware: the Secure Enclave on iPhone, the keystore on Android, and StrongBox where the phone has it.
For the iPhone, EverStamp is on the App Store. For Android, it is on Google Play. Whoever receives a file does not need the app: the verification page works in the browser, with four samples to try.
Not to start. You install the app and start capturing, without an account or a password. If you work for a company on Business, you link your phone with a linking code that company gives you, again without an account. Only people who use the dashboard sign in. Whoever receives your file never needs an account.
Nothing. Basic has no subscription, and your first file is free, sealed the same way as on Plus, with the report, the full archive and everything a recipient needs to check it. After that you buy files when you need them.
Your captures stay on the phone, so allow for them. A file of twelve photos at 12 megapixels is around 38 MB. A ten-minute video takes about 600 MB.
No, with one exception: the first capture on your phone needs a connection, and after that the app works without one. Every capture gets the device’s signature on the phone straight away, also without a connection. With a connection, the signing service’s signature follows by itself. A connection is also needed once, to seal the file and record it in the registry, and that can happen later: tap Close and stamp without a connection and the file waits, then carries on by itself.
For whoever receives the file, the captures, the report, the verification page and the checks are the same. There are two differences: who vouches for the key inside the phone, Apple on iPhone and Google on Android, and where the counter comes from: on iPhone from App Attest, on Android kept by the app.
Yes, under Settings, Help, User guide, and it works without a connection too. Help and support, the line below it, opens this support page.
The captures of one moment, kept together: a move-in, a handover, a stage of a job. A checklist says which steps are still open. When you close the file it is sealed with a qualified timestamp, and you get a PDF report and an archive with every photo at full resolution.
By default the date, the time to the second, the address and your company name, drawn into the image itself, so they are on a printout, a screenshot and a photocopy too. Which lines it shows, you choose yourself in the app under Settings, On your captures, Stamp bar; if your organisation sets the bar, that one applies, and after unlinking your own choice again. The time on the bar comes from the phone’s clock, and the file marks it as a stated value. The time that counts is the timestamp, which the file carries next to it.
The time on the bar, yes: it comes from your phone’s clock, and the file marks it as a stated value. The timestamp, no. The timestamping service stamps with its own audited clock, and the protocol has no field in which the app could ask for a different time. That is why the stamp on a file made today can never carry yesterday’s date.
A checklist is a list of steps, each with a minimum number of photos, so the file says what is still missing. A step can also ask for things a photo cannot show: a licence plate, a meter reading, a serial number, a date or a choice from a list. Those values travel inside the capture, under the same signature as the photo.
Correct it before you confirm. Text recognition runs on the phone and only proposes a value; what goes into the file is the value you confirm.
When the moment is over. One file per moment works best: the check-in on the day you move in, the check-out on the day you leave, each with its own timestamp. The window between the time anchor and the timestamp is at least as wide as the file stayed open, as it starts at the last anchor: shoot for twenty minutes and it is twenty minutes, leave it open for a week and it is a week. That number is printed in the file.
No. The app only records with its own camera, so every photo in a file sits in the signed series. The photo library is used only to pick your company logo in Settings.
While the file is open you can strike it through, and the image goes. The fact that something was struck through stays visible, with your reason next to it. A file that shows its own corrections is worth more than one where something quietly disappeared, and removing it without a trace would break every other check.
It uses it for the address on the stamp bar and the position inside the file, and only while the app is open and you are capturing. There is no background location. If you refuse the permission, the app carries on and your captures carry no position.
On Plus, Business and Enterprise, yes, in a checklist with a signature step. Of the built-in checklists, Key handover asks for it, and Vehicle handout, Vehicle intake, Completion, Extra work and Equipment rental offer it. On Business and Enterprise an owner or administrator can also switch on ‘The customer signs at the end’ in a checklist of their own. The customer then signs on the phone, and the signature goes inside the file rather than on a separate form.
Yes, with sound, up to 10 minutes per video. Plus gives you 5 videos and 10 minutes in total each month to try, and Plus Video 25 videos and 60 minutes in total. On Business an owner switches on the video module; during the trial you try video at no cost, with at most 15 videos and 30 minutes for the whole organisation together. Basic has no video. The stamp bar is in every frame, and when you close it every video gets a timestamp of its own. A video is not inside the report or the archive: it sits next to them as a file of its own, and the verification page checks it separately.
Once the app knows your video for the month is used up, it records no more video. If the registry refuses the timestamp of a video you already recorded, that video stays on your phone. If you take Plus or Plus Video within an hour of the recording, or your organisation switches on the video module in that hour, you can have it stamped after all, once, with Stamp after all; the window between the time anchor and the timestamp of that video is then wider. Otherwise you save it outside the file or strike it in the file. Nothing is lost silently.
Yes. Under Settings, Templates and checklists you drag a checklist up or down and switch it on or off; Freeform file always stays. New file then shows one list in your order, and Restore the default order brings the default back. If your phone belongs to an organisation, it sets the order; after unlinking your own choice applies again.
You keep files together in a project of your own, for example per address or per customer. You make a project under New file or inside a file, at the line Project; you manage them in the list of files. Projects are not part of the file: they are not in the report or the archive, and the app does not send them anywhere. If your phone belongs to an organisation, your own projects are hidden until you unlink.
With the button on a sealed file. It starts a new file with the same name and address, and usually the same checklist: there it is called Follow-up file. After a Completion it is called Record the final inspection, and after a vehicle handout Record the intake, with the checklist that goes with it. The first capture points at the fingerprint of the previous file, so the visits form a chain; each visit is closed and stamped on its own day.
A stamped file you can archive: it leaves your list and stays on your phone, and Bring back to the list brings it back. You can delete any file, a stamped one too: the captures and the stamp are then gone from your phone for good. An archive or report you already shared stays checkable like any file.
Open the verification page at everstamp.app/verify and drag the archive, the PDF report or a single photo onto it; you drag a video in along with the archive or the report. The file stays in your browser and does not come to us. Only if the file carries a registry receipt that the page cannot check itself, as with a file from before version 1.1, does the question whether our registry knows the entry go to us; a newer file usually carries the registry’s signature itself, once the registry receipt is in it. The page shows when the file was sealed, by which service, what is inside it, and where that stops.
No. A browser is enough, on any device. Only the person who captures needs the app.
For the PDF report: whether the timestamp is genuine and covers exactly this document, whether the service that set it is on the European trust list and was at the time, and whether anything was added after the timestamp. For the archive from the app also the inside: every photo against its signature and its hash, the sequence, the seal over every image and their order, the device signature under every photo, and the lower edge of the time window. Which checks appear depends on the file; a light file, or one without a checklist, shows fewer. The verdict only turns green when the file carries a registry receipt that the page can verify; a file from before version 1.1 needs the answer of our registry instead.
Almost entirely, and that last bit counts. Every check except the one against our registry runs on public tooling: Adobe Reader shows the signature on the PDF by itself, and by hand it is openssl ts -verify with OpenSSL 3 (the openssl on a Mac is LibreSSL and cannot do this), with the open tooling for Content Credentials for the photos. The section “What you can verify yourself” on the verification page shows how. If we stopped tomorrow, those sums would carry on working. The confirmation from the registry tells a file EverStamp registered apart from something made elsewhere with a real timestamp wrapped around it, and without it the verdict is never green. From version 1.1 of the app it sits in the file as the registry’s signature, once the registry receipt is in it; for an older file the page asks our registry.
Because that is what can be established. The lower edge is a public random value nobody could know in advance, carried into the file; the upper edge is the qualified timestamp. EverStamp did not sign the capture before the anchor, and the image existed before the timestamp. That the photo itself was taken in between holds with our app on a device that is not jailbroken or rooted. The phone’s clock is shown too, as a stated value, and the width of the window is in the file as a number.
The page could not complete that check, and it says so instead of quietly passing it. If our registry cannot be reached for a file from before version 1.1, for example, the check against it stays open, and the page says so. Try again later, and look at the registry status page if it persists.
Not necessarily. Something was added to the PDF after it was timestamped, and the page reports it as an addition, with the first stamp date alongside, rather than hiding it. One of the samples on the page shows what that looks like. What the addition means is a question for the sender.
What the capture shows: a photo of a screen is still a photo. The exact moment of capture, only the window between the time anchor and the timestamp. Whether the device was jailbroken or rooted: a hacked phone can sometimes pass the check by Apple or Google. That the person behind the camera recorded everything, because they chose what went into the frame. And how anyone will weigh it: that is for whoever assesses the file.
In the EU, eIDAS Article 41 presumes the date and time of the stamp, and the integrity of the data bound to them, to be accurate. That is a European rule; outside the European Union it depends on the law of the country. What the captures show, and what they are worth in a dispute, is for the court or the other party to weigh.
Yes. The verification page has four samples ready. They are stamped PDFs, not files from the app: one with an ordinary stamp, one added to afterwards, one with a forged date and one stamped by an unknown service, so you can see how a check of a stamp works and what a failed one looks like.
Basic has no subscription: your first file is free, and after that you buy files when you need them, one for €7.99 or three for €19.99. Plus is €12.99 a month or €129.99 a year, including VAT, with 10 files a month, a customer signature in the checklists that have a step for it, your logo, a backup to your own cloud and longer share links. Plus Video is Plus with more video, at €19.99 a month or €199.99 a year. Business adds the dashboard, requests and your own checklists. Business Start costs €99 a month, excluding VAT. For that you get a set number of files every month, with video. You try it free for 14 days first. API keys and webhooks come with Business by quote and with Enterprise. Enterprise is by quote, with a contract of your own and agreements on availability. A qualified timestamp per photo comes with Enterprise, by agreement. The seal and the checks are the same in every plan.
Buy more in the app: one for €7.99 or three for €19.99, on Basic and on Plus, and on Plus also five for €7.49. Files you buy do not expire, not even after your subscription ends. On Basic they are used after your free file; on Plus the 10 from your subscription go first each month, then the ones you bought.
In the app, through the App Store or Google Play: €12.99 a month, or €129.99 a year, which comes to €10.83 a month. You buy single files there too. Apple or Google handle the payment, so we never see your payment details.
Plus is a subscription with Apple or Google, so you cancel it where you manage your subscriptions: in the App Store settings on your iPhone, or in Google Play on Android. The files you made stay on your phone, and the seal on them does not depend on your subscription.
Apple or Google handle the payment for Plus, so a refund request goes to them, under their rules. In the app you find the way under Settings, under EverStamp, Withdraw a purchase. If the owner cancels a yearly Business subscription early, we credit the part that belongs to the remaining whole months. For anything else on Business and Enterprise, write to support@everstamp.app.
Business Start costs €99 a month, excluding VAT. For that you get a set number of files every month, with video. Above that you pay per extra file, afterwards. Paying yearly costs 15 per cent less. More volume or a contract of your own goes by quote. You can try Business free for 14 days from the pricing page, without payment details. After that you pay in the dashboard through Mollie: the first time by iDEAL or credit card, then automatically through your mandate, in advance per month or per year. Only an owner can pay or cancel; owners and administrators see the payments and invoices.
Yes, for 14 days and 20 files, free and without payment details. Create your account and organisation from the pricing page. During the trial you invite your people, link their phones with a linking code and send orders with your own checklists. You can also send requests to customers, at most 20 open at a time; the dashboard emails a request only after the first payment, and until then you send the link yourself. A Business share link works for at most 30 days in the trial. The trial ends after 14 days or 20 files, whichever comes first. You then have thirty days to subscribe to Business Start or accept a quote, and everything stays; until you pay, you cannot link new phones or send new orders. Phones already linked keep recording until the end of those thirty days. If you subscribe to nothing, the agreement ends and we delete your organisation’s data after those thirty days; export what you want to keep in that time. A copy you already gave to someone, the archive or the PDF report, stays verifiable on the verification page, because its entry in the public log stays. A share link no longer works by then.
The work carries on. The limit is a soft cap, and we settle the files above it afterwards: on Start at the price per extra file the dashboard shows, with a quote at the price in the quote. At 80 and at 100 per cent you get a notice. We do not refuse a file because a counter is full, and there is nothing to buy in advance.
An answered request counts as one file. Sending a request costs nothing.
Nothing extra: it comes with Business and Enterprise. It is off until an owner or administrator switches it on, and from then on every file is kept with us, encrypted. Files stay for as long as the subscription runs, unless you set a shorter term yourself; when the subscription ends you have thirty days to collect everything. Kept videos count towards the storage of the video module.
You can try Business free for 14 days, with 20 files: create your account and organisation from the pricing page, without payment details. If you want to talk first, or for Enterprise, request a quote with the number of people and the files you expect a month, or write to info@everstamp.app. For Enterprise the quote also covers the volume, the retention term and the connection to your systems.
An owner cancels in the dashboard, under Settings, Subscription, or by email to info@everstamp.app. The subscription then runs until the end of the current calendar month. On a yearly subscription we credit the part that belongs to the remaining whole months; if more files were used than the plan gave pro rata, we charge those as extra files.
Every payment gets an invoice, already marked as paid. The owners receive it as a PDF by email, and owners and administrators download it in the dashboard under Settings, Subscription. Under Settings, Company an owner can set a mailbox for invoices, such as your accounts department’s, your own reference such as a PO number, and a separate billing address.
The owners get an email and we try the direct debit again after three days; you can also pay right away in the dashboard. If the payment is still missing 14 days after the due date, requests and Business share links close until it is in. Files, the registry and the verification page keep working.
At dashboard.everstamp.app, or through Log in at the top of this site. There is no password: you enter your email address and get a sign-in link that works for 15 minutes, in the browser where you asked for it. You can also sign in with Google or Microsoft. If your organisation requires two-step verification, the dashboard then asks for a code from your authenticator app. The dashboard is part of Business and Enterprise.
A session ends after 8 hours without activity and after 7 days at most. Under Settings, Security, My sessions you see where you are still signed in and end a session, for example on a laptop you lost. An owner can sign a member out everywhere; that applies to the whole account, also at other organisations. A browser that is already open can carry on for at most fifteen minutes after that.
Yes. The dashboard then asks for a code from an authenticator app on top of the sign-in link. Under Settings, Security an owner chooses for whom it is required: nobody, owners and administrators, or everyone. A new organisation starts with required for owners and administrators; an organisation that existed before that became the default keeps what it had. The requirement holds in the database itself: whoever needs it and enters no code sees no data of the organisation. The app on the phone does not notice any of it.
You set up an order with an address, a template and a person. It appears on that person’s phone under “Prepared for you”, and in the dashboard you watch it move from prepared to picked up to registered.
An owner or administrator makes a linking code under People and phones for the person who uses the phone. The code works for one phone and expires on the date the dashboard shows. Type it in the app under Settings, Link an organisation. From then on every file from that phone registers under your organisation. A phone belongs to one organisation at a time.
An owner can do everything, including choosing, paying for and cancelling the subscription. An administrator manages people, phones, checklists and orders, opens deliveries and kept files, and can capture as well. A field worker captures with the app and sees the organisation’s list of files. A reader sees that list too and changes nothing. An organisation always keeps at least one active owner.
When someone leaves, deactivate them under People and phones: their phones are unlinked and open linking codes cancelled. If a phone is stolen or misused, block it: a blocked phone no longer gets into the registry, so no captures, no new code and no share links. The files already registered stay in your list.
Send a request: a link or a QR code with your checklist. You send the link yourself, or have the dashboard email it; it works for as long as you choose, 30 days at most. The customer sees who is asking and what for, and captures without an account, in the EverStamp app, which they install first if they do not have it yet. What comes back carries the same device signature, seal and registry entry as a file from your own staff. Requests come with Business and Enterprise, in the trial too; the dashboard emails the link only after the first payment.
Yes. In the dashboard you set up templates with your own steps, fields and required photos, and everyone in the team gets the same one. Templates are versioned, and each file records which version was used.
Yes. On Business and Enterprise an owner or administrator sets the bar for the whole organisation, in the dashboard under Settings, Stamp bar. There you choose which lines it shows: the address, the coordinates, the name of the file, the project, the checklist step, who captured, the organisation and a note. You also choose whether the bar sits at the bottom or the top, whether it is dark or light, and how large it is. The time from the device clock is always on it. An order can have a bar of its own. If your phone does not belong to an organisation, you choose the bar yourself in the app, under Settings, On your captures, Stamp bar. What is fixed lives in the file and the registry, and does not change with the bar.
Yes, in two ways. You link the contractor’s phone with a linking code: the contractor then works in their own app against your orders and checklists, every file lands in your dashboard and the contractor is a member of your organisation. Or you send a request, which needs no link and no account. A phone belongs to one organisation at a time: if the contractor’s phone is already linked to another organisation, that link has to be undone first.
By default it shows the registry: fingerprints, sequence numbers, seals and registry receipts. It opens photos in two cases: a delivery answering one of your requests, and files kept at EverStamp once an owner or administrator has switched that on. Only owners and administrators open them, and an API key of your organisation; field workers and readers cannot. Every opening through the dashboard or the API is written to your audit log, with who and when; if that fails, the dashboard opens nothing. In addition, whoever has a project link that an owner or administrator made opens the kept or delivered files in that link. Such an opening gets no line of its own in the audit log; the dashboard counts it with the link. Technically EverStamp can open them too, because we manage the key; we do that only at your organisation’s written request, or when a court or authority orders or demands it under the law.
A link at everstamp.app/p/ that shares a whole project. On Business an owner or administrator makes it, for at most 90 days, and can revoke it at any time. Whoever has the link opens the kept or delivered files in it in the browser, without an account and one at a time. Making and revoking it go into your audit log. An opening through the link gets no line of its own there; the dashboard counts the openings per link.
Yes. Plates and meter readings are searchable across every file your team recorded.
Yes, through the API and webhooks, with Business by quote and Enterprise: a webhook tells you that an archive is ready at EverStamp, and your own system fetches it through the API.
An owner or administrator downloads a zip with all data of the organisation under Settings, Export everything, as JSON and CSV. The photos of files kept at EverStamp are saved by your browser under Settings, Export archives, each file as its original archive, into a folder on your computer. Photos that are only on a phone or in an ordinary share link cannot be exported by EverStamp.
In the dashboard under Help. If your answer is not there, ask your question at the bottom of that page. You get a confirmation with a number, and the answer by email and under My questions. Without the dashboard, write to support@everstamp.app, or use the contact form.
Not on the ordinary route: they stay on your phone. There are three exceptions: a share link, which we cannot open; a delivery answering a company’s request; and every file, if your organisation switched on storage at EverStamp. In the last two we hold the key for that company, and with a project link the registry hands it to whoever has that link; technically we can therefore open them too, and we do that only at that company’s written request, or when a court or authority orders or demands it under the law.
A fingerprint: numbers computed from your photos that cannot be turned back into an image, with an identifier of your device and the attestation from Apple or Google. If your phone is linked to an organisation, or you answer an organisation’s request, the registry also keeps the name of the file, the checklist and the field values, for that organisation.
No. On the ordinary route your captures never reached us, so there is nothing to send back; our entry in the log only confirms that a file existed. That is why Plus has a backup to your own cloud. Files you delivered in answer to a company’s request, and files made while your organisation had storage at EverStamp switched on, sit with us for that company, and it can open them.
The signing key cannot leave your old phone, so the new one gets a key of its own. The files you already sealed stay checkable, because checking never depended on the phone. The files themselves live on the old phone, so take them with you: keep the archives, or use the backup to your own cloud on Plus. Restore purchases brings back a running subscription; if Plus on Android has ended, support moves your credit.
If your phone is linked to an organisation, its dashboard shows, for every file you register from then on, the name, the checklist and the field values, who made it and when; not the captures. Files made before the link stay your own. If your organisation switched on storage at EverStamp, every file you record as a member is also uploaded, encrypted on the phone first, and owners and administrators can open it, as can an API key of the organisation; each opening through the dashboard or the API is logged with who and when. Technically EverStamp can open it too; we do that only at the organisation’s written request, or when a court or authority orders or demands it under the law. It is off unless an owner or administrator turns it on. If you record for an employer, ask them whether it is on. An owner or administrator can also share kept files through a project link, and whoever has that link sees them while the link works.
No. We put no crash reporting, advertising or tracking in the app, and no analytics beyond the count of the first start and the advice: without an identifier of your device or account, and only if you answer at least one question. Apple and Google do give us crash data if your phone shares it, and always if you test a beta version through TestFlight. On Android the app recognises text, such as a licence plate or a meter reading, with Google’s ML Kit text recognition, on your phone; it sends no usage statistics about that to Google. See the privacy statement.
Only if you want it. News about EverStamp is in the dashboard under News. You get product news by email only once you switch it on under My account, and every email has an unsubscribe link. Emails about signing in, payment and your support questions always come; they are separate from that choice.
Your files are on your phone and you delete them there; we cannot do it for you. You can have what our registry keeps about your free file and your bought files deleted in the app, under Settings, Subscription, What our registry keeps. For anything else we hold ourselves, such as your account, write to privacy@everstamp.app, and you will have an answer within a month. If it concerns data we process for an organisation, such as a delivery or a kept file, we forward your request to that organisation, which answers it, and we let you know that we did. The entries in the public log are the one limit: they hold hashes, with per file a device value that differs per file (in entries from before 29 September 2026 the fixed device identifier). We do not erase them. The public log is divided into periods, and each closed period has its own timestamp. An erased entry would therefore show: for anyone who keeps a copy of the log, the period would no longer match its timestamp. A file from that period that still has to fetch its registry receipt would then no longer get a valid one. If the file of the erased entry is an older file without the registry’s signature, it would get “unknown” when checked.
The timestamping service, SK ID Solutions in Estonia, receives a hash from our server and nothing from you. Our registry fetches the public random value from drand, and your phone asks our registry for it, so drand does not see your phone; a version of the app from before 1.1 still fetches it from drand directly, so update the app. Apple or Google receive a coordinate for the address suggestion and help establish that the device is genuine. The privacy statement lists every one of them.
EverStamp needs iOS 18 or newer on iPhone, and Android 12 or newer with a hardware-backed keystore on Android, because the signing key has to be created and attested in secure hardware. No setting can make a phone that falls short of that work.
Sealing needs a connection, once. Your captures already carry your phone’s signature; the file is sealed when the phone is back online. The file then shows how long that took, and the window between the time anchor and the timestamp is wider by that much.
Most often the location permission is off. The address and the position need it, and only while you are capturing. Turn it on for EverStamp in your phone’s settings; without it the app carries on, but the captures carry no position. If the permission is on, check whether the address is still on your bar, under Settings, On your captures, Stamp bar; if your organisation sets the bar, it chooses.
If, by our last measurement, your phone’s clock is more than ten minutes fast or slow, the app tells you while you record. You can carry on: the time on the bar is a stated value, and the time that counts comes from the timestamp. Set your phone’s date and time to automatic and the bar is right again.
If your phone itself reports that its location is being simulated, the app leaves out the position, and the capture and the report say: the device reported a simulated location; the app left out the position. Everything else carries on. Turn the simulation off to include a position again.
No. Every file with captures that is not yet sealed has Export the captures (unstamped): the captures as they are and the journal, without a stamp, not verifiable on everstamp.app, but not lost with the phone either. If a file can no longer be stamped, for example because the key that signed it is gone from your phone, the app says so at the file, and you export the captures or delete the file.
Type the value yourself. Recognition only proposes a value, and what goes into the file is always what you confirm. A sharp photo, taken straight on and in good light, gives it more to work with.
The file was changed after it was sealed. That includes innocent changes: a PDF saved again in another program, or an archive converted or compressed by an email or chat app. Ask the sender for the original, as it came out of the app or through a share link.
The registry status page shows whether the registry and the timestamping service are working. Of the checks, only the question to our registry depends on it, and the page asks it only for a file from before version 1.1: such a file does not turn green without an answer. A newer file that already has the registry receipt in it carries the registry’s signature and turns green all the same.
A sign-in link works for 15 minutes, and only in the browser where you asked for it. If it has expired, or you open it in another browser, enter your email address again on the sign-in page for a new one. If the button in an invitation no longer works, sign in at dashboard.everstamp.app with the same email address; the invitation stays.
Use your backup app if you set one up. Otherwise an owner of your organisation can reset your second step under Settings, Security: your authenticator apps are removed, you are signed out everywhere and get an email, and then you set up a new app. If you are an owner yourself and have lost everything, or you are also a member of an organisation where that owner is not an owner, email support@everstamp.app: EverStamp resets it after checking who you are.
Write to security@everstamp.app. The security page explains how we handle reports and names the companies that run our servers.
One address for your questions, one for everything else, and two for the subjects that need their own.
Do not send the photos themselves unless we ask for them. They are yours.