Audit-trail integrity
for NIS2 Article 21
TrustBeat is the only anchoring service designed from the ground up for NIS2 compliance. Bind log content, source identity, and time window to a single eIDAS-qualified proof — tamper-evident, independently verifiable, legally presumed accurate under EU law.
NIS2 Obligations
Which NIS2 articles does this cover?
Secure acquisition, development and maintenance of network and information systems
The challenge
Proving that security measures were applied at a specific point in time, not retrofitted.
TrustBeat solution
Anchor SHA-256 hashes of security scan results, configuration snapshots, and patch records to a qualified timestamp — immutable evidence of state at time T.
Use of multi-factor authentication and secure communications
The challenge
Demonstrating continuous application of security controls to a national regulator or CSIRT.
TrustBeat solution
Log anchoring creates tamper-evident audit trails: each log entry sealed with context metadata (source, tenant, time window) under a qualified timestamp.
Incident reporting obligations (24h initial, 72h detailed, 1 month final)
The challenge
Proving that incident records were created at the time of the incident, not reconstructed.
TrustBeat solution
Anchor incident report hashes immediately at creation. The qualified timestamp provides legally presumed proof of existence and integrity under eIDAS Art. 42.
Technical flow
How tamper-evident logging works
The combination hash binds log content to its context deterministically. Any tampering — including retroactive metadata edits — is detectable.
Compute the combined hash
Your application computes SHA-256 of the raw log hash bytes concatenated with RFC 8785 JCS-canonicalised metadata JSON (timestamp, source, severity, event type, tenant ID).
combined = SHA-256(log_hash_bytes || UTF-8(canonical_metadata))
Submit to TrustBeat
POST the combined hash to /v1/logs with metadata fields. TrustBeat queues it for the next 10-minute Merkle batch.
POST /v1/logs/anchor
{ "log_hash": "e3b0c4...", "source": "nginx", "severity": "CRITICAL" }Receive a qualified proof
After batching, you receive an inclusion proof linking your hash to a qualified eIDAS timestamp from an EU Trusted List QTSP. The proof is self-contained and independently verifiable.
GET /v1/logs/{id}/export
→ { "anchored_at": "2026-04-05T...", "token": "MIID..." }Submit to POST /v1/validate
For audit submissions, generate a QualifiedValidationReport — a signed document with eIDAS and NIS2 compliance fields, ready for regulators and CSIRTs.
POST /v1/validate
→ QualifiedValidationReport
{ "nis2_article": "21(2)(j)", "status": "VERIFIED" }Why TrustBeat for NIS2
Contextual integrity
Not just 'this data existed' — 'this data existed with this exact source, at this exact time, with this severity.'
RFC 8785 JCS metadata
Canonical JSON serialisation ensures deterministic hashing. Any reordering or whitespace change is detected.
30-year archive chain
Archive stamping runs automatically before each TSA certificate expires. Evidence remains valid for 30+ years.
Regulator-ready PDF
One-click Compliance Evidence Report with NIS2 Art. 21 framing, ready for CSIRT submission or internal audit.
Legal basis
eIDAS Regulation (EU) 910/2014 — Article 42
A qualified electronic timestamp carries the legal presumption of accuracy of the date and time it indicates and of the integrity of the data to which it relates. The presumption is reversed — your counterpart must prove the timestamp invalid.
NIS2 Directive (EU) 2022/2555 — Article 21
Essential and important entities must implement appropriate technical and organisational measures including secure acquisition and maintenance of network and information systems. TrustBeat provides the cryptographic evidence layer for demonstrating these measures were applied at a specific point in time.
Simple, flat pricing
One plan covers up to 50,000 log entries per month. No per-entry metering. Overage at €0.001 / entry.
- 14-day free trial — no credit card
- 50,000 log entries / month included
- Standalone or alongside Merkle Anchoring
- Cancel any time
Ready to anchor your first document?
Start free. No credit card required. Your first 100 hashes are on us.
eIDAS Regulation (EU) No 910/2014 · Art. 41 legal presumption · EU Trusted List QTSP