English 
French 
Ensuring Trusted
Electronic Archiving
This is the compliance overview for Docbyte Vault, probably the most advanced solution for Electronic Information Archiving. Docbyte Vault adheres to the strict requirements set forth by ISO 14641:2018, ISO 15801:2017, and ISO 14721:2012 (OAIS Reference Model), ensuring the integrity, authenticity, and long-term preservation of digital records.
Furthermore, Docbyte Vault is certified under the Belgian e-Archiving certification scheme, demonstrating compliance with eIDAS and ETSI standards for qualified electronic archiving services.
Docbyte is a Qualified Trust Service Provider for Qualified Preservation of Qualified Electronic Seals and Qualified Electronic Signatures and Qualified Electronic Archiving.
The certification scheme used is based on ISO 14721, ISO 14641, EN 319.401, ETSI TS 119.511 and ETSI TS 119.512.
Compliance Assessment
This section details how Docbyte Vault meets or exceeds the requirements of ISO 14641:2018, ISO 15801:2017, and ISO 14721:2012. In most cases, formal certification of these standards are not possible, as they are considered as best practices, as opposed to the certification of eIDAS Trust Service sunder Regulation 910/2014, which have very strict certification requirements.
ISO 14641:2018 Compliance Assessment
The following table explains how Docbyte Vault and Docbyte meet the requirements of ISO 14641:2018.
ISO 14641 Section
Requirement
Docbyte Vault Compliance
General Integrity (4.1)
Ensuring document authenticity and integrity
Utilises digital signatures and hashing to maintain document fidelity. Fully aligned with ETSI TS 119 511.
Security Requirements (4.2)
Minimum and advanced security implementations
Supports multi-layered security including encryption, access control, and immutable audit logs.
Technical Documentation (5.2)
Documented system architecture and procedures
Maintains a comprehensive technical manual covering APIs, workflow, and compliance.
Operational Procedures (5.4.1)
Defined processes for document ingestion and access
Implements an OAIS-based archiving system with pre-ingest validation, metadata capture, and fixity checks.
Security & Risk Management (5.5)
Security management, audits, and risk assessment
ISO/IEC 27001 certified with complete audit trails and automated risk analysis.
Timestamping (5.6)
Certified timestamps for document validity
Uses qualified timestamps in accordance with ETSI TS 119 512.
Audit Trails (5.7)
Full logging of all system actions
Immutable audit trails maintained for all user interactions and document lifecycle changes.
Storage Media (6.1)
Defined criteria for storage medium durability
Supports logical WORM storage, redundant backups, and encrypted long-term preservation.
Media Preservation (6.2)
Data loss prevention and integrity checks
Implements redundancy, evidence record based proof-of-integrity, and periodic verification checks.
Rewritable Media Security (9.1)
Secure implementation for rewritable media
Uses hashing, encryption, and advanced access control for integrity assurance.
Document Capture & Metadata (10.1)
Ingestion and indexing of electronic records
Supports e-ARK SIP metadata standards, automatic metadata extraction, and AI-based classification.
Integrity Verification (10.3)
Periodic integrity checks and fixity verification
Conducts regular checksum validation and cryptographic hash revalidation.
Secure Retrieval (11.2.1)
Document retrieval and access controls
Provides role-based access, SSO integration, and API-based document retrieval.
Controlled Disposal (11.4)
Secure and trackable document deletion
Implements automated and legally compliant data disposal based on retention policies.
System Assessments (12.1)
Internal and external compliance reviews
Undergoes regular third-party audits, penetration tests, and certification reviews.
Service Contract Compliance (13.2)
Transparent legal and operational agreements
Adheres to eIDAS, GDPR, and ISO 27001 contractual requirements.
ISO 15801:2017 Compliance Assessment
ISO 15801 Section
Requirement
Docbyte Vault Compliance
Information Management Policy (4.1)
Clear policy on the management of electronically stored information (ESI)
Implements structured lifecycle management policies aligned with ISO 27001 and GDPR.
Duty of Care (5.1)
Establishing trustworthiness and risk management
Automates compliance workflows for evidential record management and data lifecycle governance.
Information Security (5.2)
Ensuring confidentiality, integrity, and availability
Uses end-to-end encryption, strict access control, and continuous security monitoring.
Procedures and Processes (6.1)
Comprehensive documentation of operational processes
Maintains an extensive process framework with configurable compliance policies.
Retention & Disposal (6.10 & 6.12)
Defining clear policies for data lifecycle management
Automates retention period enforcement and GDPR-compliant data deletion.
Backup & Recovery (6.13)
Ensuring disaster recovery and business continuity
Redundant data centers, blockchain integrity validation, and automated disaster recovery failover.
Audit Trails (8.1)
Maintaining traceability and accountability
Maintains immutable logs with digital evidence records for accountability and legal proof.
ISO 14721:2012 (OAIS) Compliance Assessment
OAIS Section
Requirement
Docbyte Vault Compliance
Ingest
Ensuring proper data submission and validation
Implements e-ARK SIP ingestion, pre-ingest validation, virus scanning, and AI-powered metadata capture.
Archival Storage
Data storage, integrity, and preservation
Utilises multi-redundant storage, blockchain-based evidence, and cryptographic logical WORM retention.
Data Management
Maintaining archive metadata and logs
Provides robust metadata indexing, digital evidence capture, and legal-hold enforcement.
Administration
Managing policies, workflows, and audits
Integrates advanced compliance automation, role-based security, and real-time audit capabilities.
Preservation Planning
Ensuring future accessibility and data migration
Supports seamless format migration, validation, fixity checking, and digital signature re-validation.
Access
User retrieval, authentication, and control
Implements controlled access via SSO, multifactor authentication, and legal access tracking.
Docbyte Vault fully adheres to
ISO 14641:2018, ISO 15801:2017, and ISO 14721:2012, reinforcing its position as a trusted digital archiving solution. Additionally, it extends security and integrity measures through eArchiving certification.
For organisations seeking a trusted, certified, and future-proof archiving solution, Docbyte Vault provides the optimal choice.