Claim discipline

What it proves — and what it doesn't.

ProofReg proves that something existed at a moment in time and has not changed since — what that means is up to you. That boundary is not fine print; it is the product. A proof that claims exactly what it can carry is a proof that survives scrutiny.

What it proves

Solo: this exact file existed at this time and has not changed since.
Duo: two parties each independently held a byte-identical copy before their own ledger timestamp.
Certificate anchor: the proof document itself is unchanged since issue; ProofReg cannot backdate or alter it afterwards.
Email binding: someone with access to that mailbox completed the registration at that time.

What it does not prove

Solo: who made it, who owns it, or that its contents are true.
Duo: that the parties agreed, read it, or approved it.
Email binding: who the person really is, or that the mailbox was not compromised. Identity at ProofReg is always at mailbox level — the certificate states this explicitly.

Lose the certificate and you lose the identity link.

The registration itself remains verifiable on the ledger forever*, but ProofReg cannot restore or reconstruct anything: after delivery we delete the email addresses and keep no copy. The proof is yours — keep it the way you keep an original.

* As long as the XRP Ledger exists.

For Duo, the file must stay byte-identical.

Printing, scanning, re-saving or re-exporting changes the fingerprint. The best route: share one final file and register exactly that.

Privacy

No personal data ever appears on the public ledger. Only fingerprints and timestamps — no names, no addresses. That is not a setting but a design choice: what never goes on can never need to come off.
Names and email addresses never go onto the ledger — only into the certificate, where they are needed. The certificate, held only by the parties, carries the full readable record. And because the certificate itself is recorded, no one can ever change it. Including us.
After delivery, we delete the registration addresses. If delivery fails, we keep the addresses for at most 7 days for a renewed delivery attempt; after that we delete them regardless. Unconfirmed Duo invitations are deleted when the link expires (7 days), including the addresses.
Your account details are not your registration addresses. Your account email and invoices belong to ordinary business administration — not to the deletion promise above. That promise covers the addresses inside a registration.