The Blockchain Framework

The Blockchain's framework is built in JavaScript/TypeScript, widely adopted programming languages among developers. The architecture is composed of three main components:

• Blockchain Node: Manages the network, consensus, and transactions.

• Controller: Coordinates on-chain modules and off-chain plugins.

• Application: Entry point for configuring and managing the ecosystem.

The Legal Validity of Blockchain in Italy and Europe

Verifica Blockchain holds full legal evidentiary value under both Italian and European law, in accordance with existing regulations on electronic documents, timestamps, digital signatures, and the recognition of trusted services. The key legal aspects are:

Timestamp and Document Integrity

• In the Italian context, the Digital Administration Code (CAD, Legislative Decree No. 82/2005) establishes the legal value of electronic documents, confirming their enforceability against third parties when they guarantee integrity and a verifiable timestamp.

• The notarization mechanisms offered by Verifica Blockchain meet these requirements, providing legally binding proof of the existence and immutability of registered documents.

eIDAS Compliance (Electronic Identification, Authentication and Trust Services)

• The eIDAS Regulation (No. 910/2014) of the European Union grants legal validity to digital trust services (electronic signatures, electronic seals, timestamps).

• The records made on Verifica Blockchain, due to their traceability and immutability, carry evidentiary valuerecognized across the entire EU.

Recognition of Digital Evidence in Court

• In Italy, under Articles 2702 and following of the Civil Code, the use of digital tools capable of certifying the origin and integrity of a document is fully valid.

• Verifica Blockchain’s technology, reinforced by legal provisions recognizing distributed ledgers introduced in Decree Law No. 135/2018 (converted into Law No. 12/2019), ensures the evidentiary effectiveness of the registered data.

• Compliance with AgID Guidelines for Accredited Digital Preservation Providers:

  The system adheres to guidelines designed to ensure the confidentiality, authenticity, immutability, integrity, and usability of digital documents.

European Privacy Regulations (GDPR)

• All Verifica services are developed to strictly comply with the General Data Protection Regulation (GDPR).

• Thanks to hybrid storage solutions and the ability to keep data on private servers, Verifica Blockchain supports the right to erasure and processing limitations required by law, while preserving the immutability of blockchain records.

Legal Value of Timestamps

• The eIDAS Regulation grants full legal validity to timestamps that meet specific standards of security and reliability.

• Through advanced cryptographic algorithms and verifiable consensus procedures, Verifica Blockchain generates timestamps that comply with these standards, providing a secure and legally recognized tool for dating and sealing documents.

The Verifica Blockchain utilizes an optimized Proof of Stake (PoS) consensus algorithm, designed to ensure:

Deterministic validator selection based on a permissioned set of nodes operated by vetted and identifiable entities (e.g. conformity assessment bodies, institutional stakeholders). This ensures Byzantine Fault Tolerance while maintaining full governance accountability.

• High energy efficiency, as the consensus does not rely on computationally intensive mining operations. The network consumes minimal resources and is environmentally sustainable by design, aligning with ESG compliance criteria.

• Scalable throughput and low-latency finality, achieved via a modular consensus layer that supports fast block propagation and validator coordination. The system is capable of sustaining high transaction volumes with consistent performance and fault isolation.

• Tamper-evident, audit-friendly validation process, enabling provable traceability of validator actions and consensus outcomes. Every block validation can be independently verified against protocol rules, ensuring compliance-grade transparency.

Security & Integrity by Design

• Immutability Guaranteed by Cryptographic Hashes

  Each block is linked to the previous one using SHA-256 cryptographic hashes, making any tampering structurally detectable. This feature provides technical proof of integrity that is legally enforceable under the Italian Digital Administration Code (CAD) and the eIDAS Regulation.

• Modular Governance and Configurable Consensus Thresholds

  Organizations can define their own consensus policies, involving authorized storage nodes (internal or from trusted partners) and setting quorum rules aligned with their internal security and audit requirements.

• Full Auditability and Verifiable Logging

  Every recorded transaction is inspectable by authorized nodes, with non-modifiable metadata that ensures forensic reconstruction of information flows—supporting ISO 27001 audits, GDPR compliance, and industrial traceability.

• Cryptography Compliant with European Regulations

  All hashing and signing mechanisms use algorithms recognized by ENISA and meet the standards required by qualified trust service providers (QTSPs) under eIDAS.

Verifica is a decentralized and distributed solution that can be deployed within any organization, enabling companies to certify data with full legal validity—without relying on external providers or joining blockchain consortia.

This architecture solves the problem of data governance and ensures legal compliance, allowing businesses to manage notarization independently and securely, with full control over their own storage infrastructure.

Through tailored solutions, companies can purchase a use license for our protocol, enabling extensive use of the platform.

This license allows organizations to notarize and certify every single business process without being subject to per-transaction costs as in the public app.

In this configuration, companies can implement large-scale blockchain integration to certify products, documents, employee training records, and corporate AI datasets.

Secure and Customizable Data Storage: Verifica’s DAM

Verifica Blockchain allows full flexibility in data storage choices, enabling companies to store content either on Verifica-managed servers or on private, internal infrastructures, ensuring full compliance with GDPR, eIDAS, and the latest EDPB guidelines (Guidelines 02/2025).

Why Not IPFS: GDPR Compliance Issues

Public blockchains often use IPFS for data storage. However, this approach raises serious concerns under the General Data Protection Regulation, as IPFS inherently replicates and distributes data immutably across the network, making it extremely difficult—if not impossible—to guarantee the right to erasure or limit processing, as required by Articles 17 and 18 of the GDPR.

According to EDPB Guidelines 02/2025, decentralized infrastructures that do not allow effective deletion or modification of personal data may violate fundamental GDPR principles, particularly those related to data minimization, purpose limitation, and user control.

Verifica’s Approach: Private, Controlled Storage

Verifica solves this problem by allowing users to store files on their own servers or trusted environments, ensuring legal data sovereignty and full alignment with GDPR obligations. Companies remain in full control of the lifecycle of their sensitive data—while still benefiting from blockchain-based notarization.

For users leveraging Verifica’s infrastructure, a fully integrated Digital Asset Manager (DAM) is available, offering:

• End-to-End Encryption: All uploaded content is encrypted before storage.

• Deletion on Demand: Data can be effectively deleted upon request, meeting GDPR requirements for the right to be forgotten.

• Custom Storage Options: Even in the public-facing app, users can specify where files are stored—using Verifica either as a pure certification layer or as a secure storage service.

• On-Premises Deployment: Through a standard procedure, both individuals and enterprises can store notarized content on their own infrastructure.

Advanced Security and Fragmentation Logic

Files stored on Verifica’s platform are never kept in plaintext. Instead:

Data is split using a deterministic fragmentation mechanism.

• Each fragment is then individually encrypted and distributed across secure nodes.

• No single node holds a complete or decipherable version of the file, preventing unauthorized access and ensuring robust protection of sensitive content.

This approach is fully aligned with the EDPB’s emphasis on privacy-preserving blockchain design and guarantees:

• Confidentiality and Integrity

• Data minimization

• Controlled accessibility

• Compliance with EU cybersecurity and data protection laws

With this architecture, Verifica offers a flexible and compliant ecosystem not only for the generation of Digital Product Passports (DPPs) but for any scenario requiring legal-grade notarization and certification, combining the immutability of blockchain with responsible and sovereign data handling.

The Public Blockchain Paradox

Public blockchains introduced the concept of decentralization, but in practice, many of these networks rely on highly centralized infrastructure and a handful of dominant operators. This concentration undermines the ideal of truly distributed computational power and trust.

Semantic vs. Actual Decentralization

Being decentralized does not require being public. A blockchain can be private, permissioned, and still distributed, ensuring redundancy and fault tolerance without exposing sensitive data to untrusted actors.

You don’t need anonymous validators or speculative tokens scattered around the globe to achieve blockchain-grade immutability and resilience.

Breaking the Myth: Cryptocurrencies Are Not a Requirement

Enterprises cannot—and should not—be forced to acquire cryptocurrencies just to record data. This introduces accounting, compliance, and reputational risks.

Verifica removes that burden entirely by offering stable-cost transactions with no link to volatile or speculative token economies.

Legal Validity and Alignment with Corporate Compliance

Organizations require solutions that align with GDPR, eIDAS, ISO 27001, and internal governance policies.

A private blockchain like Verifica enables:

• Auditable operations

• Role-based access

• Certified external reviews

• Controlled data residency

• and full alignment with the latest EDPB Guidelines 02/2025

This is essential for sectors where legal risk, data sensitivity, and accountability are non-negotiable.

The Hidden Fragility of Public Networks

Numerous independent studies show that most public blockchain tokens are held by a small number of addresses.

Moreover, many validator nodes are hosted on centralized cloud providers. A disruption in those services (e.g., AWS or Google Cloud) could cripple the entire network, proving that “decentralization” is often theoretical.

Verifica’s Approach: Private, Distributed, and Enterprise-Ready

Verifica proves that decentralization is a matter of governance structure, not ideology. Our blockchain is:

• Distributed: Nodes can be deployed across multiple geographic and technical environments.

• Decentralized: Control is shared across selected, accountable partners.

• Private and Secure: No anonymous actors, no uncontrolled consensus, no exposure of sensitive data.

Companies can choose:

• Where to host nodes (on-premise or across multiple providers)

• Who can validate what

• What gets written on-chain

• and how redundancy and security policies are enforced.

It’s a Semantic and Cultural Misunderstanding, Not a Technical One

Some assume that a “private” authority can manipulate the chain at will. This is technically false.

• Every block is cryptographically hashed.

• Altering historical data would require regenerating the entire chain from the tampered block onward.

• In Verifica, as in any properly implemented blockchain, rewriting history is technically infeasible without invalidating the entire ledger.

Same Cryptographic Strength as Public Networks

Verifica uses the same cryptographic standards as public chains—SHA-256, digital signatures, public key infrastructure (PKI)—ensuring the same level of security.

The difference is not in how data is protected, but in who governs the system and why.

External Compliance, Notarization and Business Continuity

Verifica enables:

• Source code deposit at notaries

• Escrow clauses in contracts

• Business continuity plans if the original provider ceases operations

These governance mechanisms, essential for corporate trust, are not replicable in anonymous public networks.

No Tokens, No Volatility, No Regulatory Burden

Without cryptocurrencies, Verifica ensures:

• Stable, predictable costs

• No exposure to speculative markets

• No need for AML/KYC procedures

• No classification as a crypto-asset operator

Your company doesn’t become a crypto buyer, and avoids reputational and legal risks associated with token ecosystems.

GDPR and eIDAS Compliance by Design

Verifica’s private blockchain enables companies to:

• Choose where sensitive data is stored (including on internal servers)

• Control what is written on-chain

• Avoid immutable public exposure of personal data

This fully aligns with the GDPR’s right to erasure, purpose limitation, and EDPB 02/2025 guidelines on blockchain.

Flexible and Scalable Architecture

A company can start with a minimal node configuration, hosted internally or with a single provider, and later expand to a fully distributed model across:

• Different regions

• Third-party partners

• Multi-cloud environments

This progressive deployment model is ideal for SMEs that need legal-grade blockchain infrastructure without the burden of massive upfront investment.