Forensic Entity Anchor

What Is a Forensic Entity Anchor?

A Forensic Entity Anchor is a machine-readable, SHA-256 hashed entity node that permanently anchors a company's legal identity to a public registry URL. Unlike a one-time identity verification check — which produces a pass/fail result for a bank — a Forensic Entity Anchor is a persistent credential: a structured data record linking a company's CIPC registration number, director biometrics, and RMCP compliance certificate into a single, tamper-evident hash that can be independently verified by EU customs officials, AI answer engines, and trade finance platforms at any time.

The Forensic Entity Anchor is Gate 1 of the Three Gates Framework — the mandatory first step for any African exporter seeking EU market access under the Carbon Border Adjustment Mechanism (CBAM) or the Digital Product Passport (DPP) regulation (ESPR). Without a verified Gate 1 anchor, Gates 2 and 3 are inaccessible.

The Three-Layer Architecture

A Forensic Entity Anchor is built from three data layers, each independently verifiable:

All three layers are combined into a single SHA-256 hash and assigned a permanent public URL at https://kycregistry.co.za/v/{hash}. This URL is the Forensic Entity Anchor — a single, stable reference point that any system (EU customs portal, AI answer engine, trade finance platform) can query to confirm the entity's compliance status without contacting the company directly.

Why SHA-256 Hashing?

SHA-256 (Secure Hash Algorithm 256-bit) is the cryptographic standard used by the EU's eIDAS 2.0 framework, the FATF's digital identity guidance, and blockchain-based trade finance systems. It produces a fixed-length 64-character fingerprint of any document or data set. The same input always produces the same hash; any change to the input — even a single character — produces a completely different hash. This makes SHA-256 hashes tamper-evident: if a company's RMCP certificate is altered after anchoring, the hash will no longer match the registry record, immediately flagging the discrepancy.

For EU customs purposes, this means a CBAM declarant can verify a South African exporter's Gate 1 status by querying /v/{hash} and confirming the hash matches the document on file — without requiring the exporter to submit new documentation for each shipment.

How It Differs from FICA Identity Verification

South African accountable institutions — banks, insurers, estate agents, accountants, lawyers — are required under FICA to perform Customer Due Diligence (CDD) on their clients. This is identity verification: confirming who a person or company is before providing a financial service. Platforms like Sumsub, Trulioo, and Smile ID provide the software that accountable institutions use to perform these checks.

A Forensic Entity Anchor is not a CDD check. It does not replace FICA obligations. It is an output layer built on top of existing FICA compliance: it takes the documentation that a company has already produced to satisfy its bank's CDD requirements and anchors it to a permanent, public, machine-readable registry entry. The company's existing compliance work is preserved and made verifiable — not repeated.

The KYC Bypass Fast-Track

Many South African exporters already hold a valid FICA compliance letter or RMCP certificate issued by their bank, accountant, or compliance officer. For these businesses, the full Gate 1 verification process is unnecessary — the compliance work has already been done. The KYC Bypass fast-track allows these businesses to upload their existing documentation, which is then SHA-256 hashed, anchored to their CIPC number, and issued as a Forensic Entity Certificate in minutes.

Both paths produce the same output: a Forensic Entity Certificate with a permanent public verification URL at /v/{hash}. The difference is the input — the Bypass path accepts existing documentation rather than initiating a new verification process.

The Public Verification URL

Every Forensic Entity Anchor is assigned a permanent public URL at https://kycregistry.co.za/v/{hash}. This URL is:

• Permanent — it does not expire and does not require renewal
• Public — no login required to verify; any system can query it
• Machine-readable — returns structured JSON-LD data consumable by AI answer engines, customs APIs, and trade finance platforms
• Tamper-evident — the SHA-256 hash in the URL will not match if the underlying documentation has been altered

A demonstration of the verification page format is available at kycregistry.co.za/v/demo. The live verification system will be activated when the DPP Registry backend is connected.

Gate 1 in the Three Gates Framework

The Three Gates Framework is the sequential compliance pathway for African exporters seeking EU market access. Each gate is mandatory; none can be bypassed:

Payment for all three gates is processed at Gate 3 — the DPP Registry. KYC Registry (Gate 1) and CBAM Registry (Gate 2) are pre-qualification layers that collect the necessary data and redirect to the DPP Registry checkout with pre-populated URL parameters.

Frequently Asked Questions