DAPI Certification

Frequently asked questions

Everything you need to know about DAPI services: identity certification (DAPI-IDS), certified publications (DAPI-PUB), legal use, and protection against deepfake and impersonation.

Category 01

DAPI-IDS (Private Certification)

Forensic identity certification, completely private

What is DAPI-IDS?

DAPI-IDS (Digital Authentication for Personal Identity – Identity Documentation Service) is a completely private and confidential forensic identity certification service.

Main function: creates a private documentary package that cryptographically certifies your identity through documents, photo, voice, and video, without any public exposure.

Distinctive features of DAPI-IDS:

Completely private: no public profile, no indexing, no online searchability
Certified technical elements: SHA-256 hash and eIDAS qualified timestamps
Complete documentary package: professional certificate with an expert declaration
Flexible use: usable in legal proceedings, for platform reports, complaints, cease-and-desist letters
Full control: you decide when, where, and how to use the certification

DAPI-IDS is the foundation for protecting your digital identity and legal defense against impersonation, deepfake, and identity abuse.

Is DAPI a biometric database?

No. DAPI-IDS is not a biometric database and does not create, maintain, or operate any public identity registry or facial recognition system.

What DAPI-IDS does: creates a private certification package with cryptographic hashes and timestamps that document the existence of specific identity files at a given moment.

What DAPI-IDS does NOT do:

Does not store searchable biometric templates
Does not maintain facial recognition profiles
Does not retain voiceprints in recoverable form
Does not create comparison or matching databases
Does not allow searches or queries on biometric data

The process generates SHA-256 hashes (cryptographic fingerprints) of your files, but these hashes are irreversible: they cannot be decoded to reconstruct the original biometric data.

After certification delivery and the secure deletion protocol, only the following remain in DAPI systems: irreversible cryptographic hashes, timestamp certificates, essential metadata (name, DAPI code, certification date), and delivery receipts.

Is my DAPI-IDS certification public or searchable online?

No. DAPI-IDS is private by design. No public profile is created, no information is indexed by search engines, and nothing about your certification is made searchable or visible online.

Complete privacy: your certified materials, the certificate, and all related documentation are delivered exclusively to you through secure private channels. Only you own the documentary package, and only you decide when and how to use it.

This privacy-first approach is fundamentally different from public verification platforms or identity registries that create searchable profiles or verification badges. DAPI-IDS provides forensic documentation without exposure: the certification exists to strengthen your defensive position when needed, not to publish your identity online.

The only public element: the timestamp verification tool, which allows independent verification that your timestamp certificate was issued by a qualified provider and has not been altered. This verification process reveals no personal information: it only confirms the mathematical validity of the timestamp itself.

Are my files retained after DAPI-IDS certification?

DAPI-IDS is designed according to rigorous data minimization principles. Your biometric files are used to produce the certification package and are not retained longer than necessary for delivery and quality control.

DAPI-IDS deletion protocol:

Original files: permanently deleted with secure deletion
Email communications: emails containing your files are deleted from the servers within 30 days of certification delivery (subject to technical/legal retention obligations limited to delivery metadata)
Temporary backups: deleted according to the same protocol as the original files

What is permanently retained: only irreversible cryptographic hashes (SHA-256 fingerprints), timestamp certificates, essential metadata (name, DAPI code, certification date), and delivery receipts. These elements are necessary to maintain the verifiability of the certification issued.

This approach allows DAPI to provide ongoing verification support if necessary (for example, if a court requires certificate authentication years later), while your actual biometric files remain in no recoverable form after completion of the deletion protocol.

Does DAPI use artificial intelligence or automated processing?

No. DAPI-IDS is a manual certification process supervised by forensic experts. It is not an automated platform, does not use AI-based identity validation, and does not rely on algorithmic processing of your biometric data.

Every certification is handled personally by a forensic expert with experience in preparing legal evidence. No mass processing, no automated verification algorithm, no AI analysis.

Why manual processing is essential:

Quality control: expert human review detects issues that automated systems may miss (file corruption, inconsistencies, quality issues)
Legitimacy verification: personal assessment helps identify and prevent fraudulent certification requests or abuse attempts
Technical robustness: expert supervision and declaration strengthen the documentary value compared to automated certifications lacking human oversight
Personalization: each case can be assessed in its own specifics
Professional responsibility: a human expert takes professional responsibility for the certification

This controlled, expert-supervised approach is slower than an automated service, but offers significantly higher documentary quality and reliability for the certification package.

What files are required for DAPI-IDS certification?

DAPI-IDS certification is based on identity-related files that establish your biometric and documentary baseline (by "baseline" or "biometric baseline" we mean a set of certified reference files, not a searchable biometric profile). These files create a complete forensic reference for your identity.

Files required for standard DAPI-IDS:

Identity document (mandatory): valid government-issued document – passport, national identity card, or driving licence. Must be valid and not expired. High-quality PDF or JPG format. This file remains always private and is never published
Facial photograph (mandatory): frontal photo establishing your appearance. Requirements: frontal pose, natural lighting, no sunglasses or obstructions, neutral background preferred, minimum resolution 1280x720px
Voice recording (mandatory): 30-60 second audio sample certifying your vocal characteristics. We will provide a standard text for you to read. Requirements: clear audio quality (MP3 or WAV format), recorded in a quiet environment with no background noise
Verification video (optional but strongly recommended): 10-15 second video for more complete authentication. Requirements: looking at the camera with face centered, slight side-to-side head movement (left/right), MP4 format

Why these specific files? This combination covers the main identity abuse vectors: facial appearance (deepfake video, fake photos), voice (cloning scams, audio manipulation), and document identity (impersonation, profile cloning). The verification video adds depth and movement that make generating matching deepfakes more complex.

You will receive detailed technical specifications and clear instructions before submitting the files. If you have questions about file preparation, DAPI support will guide you through the secure communication phase.

How long does the DAPI-IDS certification process take?

Processing times vary based on current workload and case complexity. DAPI-IDS uses expert-supervised manual certification, not automated processing, which means quality takes priority over speed.

Indicative timeline (standard processing):

Day 0: you submit the certification request through the site
Day 1-2: we contact you through a secure private channel with a unique DAPI code and detailed instructions for submitting the files
Day 2-3: you submit the files through the secure channel; the expert processes the certification (hash generation, timestamp application, certificate creation, quality control)
Day 3-4: the certified package is delivered via secure email (PEC for traceability and delivery receipts)

Priority processing available: for urgent cases requiring immediate defensive action (an ongoing deepfake, legal emergencies, urgent reports), priority delivery is available for an additional fee. Contact DAPI support to request priority processing.

After submitting the initial request, you will receive a personalized timeline estimate based on current workload and the specific needs of your case.

What do I receive after DAPI-IDS certification?

You receive a complete forensic documentary package designed for use in legal proceedings, platform disputes, and defensive contexts. The package is professionally formatted and includes what is needed to document authenticity and temporal anteriority.

The complete DAPI-IDS certification package includes:

Official DAPI certificate (PDF, 6 pages): a professionally formatted document with the DAPI logo, unique certificate number, your name, certification date, timestamp seal, complete list of certified files with SHA-256 hashes, technical specifications, forensic methodology explanation, legal use guide, verification instructions, and the expert's digitally signed declaration
SHA-256 cryptographic hashes: unique fingerprints for each certified file (identity document, photo, voice, video). These hashes allow independent verification that your files match the certified originals
Qualified timestamp certificate: RFC 3161-compliant, from an eIDAS-qualified provider (.tsr file format). Provides a recognized time reference, independently verifiable through public validation tools
Complete technical documentation: a process report with the standards applied (inspired by ISO/IEC 27037), file handling procedures, hash generation methodology, timestamp application process, and verification protocols
Legal use guide: practical instructions for using the certificate in takedown requests, GDPR complaints, criminal reports, civil proceedings, and cooperation with law enforcement
Verification instructions: a quick guide for independently confirming file integrity using the hashes provided, allowing third parties (lawyers, courts, platforms) to carry out verification without involving the DAPI team

Essential: always keep your original files

The DAPI-IDS certificate contains only cryptographic hashes, not the files themselves. To effectively use the certification, you must present both the certificate and your original files, so third parties can verify that the hashes match. Without the original files, the certificate alone is not sufficient for verification.

Can I reuse the same DAPI-IDS certification for multiple disputes?

Yes. A single DAPI-IDS certification can be reused as a reference baseline against multiple instances of abuse involving your identity materials. You do not need separate certifications for each incident: the same certified baseline remains a valid reference, regardless of how many times it is abused.

Typical DAPI-IDS reuse scenarios:

Fake profiles on different platforms: if someone creates fake accounts using your photos on Instagram, Facebook, LinkedIn, TikTok, and dating sites, a single DAPI-IDS certificate can support takedown requests across all platforms simultaneously
Ongoing impersonation: if impersonation persists over time with new fake accounts appearing after previous ones are removed, the same certificate continues to provide a documentary reference
Different types of abuse of the same material: the certification can support both platform reports and legal actions simultaneously
Cross-border disputes: a certificate can support actions in multiple jurisdictions (eIDAS timestamps are recognized within the EU and SHA-256 hashing is an internationally recognized technical standard)

Economic benefit: you pay once for the DAPI-IDS certification and can use it repeatedly for all future incidents involving your certified materials. No additional cost for multiple uses.

Time limitation: the certification must relate to the same certified files and the same identity baseline. If your appearance changes significantly or your identity document expires and is renewed, consider updating the certification to maintain its optimal effectiveness.

Can I update or replace my certified DAPI-IDS files later?

Yes. If your identity document changes (renewal, new passport) or you want to update your baseline materials due to significant changes in appearance, you can request a new DAPI-IDS certification. This creates a new verifiable reference for the updated set of files.

When to consider updating your DAPI-IDS certification:

Identity document expiry: your certified document has expired or been renewed
Significant changes in physical appearance: substantial weight change, growing or completely removing a beard, significant cosmetic procedures, aging effects over long periods
Permanent voice changes: medical conditions affecting the voice, throat surgery, age-related voice changes
Enhanced protection: the original certification did not include a verification video, but you now want more complete protection against video deepfakes
Legal name change: marriage, divorce, or another official name change that makes previous documents obsolete

How the update works:

Each certification is independent, with its own DAPI code, timestamp, and certificate
Your previous certification remains valid for its original period
The update creates an additional reference; it does not invalidate the previous one
You can present both certifications if necessary

Best practice for long-term protection: consider updating your DAPI-IDS certification every 3-5 years or when renewing identity documents, maintaining an up-to-date baseline as your appearance naturally changes over time.

Renewal discount: existing users who update their certification receive a 20% discount off the standard rate. Contact us for details.

Category 02

DAPI-PUB (Certified Publication)

Verifiable public record for reports and legal action

What is DAPI-PUB?

DAPI-PUB (Digital Authentication for Personal Identity – Public Evidence) is the certified publication service that creates a publicly verifiable record based on an existing DAPI-IDS certification.

Main function: makes specific certified files publicly accessible and verifiable by third parties (platforms, courts, law enforcement) in support of reports, complaints, and legal action, while always keeping personal documents private.

Distinctive features of DAPI-PUB:

Controlled public record: only the files you authorize are published
Unique verification URL: each publication has a permanent, verifiable link
Sensitive document protection: identity documents are NEVER published
Easier reporting: platforms can consult the record without an email exchange
Assertable reference: usable in legal proceedings as public evidence
Permanent traceability: the record remains verifiable over time

DAPI-PUB is optional and is activated only at your explicit request and written authorization.

What is the difference between DAPI-IDS and DAPI-PUB?

Feature	DAPI-IDS	DAPI-PUB
Visibility	Completely private	Publicly verifiable
Access	Only you hold the certificate	Anyone with the URL can verify
Published files	None (private package)	Only authorized ones (photo, video, audio)
Identity documents	Certified but private	Never published
Main use	Private forensic documentation for legal proceedings	Faster platform reports
Verification	Requires document exchange	Public verification via URL
Prerequisite	Foundational base service	Requires existing DAPI-IDS
Changes	–	Permanent (not editable)

In short: DAPI-IDS is the private forensic certification for legal and defensive use. DAPI-PUB is the public record that facilitates reports and makes evidence assertable without having to share private documents. DAPI-IDS is the foundation, DAPI-PUB is the optional public extension.

What exactly gets published with DAPI-PUB?

Only the files you expressly authorize are published, together with their cryptographic verification references.

Elements publishable in DAPI-PUB:

Link to the certified file
Cryptographic hashes (SHA-256): fingerprints for integrity verification
Link to the downloadable .tsr file: the eIDAS timestamp, made accessible only to allow independent verification of the certification's authenticity. The file contains no personal data, does not allow reconstruction of the certified content, and is not reusable on other files
DAPI code: unique identifier of the certification
Certified name: name associated with the certification
Certification date

Never published in DAPI-PUB

Identity documents (passport, identity card, driving licence)
Information not explicitly authorized
Sensitive data not necessary for verification
Personal addresses or contact details

What a DAPI-PUB publication looks like: the public page shows the authorized files together with their cryptographic hashes, with verification tools allowing anyone to confirm that the files shown match exactly those certified in the original timestamp. It also includes clear instructions on how third parties can independently verify authenticity.

Are my identity documents made public with DAPI-PUB?

No. Never. Under no circumstances.

Absolute rule: identity documents (identity card, passport, driving licence) are never published with DAPI-PUB, not even upon explicit request.

Protection of sensitive documents:

Identity documents remain always confidential and are used exclusively for internal DAPI-IDS certification
Even if you request DAPI-PUB publication of all certified files, the operator automatically excludes identity documents from publication
The cryptographic hash of the identity document is included in the private DAPI-IDS certification, but is not exposed publicly in DAPI-PUB
This protection is set at the system level and cannot be bypassed even upon explicit request

What gets published: only the photo, video, and audio you explicitly choose, with their cryptographic hashes for verification. The identity document remains exclusively within your private DAPI-IDS certification as internal proof of your identity.

Can I check, edit, or remove a DAPI-PUB publication?

DAPI-PUB publications are created as permanent documentary references. Once issued, public certifications cannot have their content modified, in order to preserve documentary integrity.

Features of DAPI-PUB permanence:

Content immutability: published files, hashes, and timestamps cannot be altered after publication
Permanent URL: the publication link remains stable over time to allow lasting references in legal proceedings and reports
Guaranteed availability: the publication remains accessible so third parties can verify the elements even years later
Documentary integrity: non-modifiability prevents the evidence from being disputed as "altered afterward"

Removal in exceptional circumstances: in extraordinary and documented situations (judicial authority orders, substantiated requests relating to specific legal proceedings, victim protection needs), DAPI may consider changes to how the publication is accessed, always respecting documentary integrity.

Best practice: before requesting DAPI-PUB, carefully consider which files to authorize for publication, since the decision is permanent. If in doubt, consult DAPI support, who will help you decide the most suitable strategy for your case.

Alternative for uncertain cases: you can start with only DAPI-IDS certification (private) and request DAPI-PUB later, only if and when it becomes necessary to expedite reports or provide a public reference.

Who needs DAPI-PUB?

DAPI-PUB is particularly useful when the main goal is expediting platform reports or making evidence assertable without exchanging private documents.

Ideal situations for DAPI-PUB:

Impersonation across multiple platforms: fake profiles on Instagram, Facebook, TikTok, LinkedIn – DAPI-PUB provides a verification URL that can facilitate takedown requests
Deepfakes in public circulation: fake video or audio published online – public DAPI-PUB evidence provides an immediate reference for what content is certified
Public disputes: when you need to publicly show your certified identity in the face of claims that you are the fake
Collaboration with journalists: for verification and fact-checking that must quickly confirm your identity
Proceedings with public bodies: when authorities or institutions need to verify quickly without handling the exchange of private documents
Proactive prevention: public figures who want an "official verification page" to cite preventively

Who can rely on DAPI-IDS alone (without DAPI-PUB):

Legal cases where evidence is presented only in court
Situations where privacy is an absolute priority
Preventive protection with no ongoing abuse
Direct cooperation with individual platforms via private channels

Recommended strategy: always start with DAPI-IDS (private certification). Request DAPI-PUB only if you need to protect online content.

Can I request DAPI-PUB without having DAPI-IDS?

No. DAPI-PUB necessarily requires an existing, valid DAPI-IDS certification.

Why DAPI-IDS is a mandatory prerequisite:

Quality control: the manual review carried out in DAPI-IDS ensures that the files for DAPI-PUB belong to the same person and are appropriate before any publication
Traceability: each DAPI-PUB is linked to the unique DAPI code generated in the original IDS certification

The correct process:

Phase 1 – DAPI-IDS: request and obtain the complete private forensic certification of your identity files
Phase 2 – DAPI-PUB (optional): if and when a public reference becomes necessary, request certified publication specifying which files you authorize

Advantage of the two-phase process: you first obtain complete private forensic protection, then strategically decide whether and when to make a specific element public. This flexibility allows you to adapt your strategy as the situation evolves.

Combined package available: if you already know from the start that you will need both the private certification and the publication, you can request both services simultaneously with a combined discount. Contact us for details.

Category 03

Legal Use and Applications

How to use DAPI in legal proceedings and reports

Is DAPI certification admissible in court?

DAPI is specifically designed to produce a documentary package that complies with technical standards recognized in legal proceedings. Admissibility, weight, and evidentiary effects depend on the specific case, jurisdiction, and how the evidence is presented, and are determined by the competent authority according to applicable rules.

Technical components of DAPI certification:

Cryptographic hashes (SHA-256): a universally recognized industry standard that allows verification of file integrity
Qualified timestamps (eIDAS-compliant): RFC 3161 timestamps from qualified providers, producing the effects provided for by the eIDAS regulation within the European Union; use in other jurisdictions must be assessed according to their respective rules
Forensic methodology (inspired by ISO/IEC 27037): procedures inspired by industry standards for handling digital evidence
Process documentation: a record of what was received, how it was processed, and when it was delivered, allowing independent technical verification by third parties
Forensic expert declaration: a signed declaration from an expert with professional credentials and an explanation of the methodology

Typical legal applications of DAPI:

Criminal complaints for impersonation, identity theft, deepfake, defamation
Civil claims for damages from identity abuse, privacy violations
GDPR proceedings for the right to erasure (Art. 17) and rectification (Art. 16)
Cease-and-desist letters for unauthorized use of identity
Custody disputes where the fabrication of evidence is disputed
Disciplinary or employment proceedings

Important: DAPI provides technically sound documentation, but legal effectiveness depends on your specific case, jurisdiction, and how the evidence is presented. DAPI certification is a documentary tool that can strengthen your position, but outcomes depend on the specific facts of the case and the legal circumstances. For complex disputes, always consult a lawyer who can integrate the DAPI package into an overall legal strategy.

Expert support available: if necessary, the forensic expert who performed the certification can provide supplementary technical reports, clarifications on methodology, or technical testimony to strengthen the documentary assessment. Contact us for details.

How does DAPI help against deepfake and impersonation?

DAPI does not prevent deepfakes or impersonation from occurring, but provides a verifiable reference for integrity and temporal anteriority that can support your defensive position when abuse occurs.

How DAPI-IDS addresses deepfake and impersonation:

Establishes a certified baseline: your certified photos, videos, voice recordings, and documents serve as a technical reference for comparison with disputed content
Documents temporal anteriority: the qualified timestamp documents that your authentic materials existed before the fake content appeared – a relevant element in disputes over "who copied whom" or "who is the original"
Enables forensic technical comparison: experts can analyze the differences between your certified authentic materials and the disputed deepfake content to identify AI-generated artifacts, manipulation traces, or synthetic patterns
Provides elements supporting reports: providing cryptographically certified evidence of your authentic identity can strengthen a report compared to unverified claims or simple screenshots
Supports legal action: the certification package provides structured, technically sound documentation for criminal complaints, civil proceedings, GDPR enforcement, and cease-and-desist letters

Essential best practice: obtain DAPI certification BEFORE problems occur. Preventive certification reduces the need to reconstruct identifying or temporal elements after the fact once abuse has already begun.

Technical support for deepfake analysis: if necessary, we can put you in touch with forensic experts specializing in technical deepfake analysis for supplementary technical reports comparing your certified materials with the disputed content.

How do I use DAPI for platform takedown requests?

The DAPI certification package can be attached to takedown requests and abuse reports as a structured supporting documentary element. It does not guarantee content removal (platforms retain discretion in moderation decisions), but can strengthen your position with verifiable elements.

Strategy with DAPI-IDS (private certification):

Identify the specific violation: fake profile, unauthorized use of images, impersonation, deepfake video, voice cloning
Locate the platform's official reporting mechanism
Submit the complete report through the platform's official form
Attach the DAPI-IDS certificate as supporting documentation
Explicitly reference it in the text: "DAPI certification attached (DAPI-[your code]), with SHA-256 hash and eIDAS-qualified timestamp"
Provide the original files if requested to allow the platform to verify the hash correspondence

Strategy with DAPI-PUB (certified publication):

In the report, provide the DAPI-PUB URL instead of attaching documents
The platform can consult the public record without downloading files or manually verifying hashes
This can facilitate the assessment of the request compared to exchanging private documents

Note: providing DAPI certification with takedown requests gives the platform verifiable technical elements about the requester's identity. It is not possible to guarantee response times or outcomes, which remain at the platform's discretion.

For GDPR-based requests (right to erasure Art. 17): the DAPI certificate can provide documentation supporting identification of the data subject, without prejudice to the data controller's ability to apply its own verification procedures and request further elements.

What are DAPI-PUB Certified Publications legally used for?

DAPI-PUB certified publications serve to make documentary elements consultable by third parties without having to share private documentation or wait for email exchanges.

Legal and practical applications of DAPI-PUB:

Easier platform reports: moderation teams can consult the certified elements by clicking the URL instead of requesting documents
Multiple impersonation cases: the same URL can be provided to multiple platforms simultaneously
Deepfakes in public circulation: when the fake content is public, the public record provides an immediate reference
Journalistic verification and fact-checking: journalists and fact-checkers can quickly consult the record for accurate information
Support for cease-and-desist letters: the DAPI-PUB URL included in a cease-and-desist letter demonstrates the seriousness and verifiability of the request
Law enforcement proceedings: investigators can independently consult the record without handling the exchange of sensitive files
Public disputes: when you are accused of being the fake, DAPI-PUB provides a verifiable public reference for your certification
Litigation with public evidence: the URL can be cited in court filings as an element accessible to the opposing party and the judge

Main function of DAPI-PUB: to reduce ambiguity, facilitate verification, and enable assertability against third parties without compromising the confidentiality of personal identity documents. It is the link between privacy and public verifiability.

How is DAPI presented in court?

DAPI certification can be presented in court as technical documentation, typically accompanied by your lawyer's testimony or a supplementary technical report.

Recommended procedure for using DAPI in court:

Consult your lawyer: show the DAPI certification package to your lawyer, who will assess how to integrate it into the overall litigation strategy
File it as documentation: the DAPI certificate is filed as an exhibit together with other documents
Keep the original files: bring the certified original files on a secure device to allow hash verification in court if requested
Explain the methodology to the judge: your lawyer explains that the DAPI certificate uses recognized technical standards (SHA-256, eIDAS, ISO 27037) to document integrity and temporal anteriority
Supplementary technical report if necessary: for complex technical cases, the forensic expert who performed the certification can provide a supplementary report or technical testimony
Independent verification: a court-appointed technical consultant can independently verify the hash and timestamp following the verification instructions included in the certificate

DAPI package elements to highlight in court:

eIDAS qualified timestamp: produces the effects provided for by Regulation (EU) 910/2014 within the European Union
SHA-256 cryptographic hashes: a widely used standard for digital integrity verification
Methodology inspired by ISO 27037: an international reference standard for handling digital evidence
Process documentation: complete traceability of the certification process
Forensic expert declaration: a professional attestation with credentials

Important: DAPI provides technical documentation on integrity and temporal anteriority, but the overall reconstruction of the facts (what happened, who did what, what damage occurred) requires additional documentation and legal strategy. DAPI is an important documentary tool, but must be integrated into an overall defense built by your lawyer.

Expert support available: if your lawyer considers testimony from the expert who performed the certification necessary, we can provide a supplementary written technical report, clarifications on methodology, and technical testimony in court (where the jurisdiction allows it). Contact us to discuss the specific needs of your case.

How do we cooperate with law enforcement using DAPI?

DAPI certification can be presented to law enforcement as documentation supporting complaints for impersonation, identity theft, deepfake, defamation, or other offenses.

Procedure for presenting DAPI to law enforcement:

Prepare the complaint: gather all evidence of the abuse (key screenshots of fake profiles, links to deepfake content, messages received, testimonies)
Include the DAPI-IDS certificate: bring the complete certification package in both paper and digital format when filing the complaint
Explain the certification: explain that DAPI provides cryptographic technical elements documenting that your materials are certified and temporally precede the fake content
Provide the original files: bring the certified original files on a USB drive so investigators can verify hash correspondence
If available, provide DAPI-PUB: the certified publication URL allows investigators to quickly consult the record without handling sensitive files
Offer technical support: mention that the forensic expert who performed the certification is available for clarification if needed

How DAPI supports investigations:

Anteriority reference: the qualified timestamp documents that your materials existed before the fake content
Identity verification: investigators can consult technical elements documenting that you are the holder of the certified identity
Technically sound documentation: forensic certification can be more robust than simple unverified claims or screenshots
Facilitates technical reports: if an in-depth forensic deepfake analysis is needed, the DAPI certificate provides a certified baseline for comparison
Supports international requests: for cross-border cases, a certification with internationally recognized standards can facilitate cooperation between law enforcement agencies

Offenses typically documented with DAPI support

Impersonation (Italian Criminal Code art. 494 / equivalent provisions)
Aggravated defamation (Italian Criminal Code art. 595 / equivalent provisions)
Unlawful data processing (Italian Privacy Code art. 167 / GDPR violations)
Revenge porn (Italian Criminal Code art. 612-ter / equivalent provisions)
Extortion or fraud through false identity
Harassment or stalking

Cooperation with the Postal Police: for cybercrimes, the specialized units are the appropriate competent authorities. DAPI certification is generally well received because it uses technical methodologies that their experts recognize.

Investigative support available: if law enforcement needs technical clarification on the certification or assistance interpreting the forensic elements, we are available to cooperate by providing detailed technical explanations, supplementary documentation if requested, support for hash and timestamp verification, and technical consultation if authorized by the public prosecutor.

Category 04

Who and When

Who should use DAPI and when to request it

Who should use DAPI?

DAPI is designed for anyone who wants identity documentation oriented toward legal use, before abuse occurs. The service is particularly useful for people whose identity exposure carries a higher risk of impersonation, deepfake, or abuse.

Main user categories:

Public figures and media professionals: politicians, journalists, TV personalities, influencers, and anyone with public visibility exposed to reputational attacks
Executives and business leaders: CEOs, directors, CFOs, and decision-makers exposed to voice cloning risk for business email compromise (BEC) attacks, CEO fraud, or scams involving false authorizations
Content creators and influencers: YouTubers, streamers, podcasters, social media personalities whose image and voice are targets for fake endorsements, impersonation scams, or AI-generated compromising content
Professionals in sensitive fields: lawyers, doctors, psychologists, academics, financial advisors, or other professionals whose reputation critically depends on a verified authentic identity
Individuals with security needs: anyone experiencing harassment, stalking, revenge porn, or threats who wants defensive documentation ready before a possible escalation
Victims of domestic violence or abuse: people vulnerable to digital evidence manipulation in custody disputes, contentious divorces, or legal proceedings where the opposing party might fabricate false evidence
Families protecting minors: parents who want to protect children from AI-generated explicit content, grooming through fake identities, cyberbullying with impersonation, or custody disputes with fabricated evidence
Political candidates and activists: people exposed to disinformation campaigns, political deepfakes, or coordinated attacks during election periods or public disputes
Witnesses in sensitive proceedings: people testifying in high-profile cases, exposed to discrediting attempts through fake content

Fundamental principle: preventive vs. reactive protection. DAPI is most effective when obtained BEFORE abuse occurs. Once a deepfake or impersonation is already underway, documenting "who is real" becomes significantly more difficult, costly, and stressful. Certification creates your verified baseline before you need it.

Even if you don't fall into these categories, consider DAPI if:

You have a significant online presence
You regularly share photos or videos publicly
You are involved in disputes or legal proceedings
You work in positions of trust or authority
You fear someone may abuse your identity

When should we request DAPI certification?

The optimal answer is: as soon as possible, ideally before any abuse occurs.

Ideal timing for preventive certification:

Before increasing public visibility: if you are about to launch a campaign, appear in the media, publish a book, run for public office – certify BEFOREHAND
At the start of legal disputes: as soon as a contentious divorce, a custody dispute, or a civil lawsuit begins – certify immediately, before the opposing party can fabricate false evidence
When you receive threats: if someone threatens to "ruin you," "spread compromising content," or "circulate material about you" – certify immediately
Before reporting offenses or testifying: if you are about to report someone, testify in an important trial, or expose wrongdoing – protect your identity preventively
When you take on high-profile roles: new appointments to executive positions, institutional roles, positions of trust – certify at the start of your term
Periodically for general protection: even without immediate threats, certification every 3-5 years creates a documented baseline for future protection

When certification is URGENT (request priority processing):

Deepfake or impersonation already in circulation and spreading rapidly
Fake content actively damaging your reputation
Immediate need for documentation for imminent legal proceedings
Credible threats of imminent circulation of fake material
Emergency situations where every hour counts

The cost of waiting: the longer you wait after abuse begins, the harder it becomes to reconstruct the situation. If you wait weeks or months, the fake content spreads, your reputation suffers, and documenting "who is the original" requires more costly legal battles. Preventive certification costs a fraction of what it costs to "fix" things afterward.

Benefits of preventive certification:

No urgency = lower costs (no rush surcharge)
Time to prepare optimal-quality files
Timestamp that precedes any future abuse
Peace of mind knowing you are protected
Ability to act immediately if abuse occurs

In short: the best time to get certified is NOW, before you need it. The second-best time is IMMEDIATELY when you identify a risk or threat.

What to do in an emergency (ongoing deepfake or impersonation)?

If you are already experiencing an active attack involving deepfake, impersonation, or identity abuse, act immediately following this emergency procedure.

PHASE 1 – Immediate actions (in the first hours):

Document everything: take key screenshots of the fake content, save the URLs, record testimonies, gather any messages received. Do not delete anything
Request urgent DAPI: contact DAPI support immediately specifying "EMERGENCY – Urgent processing requested." Provide a brief description of the situation
Start reporting to platforms: while waiting for certification, begin reporting the fake content through the platforms' official mechanisms
Alert your network: inform trusted contacts, colleagues, family members that fake content is circulating, so they can help identify and report it

PHASE 2 – With urgent DAPI certification:

Receive the certified package: urgent processing provides reduced turnaround times
Update all reports: add the DAPI certificate or the DAPI-PUB URL to all reports already submitted to platforms
File a complaint with law enforcement: go to the postal police with the complete DAPI package and all documentation of the abuse
Consider immediate legal action: urgently consult a lawyer to assess cease-and-desist letters, urgent motions, injunctive relief requests

PHASE 3 – Containment and resolution (following days):

Monitor platform responses and follow up on report outcomes
Coordinate legal actions with your lawyer
Cooperate with law enforcement in investigations
Implement additional security measures (privacy settings, monitoring)
Consider public communication if appropriate

DAPI urgent processing: in emergency situations, we offer priority processing with expedited delivery, with an applicable surcharge. Contact us immediately specifying "EMERGENCY" in the subject line to activate the urgent protocol.

What NOT to do during an emergency:

Do not directly confront the person who created the fake content
Do not delete evidence thinking it will "make the problem go away"
Do not wait "to see if it resolves itself" (it usually gets worse)
Do not attempt technical counterattack or "hack back" actions
Do not ignore the problem hoping "no one will believe it"

Emergency support resources: the Postal Police (national portal for cybercrimes), the Garante per la Protezione dei Dati Personali (for GDPR violations), dedicated DAPI support for urgent cases.

Remember: the first 24-48 hours matter. Act quickly, document everything, and use DAPI to provide a solid documentary basis for subsequent actions.

Is DAPI available for minors?

Yes, with authorization from parents/legal guardians. We offer DAPI certification for minors specifically to protect children and teenagers from digital identity abuse.

How DAPI works for minors:

Authorization required: both parents (or legal guardians) must provide explicit written consent for the certification
Parents' identity documents: parents provide their own documents to verify the legitimacy of the consent
Enhanced privacy: minors' files receive additional protection with accelerated deletion (24 hours instead of 48)
No publication: DAPI-PUB is not available for minors. Only private DAPI-IDS certification for legal protection
Parental control: the certificate is delivered exclusively to the parents, who decide when and how to use it

Why minors need DAPI:

AI-generated explicit content: deepfake pornographic content of minors is a growing phenomenon. Preventive certification provides a reference for the minor's authentic image
Cyberbullying with impersonation: fake accounts created to harass, defame, or socially isolate the minor at school
Online grooming: predators cloning a minor's identity to approach other children or for blackmail
Custody disputes: conflicting parents who might fabricate false "evidence" to harm the other party
Identity theft: fraudulent use of a minor's identity for accounts, scams, or illegal activities

Special protection for minors: certification for minors follows enhanced protection protocols. All files are handled with maximum confidentiality and deleted more quickly than adult certifications. No publicly accessible element is ever created.

Procedure for requesting DAPI for a minor:

Complete the request form specifying that it is for a minor
Receive the parental consent form to complete and sign
Provide identity documents for both parents/guardians
Provide the minor's identity document (if available) or birth certificate
Proceed with submitting the minor's files according to the instructions received
Receive the certification delivered to the parents/guardians

Protecting the digital identity of minors is an absolute priority. Contact us to discuss how DAPI can protect your child.

Category 05

Process and Support

How to request DAPI, costs, and assistance

How do I request DAPI certification?

The request process is designed to be clear and secure, with protected communication at every stage.

Step-by-step request procedure:

Fill in the request form: go to the certification request page and fill in the form indicating the type of service desired (DAPI-IDS, DAPI-PUB, or both)
Receive your DAPI code: the system automatically generates a unique DAPI code (e.g. DAPI-7F3A9C) linked to your request
Email confirmation: you receive a confirmation email with your code and next steps. No file is requested yet at this stage
Contact through a secure channel: our team contacts you within 24-48 hours through a secure private channel (never the public operational email) with detailed instructions
Secure file submission: you send your identity files (document, photo, voice, video) through the secure channel indicated
Certification processing: the forensic expert manually processes your certification (hash, timestamp, quality control)
Delivery of the complete package: you receive the complete certification package via secure email/PEC with a delivery receipt

Security throughout the process: no biometric data is collected in the initial request. The operational contact email is never publicly published. All communications refer only to your DAPI code, never to sensitive personal information in the clear.

What to prepare before starting:

A valid, unexpired identity document
The ability to take a frontal photo with good lighting
A quiet environment for the voice recording
A camera/smartphone for the verification video (optional)
A payment method to complete the order

What are the costs of DAPI services?

Prices vary depending on the type of service (DAPI-IDS, DAPI-PUB, or a combined package) and any additional options such as priority processing.

General pricing structure:

DAPI-IDS (private certification): base rate for complete forensic identity certification
DAPI-PUB (certified publication): additional rate (requires existing DAPI-IDS)
Combined package (DAPI-IDS + DAPI-PUB): discount compared to purchasing the two services separately
Priority/urgent processing: surcharge for reduced delivery times
Certification update (existing users): 20% discount off the standard rate
Certification for minors: specific rate including enhanced protection protocols

Current prices: for current, detailed pricing for each service, see the certification request page, where you will find a complete, up-to-date price list with all available options.

What is included in the price:

Manual processing supervised by a forensic expert
Generation of SHA-256 cryptographic hashes
eIDAS-compliant qualified timestamp
Complete PDF certificate with expert declaration
Technical documentation and legal use guide
Secure delivery via email/PEC with receipt
Secure file deletion according to the minimization protocol

Accepted payment methods: details of available payment methods are shown on the certification request page at the time of order.

How do I contact DAPI support?

DAPI support is available to answer questions before, during, and after the certification process.

How to contact us:

Use the site's Contact page to send us a detailed message
If you already have a request in progress, always reference your DAPI code in communications
For urgent situations, clearly specify "EMERGENCY" in the subject of your communication

When to contact support:

Questions before starting a request (which service to choose, file requirements, timelines)
Assistance during file submission through the secure channel
Clarifications about the certificate received or the technical documentation
Priority processing requests for urgent situations
Questions about how to use the certificate in a specific case
Requests to update an existing certification
Assistance with certification for a minor

Response times: we aim to respond to support requests as quickly as possible. Requests marked as urgent/emergency receive priority handling.

What happens if I need assistance after receiving my certification?

DAPI support does not end with certificate delivery. We remain available for ongoing assistance relating to your certification.

Post-certification assistance available:

Clarifications about the certificate: explanations of any element of the certification package received
Verification support: assistance to third parties (lawyers, platforms, courts) who need to verify the certificate's authenticity
Supplementary technical documentation: technical reports or additional clarifications if required for legal proceedings
Update requests: assistance updating the certification when your documents or appearance change
New DAPI-PUB publications: if you already have DAPI-IDS and want to add certified publications later
Questions about new abuse: if you experience new abuse and want to understand how to use your existing certification to address it

Your certification remains valid: the certification package you received remains a valid documentary reference over time. There are no limits on how many times you can use it to address different instances of abuse involving the same certified materials.

If you have specific questions about your certification or need assistance using it effectively in a specific situation, always contact us referencing your DAPI code.

Category 06

DAPI and EVIDE

Certified identity and structured decision traceability

What is the relationship between DAPI and EVIDE?

DAPI and EVIDE are distinct but complementary services. DAPI is dedicated to preventive digital identity certification; EVIDE is an infrastructure for the structured recording of events, declarations, decisions, and related evidentiary elements.

When a DAPI identity is used in the EVIDE context, it can provide a preventively certified identifying reference for the person associated with a given record.

In short: DAPI can preventively document who the person is; EVIDE can preserve in structured form what is declared or recorded in a specific operational or decision-making context.

To learn more: visit the EVIDE platform .

Can a DAPI certification be used with EVIDE?

Yes. An identity preventively certified through DAPI can be used as an identifying reference in contexts where EVIDE records are created.

This makes it possible to separate two different elements:

identity: who the person associated with the reference is;
event or decision: what is subsequently declared and recorded in the EVIDE record.

The link does not, however, mean that DAPI automatically certifies the correctness, authority, or content of decisions recorded in EVIDE.

Discover EVIDE

What does EVIDE add beyond DAPI certification alone?

DAPI creates a preventive documentary identity baseline. EVIDE addresses a different problem: the ability to preserve in structured form information relating to events, declarations, and decisions.

In an organizational context, for example, EVIDE can be used to record elements such as:

identity or declared reference of the person involved;
role or declared authority;
decision or event recorded;
time references;
associated metadata and context;
integrity elements and documentary references.

The principle is level separation: preventively certifying an identity does not equate to certifying everything that person will do subsequently. EVIDE allows subsequent events to be documented separately.

Visit EVIDE

Can DAPI and EVIDE be used to document human decisions related to artificial intelligence?

Yes, as distinct documentary tools. DAPI can provide a preventive identifying baseline for the person; EVIDE can be used to preserve structured records relating to interventions, declarations, or human decisions associated with processes involving artificial intelligence systems.

This can be useful, for example, when it is necessary to distinguish between a generic declaration of human oversight and the availability of documentary elements relating to a specific intervention or decision.

EVIDE does not, however, determine whether a decision was correct, compliant, authorized, or legally valid: it preserves the declared and recorded elements so that they can subsequently be reconstructed and assessed in the appropriate context.

Learn more about EVIDE

Are DAPI and EVIDE the same platform?

No. DAPI and EVIDE perform different functions.

DAPI: preventive certification of identity and related digital reference materials.
EVIDE: infrastructure for the structured, verifiable preservation of events, declarations, decisions, and documentary contexts.

Their complementary nature allows the identity level to be kept separate from that of subsequent events or decisions, avoiding attributing to an identity certification meanings it does not have.

More information is available on the official EVIDE website .

Didn't find the answer you were looking for?

Our team is available to answer specific questions about your case, guide you in choosing the most suitable service, or assist you with your certification request.

Request certification Contact us