Pilot program · California companies with active deletion obligations
What you hand over
TS-2026-6e1dabe81c9a
What comes back
Checked at verify.tombstone.sh · no account required
What this is
You process a deletion request. Your systems do the work, the ticket closes, and the only record of it lives in logs you control.
Months or years later, a regulator, an auditor, or the data subject asks you to demonstrate it happened.
Tombstone is an independent notary for that job. As it runs, every step your system reports is signed and sealed in sequence — by a third party, not by you. You receive one certificate ID.
Hand over the ID. They verify it with us directly — no account, no access to your systems, and no cooperation required from you.
The evidence was sealed before the question was asked. That is what separates evidence from assertion.
The full record
Why it holds up
Four properties that make the evidence admissible
Tombstone stores hashes, event metadata, and signatures — not names, emails, or any raw subject data. Architected for guaranteed privacy.
The certificate is minted and signed in Tombstone's custody. Independent evidence for compliance.
Every event is signed and linked to the one before it. Any gap or alteration breaks the chain. Silent modification becomes detectable.
Regulators, auditors, or the data subject can verify any certificate at verify.tombstone.sh. Verifiable by all parties.
Pilot program — limited availability
We respond within one business day. No commitment required.