DAPI Certification
DAPI Certification

What is DAPI and how it works

What it is, what it is not, and why it matters more today than ever.

Understanding DAPI

The problem DAPI solves

What it is, what it is not, and why it matters more today than ever

New AI tools can clone your face, your voice, and your identity in minutes. When abuse occurs, the most critical challenge is proving who you really were before the fake content appeared.

DAPI (Digital Authentication for Personal Identity) is a controlled certification process that creates a verified, temporally documented identity baseline, designed to support legal and evidentiary use, with the flexibility to choose your level of privacy.

Before DAPINo pre-existing verified identity baseline
DAPI certificationForensic baseline established
If abuse occursEvidence of anteriority available

Two DAPI certification paths

Private path

DAPI-IDS (Private certification of the verified identity baseline)

Establish your verified identity baseline with a completely private forensic evidence package. No public exposure: only you receive the certificate.

  • Certified identity baseline
  • SHA-256 cryptographic hashes
  • eIDAS qualified timestamp
  • Forensic documentation
  • Completely private

Ideal for: preventive protection, deepfake defense, impersonation disputes

Public path

DAPI-PUB (Public certification of identity and certified content)

Identity baseline plus public certification of your online content. Every publication gets a verifiable listing.

  • Everything included in DAPI-IDS (Private certification of the verified identity baseline)
  • Public verification listings
  • Per-publication certificate
  • DAPI protection badge
  • QR code for verification

Ideal for: content creators, public figures, copyright protection, anti-manipulation

See a detailed comparison of the two paths →

DAPI as identity baseline for EVIDE

DAPI is also the identity verification path required before activating an EVIDE account. EVIDE is an evidentiary accountability platform designed to preserve, in structured and verifiable form, Declarations relating to decisions, declared authority, context, and declared responsibility.

DAPI provides the verified identity baseline. EVIDE preserves the structured Declarations and their evidentiary record.
Identity verification ≠ Authority validation

DAPI verifies the identity of the person. It does not determine or validate their professional role, authority, or the correctness of what they declare. EVIDE preserves the declared context and evidentiary elements associated with the Declaration; it does not autonomously determine the substantive truth, correctness, or legitimacy of the decision.

Person → DAPI → EVIDE

PersonRequests identity verification
DAPIVerified identity baseline
EVIDEStructured Declaration and evidentiary preservation

Every EVIDE account requires preventive identity verification through DAPI.

What DAPI is

  • Forensic certification with dual mode

    Generates cryptographic evidence of your identity (always private) with the option of public certification of your online content

  • Legally oriented documentation

    Designed for takedown requests, legal proceedings, and cooperation with law enforcement

  • Expert-supervised process

    Manually handled by a forensic expert with 24 years of experience, no automation, no AI processing

  • No biometric database

    Source files deleted within 48 hours; only the elements set out by policy are retained (non-reversible cryptographic hashes, timestamp, metadata)

  • eIDAS-compliant timestamps

    Qualified time evidence with legal effect throughout the EU and internationally recognized standards

What DAPI is not

  • It is not a biometric database

    We do not store, catalogue, or search your biometric data as a permanent repository

  • It does not expose private identity data

    Your verified identity baseline always remains private. Only publications certified with DAPI-PUB have a public record

  • It is not an automated platform

    No algorithms, no AI validation, no mass processing: every certification is personally supervised

  • It is not a KYC service

    DAPI creates technical documentation for personal legal protection, not corporate identity verification

  • It is not a guarantee of content removal

    We provide elements useful in supporting your position; we cannot control platform decisions

FEDIS — technical statement for evidentiary use

DAPI packages may include FEDIS (Forensic Evidence Declaration & Integrity Statement), a technical statement documenting methodology, integrity elements, time references, and other elements useful for understanding and assessing the digital evidence.

FEDIS does not determine the admissibility, evidentiary weight, or outcome of a proceeding. Such assessments rest with the judge or competent authority according to applicable procedural and evidentiary rules.

Within the European Union, the qualified elements used in the process, such as the qualified electronic timestamp, produce the effects provided for by the eIDAS regulation. Use of the package in other jurisdictions must be assessed according to the respective applicable rules.

Learn more about the FEDIS methodology: FEDIS technical documentation ↗

Types of proof

Why DAPI matters more today than ever

Anteriority, integrity, and identity consistency

When deepfake, voice cloning, or impersonation occur, platforms and authorities ask the same question: "How can we verify which is the authentic reference and which is the disputed content?"

Without a pre-existing verified baseline, answering this question becomes much more difficult. DAPI creates that baseline before you need it.

Proof of anteriority

Verifiable proof of the existence of your identity materials at a specific date and time, before the fake content appeared.

  • Available on both DAPI paths

Proof of integrity

Cryptographic hashes allow verification of whether files subsequently presented match the certified files: a change to the content produces a different hash.

  • Available on both DAPI paths

Identity consistency

Establishes a consistent baseline of your appearance, your voice, and your identity documents for verification and comparison purposes.

  • Available on both DAPI paths

Identity-content association

Cryptographically links your verified identity baseline to specific content you have published online, with a verifiable public record.

  • DAPI-PUB only (Public certification of identity and certified content)
What you can certify

What you can certify with DAPI

The files that establish your verified identity baseline and (optionally) your online content

DAPI certification is based on identity-related files that establish your verified identity baseline. With DAPI-PUB (Public certification of identity and certified content), you can also certify your published online content.

Identity baseline (both paths)

Identity document

Valid government-issued ID (passport, national identity card, driving licence)

  • High-quality PDF or JPG
  • Clear, legible text and photo
  • Current and not expired
  • Private file, used only for certification

Facial photograph

Frontal photo establishing your appearance for the baseline

  • Frontal pose, natural lighting
  • No sunglasses or obstructions
  • Neutral background preferred
  • High resolution (min 1280x720px)

Voice recording

Audio sample certifying your vocal characteristics

  • 30-60 seconds duration
  • Reading of the standard text provided
  • Clear audio quality (MP3/WAV)
  • Quiet environment, no background noise

Verification video

Short video for enhanced authentication (optional but strongly recommended)

  • 10-15 seconds, MP4 format
  • Looking at the camera, face centered
  • Slight side-to-side head movement (left/right)
  • Adds a further visual reference element to the certified baseline

Technical processing

Each file is processed to generate a SHA-256 cryptographic hash (fingerprint), which is then certified with an eIDAS-compliant qualified electronic timestamp. The qualified timestamp benefits from the presumption of accuracy of the date and time indicated and of the integrity of the data with which they are associated; the hash allows subsequent verification of the file's correspondence with the certified fingerprint.

DAPI-PUB (Public certification of identity and certified content)

In addition to the private identity baseline, you can certify specific content you have published online, creating verifiable public evidence of the link between your identity and that content.

What you can certify

  • YouTube/TikTok videos - video URL + key screenshots
  • Social media posts - Facebook, Instagram, LinkedIn, X
  • Articles and blog posts - full URL + forensic capture
  • Creative works - images, design, online portfolios
  • Public documents - white papers, research, publications
  • Podcasts and audio - episode URL + specific timestamps

What you get for each publication

  • Dedicated public verification listing
  • Dedicated PDF certificate with hash, timestamp, and verification link
  • Custom DAPI badge (SVG format) to embed in your content
  • Scannable QR code for instant smartphone verification
  • HTML embed codes ready for websites and social media

See what publicly verifiable certified publications look like: View example profile ↗

How the process works

How DAPI works

Three controlled steps from request to certified delivery

Fundamental principle: no public upload of identity data. No permanent storage. No automation. Every step is controlled, private, and expert-supervised.

Request and path selection

Submit a certification request through our website. No file is uploaded at this stage.

What happens
  • Fill in the contact form with basic information
  • Indicate whether you want DAPI-IDS (Private certification of the verified identity baseline) or DAPI-PUB (Public certification of identity and certified content)
  • The system generates a unique DAPI code (e.g. DAPI-7F3A9C)
  • Confirmation email sent with your code and next steps
  • We contact you within 24-48 hours through a secure private channel
Security features
  • No biometric data collected at this stage
  • Operational contact email never published on the website
  • All communications refer only to your DAPI code
  • Human verification of the legitimate use case

Manual certification preparation

Your files are checked and processed using forensic methodology developed over 24 years of experience.

Handling of identity files (both paths)
  • You send the files through a secure private channel
  • Files are downloaded locally
  • Antivirus scan and integrity check
  • Personal review by the forensic expert, no automated processing
If you chose DAPI-PUB (Public certification of identity and certified content)
  • You provide URLs or files of the content to be publicly certified
  • We carry out certified forensic captures of the online content
  • We create separate hashes for each publication
  • We generate public verification listings
  • We create custom badges and QR codes for each item of content
Certification process
  • Hash generation: SHA-256 cryptographic fingerprint created for each file
  • Timestamp application: eIDAS-qualified timestamp applied (RFC 3161 standard)
  • Documentation creation: complete certificate with technical report and legal guide
  • Quality control: expert review of all elements before delivery

Certified delivery and secure deletion

You receive the complete documentation, designed to support legal and evidentiary use. The source identity files are then deleted.

What you receive (DAPI-IDS Private certification of the verified identity baseline)
  • Official DAPI certificate (PDF) - professionally formatted, digitally signed
  • Cryptographic hashes - SHA-256 fingerprints of all certified files
  • Qualified timestamp - eIDAS-compliant time evidence
  • Technical documentation - verification methodology and chain of custody
  • Legal use guide - how to use the certificate for takedowns, complaints, legal proceedings
If you chose DAPI-PUB (Public certification of identity and certified content), you also receive
  • Public profile page dedicated to your identifier
  • Certificate for each publication: separate PDF with specific hash and timestamp
  • Custom DAPI badges: SVG files to embed in your content
  • QR code: for instant smartphone verification
  • Embed codes: HTML ready for websites and social media
  • Badge usage instructions: guide to maximizing certification visibility
Deletion and minimization (critical security step)
  • Source biometric files: deleted within 48 hours of certification completion
  • Hashes, timestamp, and metadata: retained as elements necessary for the certification's verifiability
  • DAPI-PUB: public listings may contain the presentation and verification elements provided for by the public profile, such as metadata, hashes, badges, QR codes, and any authorized previews

Minimization of source file retention

Your source biometric files are not retained as a permanent repository after certification delivery. DAPI does not retain the original source files as an archive: for certification, only the elements set out by policy are retained (cryptographic hashes, timestamp, and metadata necessary for verifiability), plus any elements voluntarily published through DAPI-PUB.

Your certified package

Your certified DAPI package

Complete package designed for legal use and verification

The complete certification package is designed to be immediately usable for legal proceedings, platform disputes, and cooperation with law enforcement. Contents vary depending on the path chosen.

Package

DAPI-IDS (Private certification of the verified identity baseline)

Forensic identity baseline documentation. Certificate (PDF) contents:

  • 1: Cover and identification - DAPI logo, certificate number, your name, certification date, timestamp seal
  • 2: Technical certification - list of certified files with SHA-256 hashes
  • 3: Timestamp and methodology - details of the qualified timestamp, forensic standards applied
  • 4: Legal value and use - types of evidence provided, use cases, limitations, evidentiary explanation
  • 5: Verification and retention - how to verify authenticity, importance of preserving the original files, verification instructions
  • 6: Expert declaration and signature - forensic expert credentials, methodology statement, digital signature, contact information
Package

DAPI-PUB (Public certification of identity and certified content)

Includes the entire DAPI-IDS package (Private certification of the verified identity baseline) plus additional components for public verification of your content:

  • Public profile page - dedicated URL listing all your certified publications with verification details, QR code, and downloadable badges
  • Per-publication certificates - each certified item of content gets its own PDF certificate with a specific hash, timestamp, DAPI number, and link to the public listing
  • Badges and visual assets - custom DAPI badges (SVG), scannable QR codes, HTML embed codes to easily incorporate certification into your content
  • Individual verification listings - each publication has a dedicated page with title, description, certification date, screenshot/preview, and verification tools

Explore a real profile with certified publications: View example profile ↗

Technical specifications (both paths)

  • Hash algorithm: SHA-256 (256-bit, cryptographically secure)
  • Timestamp standard: RFC 3161 qualified timestamp
  • Timestamp provider: eIDAS-compliant EU provider
  • Digital signature: qualified electronic signature
  • Document format: PDF/A (long-term archival standard)
  • Verification: hashes can be independently recalculated and compared

Critical: you must keep your original files

The DAPI certificate contains ONLY cryptographic hashes (fingerprints) of your files, not the files themselves. If you need to use the certificate for legal purposes, you must present:

  • The DAPI certificate (with hash, timestamp, and digital signature)
  • Your original files (document, photo, audio, video)

Third parties (courts, platforms, authorities) can then recalculate the hashes of your files and verify that they match the certified hashes, allowing them to verify that the files correspond to those certified and that they were associated with the timestamp issued at the time of certification.

Recommended retention: multiple backups (local + encrypted cloud), offline storage (USB/external drive), never modify the original files.
When DAPI is necessary

When DAPI is useful

Real scenarios where forensic proof of identity matters

DAPI provides defensive elements for a wide range of digital identity misuse scenarios, from everyday impersonation to the most sophisticated AI-based attacks.

Once a deepfake exists, proving what your authentic reference is becomes much more difficult without pre-existing certification. DAPI establishes your verified identity baseline BEFORE the abuse, creating reference material that can be used in subsequent verifications, disputes, or specialist analysis.

Which path should you choose?

  • DAPI-IDS (Private certification of the verified identity baseline): identity protection, deepfake defense, impersonation disputes
  • DAPI-PUB: content creators, copyright, anti-manipulation of content, public reputation protection

Fake profiles and impersonation

Someone creates social media accounts, dating profiles, or business profiles using your name, your photos, and your personal information to scam your contacts or damage your reputation.

DAPI provides: a verified baseline of your appearance and identity, in support of takedown requests to platforms.

Recommended path: DAPI-IDS (Private certification of the verified identity baseline - suitable to support takedown requests)

Deepfake videos

AI-generated videos show you making statements you never made, appearing in compromising situations, or endorsing products/causes without your consent.

DAPI provides: your certified facial features at a specific date, usable as reference material in any disputes or analysis.

Recommended path: DAPI-IDS (Private certification of the verified identity baseline) + consider DAPI-PUB (Public certification of identity and certified content) if you are a public figure

Voice cloning scams

A synthetic voice replicating yours used for phone scams targeting family members, CEO/BEC fraud attacks, or fake audio messages and authorizations.

DAPI provides: your certified vocal characteristics, usable as a comparison baseline in fraud investigations and legal actions.

Recommended path: DAPI-IDS (Private certification of the verified identity baseline - certified vocal baseline)

Unauthorized use of images

Your photos used without permission in commercial advertising, dating/escort services, defamatory websites, catfishing schemes, or adult content platforms.

DAPI provides: the association between your verified identity baseline and the certified materials, with verifiable proof of their existence at a certain date, in support of DMCA requests or personality rights claims.

Recommended path: DAPI-IDS for personal use, DAPI-PUB (Public certification of identity and certified content) for professional use

Copyright protection for online content

Document YouTube videos, social posts, articles, and creative works against plagiarism, unauthorized republication, or false attribution, with verifiable proof of their existence at a certain date.

DAPI provides: a cryptographic link between your identity and specific content, with a verifiable public record via QR code and badge.

Required path: DAPI-PUB (Public certification of identity and certified content - provides public listings and per-content certificates)

Content creators and influencers

Display the DAPI badge on videos, posts, and content as a visual deterrent. Allow followers, brands, and partners to publicly verify the DAPI record associated with your content via QR code.

DAPI provides: a visible badge and public record, allowing content verification without involving DAPI directly.

Required path: DAPI-PUB (Public certification of identity and certified content - maximum visibility and protection)

Family and minor protection

Children vulnerable to fake accounts, AI-generated explicit content, parental impersonation scams, grooming through fake identities, or custody disputes with fabricated evidence.

DAPI provides: a verified baseline of a minor's appearance (with parental consent), available before any abuse occurs, with a time reference useful for legal matters.

Recommended path: DAPI-IDS (Private certification of the verified identity baseline - maximum privacy for minors)

Attacks on professional reputation

Executives, politicians, journalists, or public figures targeted with deepfakes, fake scandals, or voice-cloned statements that can cause reputational or market damage.

DAPI provides: a pre-existing verified identity baseline, available for crisis management and any legal action.

Recommended path: DAPI-PUB (certified public communications) + DAPI-IDS (private defensive baseline)

DAPI's realistic scope

What DAPI can do

  • Provide a verified identity baseline
  • Establish temporal anteriority (you existed before the fake)
  • Strengthen takedown requests with verifiable elements
  • Support criminal complaints and civil proceedings
  • Provide elements useful for platform assessment
  • Create structured technical documentation for legal and evidentiary use
  • DAPI-PUB: provide a verifiable public record (QR code, badge)
  • DAPI-PUB: provide a public time reference useful in case of disputes

What DAPI cannot do

  • Prevent deepfakes from being created
  • Automatically remove fake content from the internet
  • Monitor the web for your impersonation
  • Guarantee specific legal outcomes
  • Control platform moderation decisions
  • Replace legal counsel or law enforcement

Complete digital identity protection ecosystem

DAPI provides defensive technical documentation, but does not actively monitor or remove content. For complete protection, you can combine DAPI with these complementary services:

Preventive identity certification

  • DAPI-IDS (Private certification of the verified identity baseline): verified identity baseline (this service)
  • DAPI-PUB (Public certification of identity and certified content): content protection with public record (this service)

Evidentiary accountability — EVIDE

  • For individuals and organizations who, after preventive identity verification via DAPI, need to preserve structured Declarations relating to decisions, declared authority, context, and declared responsibility: EVIDE ↗

Active monitoring and detection

Removal and takedown

Certification of abuse evidence

Optimal strategy: DAPI certifies your verified identity baseline before abuse occurs (preventive defense). If abuse occurs, you can use CertifyWebContent to capture the evidence, MonitoraggioDellaReputazione to monitor and remove fake content, and DAPI-PUB to make your certified content publicly verifiable.

DAPI's value is defensive: it does not control the internet, but strengthens your position when you need to act. Think of it as forensic insurance: material you hope you never need to use, but valuable when you need it.

How to use your certificate

How to use your DAPI certificate

Practical guide for legal and defensive use

The certified DAPI package is designed for immediate use in defensive and legal contexts. How you use it varies depending on the path chosen.

Platform reports and takedowns

Use case: fake profile, unauthorized use of images, impersonation on social media

With DAPI-IDS (Private certification of the verified identity baseline)
  • Submit the platform's standard abuse report (Instagram, Facebook, LinkedIn, etc.)
  • Attach the DAPI certificate PDF as supporting evidence
  • Reference the certificate in the text: "DAPI certification attached (DAPI-[code])"
  • If verification is requested, provide the original files together with the certificate for hash comparison
With DAPI-PUB (Public certification of identity and certified content)
  • Follow the same steps as DAPI-IDS (Private certification of the verified identity baseline)
  • Additional element: include the link to your public verification page in the report
  • The platform can publicly verify the DAPI record associated with your identity and publications without further requests
  • May reduce the need to reconstruct certain identifying elements after the fact during a dispute

Note: the certified documentation can provide elements that platforms consider when assessing requests. It is not possible to guarantee response times or outcomes, which remain at the platform's discretion.

Legal proceedings and criminal complaints

Use case: deepfake defamation, identity theft, fraud, revenge porn

How to use DAPI (both paths)
  • Provide the DAPI certificate to your lawyer
  • Include it in formal reports to law enforcement (Postal Police, FBI IC3, etc.)
  • Submit it as an exhibit in civil or criminal proceedings
  • Use it in cease-and-desist letters as an element supporting your identity

With DAPI-PUB (Public certification of identity and certified content): if the case involves content you have published (e.g. manipulated video, falsely attributed articles), the timestamped public record provides verifiable proof that the content existed at a certain date.

Legal value: within the European Union, the qualified electronic timestamp produces the effects provided for by the eIDAS regulation. Admissibility, weight, and evidentiary effects in each individual case are determined by the competent authority according to applicable rules.

GDPR and privacy enforcement

Use case: unauthorized data processing, right to erasure, personality rights violations

How to use DAPI (both paths)
  • Submit a GDPR complaint to the platform/website (Art. 17 - Right to erasure)
  • Include the DAPI certificate as supporting documentation of your identity
  • If ignored, forward the complaint to the Data Protection Authority (Garante Privacy in Italy)
  • Reference the certificate as an element supporting your legitimate interest

Note: DAPI can provide documentation supporting the identification of the data subject, without prejudice to the data controller's ability to apply its own verification procedures and request further elements.

Deepfake detection and comparison

Use case: disputed video/audio authenticity, forensic analysis required

How to use DAPI (both paths)
  • Provide the DAPI certificate and original files to the forensic expert or law enforcement
  • The certified baseline allows technical comparison with the disputed content
  • Facial/voice analysis by experts can compare synthetic artifacts with certified characteristics
  • The timestamp is associated with your certified materials with a date preceding the disputed content

Technical note: the certified baseline provides certified reference material that can support technical comparison by experts or specialist tools.

Copyright protection and content anti-manipulation (Publications only)

Use case: content theft, plagiarism, unauthorized republication, video/article manipulation

How to use DAPI-PUB (Public certification of identity and certified content)
  • Prevention: display the DAPI badge on videos, posts, articles as a visual deterrent against theft
  • Public verification: followers, clients, and partners can scan the QR code to publicly verify the associated DAPI record
  • DMCA takedown: submit the per-publication certificate with the takedown, including the link to the verification record
  • Proof of anteriority: the public timestamp provides verifiable proof that your content was certified before the disputed copies
  • Copyright disputes: the public record serves as a verifiable reference for the content's existence at a certain date
Practical example: A content creator finds their video re-uploaded without permission. They submit a DMCA report with the publication certificate and the link to the public verification record, allowing the platform to review the certified elements when assessing the request.

Distinctive element: the visible badge on original content acts as a deterrent before theft occurs. When it does occur, the public record can facilitate verification by third parties during resolution.

General best practices

  • Keep the certificate and originals together: store the DAPI certificate and the original files in the same secure location for easy access
  • Act promptly: submit reports/complaints as soon as you discover the abuse; temporal proximity strengthens the case
  • Document everything: carry out certified forensic captures of the fake content ↗: isolated screenshots may offer fewer technical and contextual elements than a structured forensic capture and can more easily be disputed; save the URLs, record the dates, combine with DAPI documentation for the strongest position
  • With DAPI-PUB - maximize badge visibility: embed DAPI badges in videos (watermark), social posts (bio/description), articles (footer), online portfolios
  • With DAPI-PUB - promote verification: include a phrase such as "This content is DAPI-certified - scan the QR code to verify" to educate your audience
  • Seek legal advice: DAPI provides technical documentation, but a lawyer's guidance can help define the appropriate legal strategy
  • Multiple use allowed: a certificate can support multiple actions; there is no need to re-certify for every incident
  • Update if necessary: if your identity document expires or your appearance changes significantly, consider an updated certification
The fundamental principle of DAPI

The fundamental principle of DAPI

Proving who you were before, not who you are now

DAPI serves to demonstrate what your real identity was before any abuse, cloning, or impersonation.

This temporal distinction is fundamental. When abuse occurs, the problem is not proving who you are today, but proving that your authentic identity existed before the appearance of fake, manipulated, or unlawfully attributed content.

DAPI's three fundamental principles

Verifiable time evidence

DAPI creates time evidence predating the abuse, based on cryptographic hashes and qualified timestamps, designed to support legal and evidentiary use with independent verifiability.

Support in reducing time and cost in the event of disputes

Having a certified baseline can allow you to act more promptly, reducing the need to reconstruct certain identifying or temporal elements after the fact during legal actions or takedown requests.

Elements supporting your reputation

DAPI can help reduce the ambiguity that sometimes leads to hasty judgments by the public, the media, or platforms, by offering reference elements before a situation worsens.

With DAPI-PUB (Public certification of identity and certified content) - proactive public protection: in addition to the defensive baseline, DAPI-PUB adds a layer of proactive public protection: the visible badge and verifiable public record act as a deterrent before content theft occurs, and can facilitate verification by third parties when it becomes necessary to trace back to the certified content.

Without a pre-existing baseline

Disputed content
Reconstruction after the fact
Need for further elements
Platform/authority assessment

With DAPI-IDS (Private certification of the verified identity baseline)

Pre-existing certified baseline
Disputed content
Verifiable elements available
Use in dispute/analysis

With DAPI-PUB (Public certification of identity and certified content - proactive protection)

Certified content
Verifiable public record
Disputed content
Immediately consultable reference

Choose your DAPI certification path

Protect your identity with private forensic certification, or add public verification for your online content. Don't wait for deepfakes or impersonation to occur: certify today.

No biometric database · 48h deletion · Expert-supervised · Designed for legal and evidentiary use · Choose your privacy level