Institutional Governance • Cryptographic Tamper-Evidency

Security Built for Boardrooms & Forensic Audits.

How It Works in Plain English: The Digital Wax Seal

In traditional office workflows, approving an expenditure meant signing a paper voucher. But physical paper can be easily altered: numbers can be erased, pages swapped, or fake receipts attached after the fact.

Approove Lite acts like an unbreakable digital wax seal. The instant your directors approve a payment, our cryptographic engine computes a mathematical fingerprint (SHA-256) encompassing the vendor names, bank account numbers, amounts, and signing timestamps. If anyone alters even a single digit afterwards, the seal shatters and the audit record turns red.

0 AccountsExternal Signer FrictionZero passwords required
AES-256Data EncryptionMilitary-grade storage
< 10 SecApproval Speed1-tap WhatsApp sign-off
100% SHA-256Non-RepudiationImmutable audit seal
TECHNICAL DEEP-DIVE

Institutional Architecture Under the Hood

Every layer is engineered to withstand scrutinizing IT reviews, regulatory audits, and enterprise compliance assessments.

CRYPTOGRAPHIC LEDGER

Deterministic Canonical SHA-256 Ledger (APPROOVE_CANONICAL_V2)

An immutable digital seal calculated across normalized request properties and authorizer states.

Why this matters:Think of this as an unbreakable digital wax seal. When all directors approve a payment, we bundle the total amount, account numbers, vendor names, and approval timestamps into a single cryptographic string. If anyone tries to modify an account number by even a single digit later, the hash recalculation fails instantly and flags the voucher as tampered.
Engineering Specifications
Computed over canonical JSON schema with lexicographically sorted keys
Captures request ID, currency, total amount, line items, and sequential stage signatures
Post-Payment Invariance: Downstream bank debit advice slips and NIP references append to the settlement ledger without invalidating the governance approval hash
FORENSIC TELEMETRY

Forensic Audit Telemetry & Monotonic Progression

Real IP resolution, browser user-agents, and sequential stage enforcement for internal auditors.

Why this matters:We record exactly who authorized each step, when they did it, and from what device. Internal audit teams no longer have to rely on informal "approved on WhatsApp" screenshots. Every approval carries an indisputable forensic receipt.
Engineering Specifications
Client IP resolution via x-forwarded-for and x-real-ip proxy headers
Browser user-agent fingerprinting and millisecond UTC timestamps
Strict monotonic stage progression prevents race conditions and out-of-order execution
ZERO-KNOWLEDGE AUTH

Zero-Account One-Time Token Cryptography

Sub-10-second executive sign-offs without passwords, accounts, or corporate credential exposure.

Why this matters:Busy Managing Directors and board members don’t have time to create accounts, download apps, or remember passwords just to approve an office supply order. We provide direct cryptographic deep links that allow secure 10-second approvals directly from WhatsApp or email without exposing company passwords to third-party database breaches.
Engineering Specifications
Cryptographically signed HMAC one-time access tokens embedded in private deep links
Token validates exclusively against the targeted stage participant in the approval chain
Zero password storage on third-party servers eliminates credential compromise attack surfaces
DEFENSE-IN-DEPTH

TLS 1.3, AES-256 & Cloudflare R2 Presigned Streaming

Military-grade encryption in transit and private object streaming with automated cold-storage tiering.

Why this matters:Your financial attachments and bank debit receipts are never stored on public links. Files are encrypted the moment they leave your phone, stored in private bank-grade vaults, and stream only to verified participants through temporary, self-expiring links.
Engineering Specifications
Enforced TLS 1.3 encryption for all data in transit across modern edge nodes
AES-256 database column encryption for sensitive biometric vector coordinates and banking info
Cloudflare R2 private presigned object streaming with automated 180-day cold storage tiering
PRECISION RENDERING

72-DPI PostScript Vector Coordinate Mathematics

Millimeter-accurate signature placement across mobile screens, 4K displays, and physical A4 paper.

Why this matters:Unlike clunky signature tools that blur or shift signatures across different screen sizes, our vector engine calculates exact fractional coordinates. A signature placed on a phone screen lands in the exact millimeter position when printed onto corporate letterhead.
Engineering Specifications
Captures responsive normalized coordinate ratios (x_frac, y_frac) in DOM viewport space
Applies vertical inversion PostScript mathematics for 72-DPI PDF coordinate geometry
Guarantees pixel-perfect vector fidelity when burning signatures into final PDF vouchers
PHYSICAL-TO-DIGITAL

Live QR Certificate of Execution & Auditor Resolution

Instant authenticity verification from paper printouts to live blockchain-style tamper ledgers.

Why this matters:Anyone holding a printed physical voucher can point their smartphone camera at the embedded QR code. It resolves directly to the live digital certificate, showing the original authorizer signatures, timestamps, and payment proof in real time.
Engineering Specifications
Encodes a secure direct resolution URL pointing to /document/[id]
Presents live tamper-evident Certificate of Execution accessible without login hurdles
Allows external banks, vendors, and statutory auditors to verify authenticity on demand
STATUTORY & REGULATORY STANDARDS

Simple Electronic Signatures (SES) for Internal Governance

Nigerian Evidence Act (Section 93 & 84)

Section 93 recognizes electronic signatures where the technique used identifies the signatory and signifies approval. Section 84 establishes conditions for computer-generated records: authentic device telemetry, monotonic timestamps, and server log integrity.

Global Corporate Governance (US ESIGN & UK ECA)

Meets global standards for internal corporate authorizations, board resolutions, and procurement split-disbursements. Designed specifically for operational non-repudiation rather than contested external land registry deeds.

COMPLIANCE ANSWERS

Frequently Asked Security Questions

Everything your Chief Information Security Officer (CISO) and Head of Internal Audit need to know.

Need a Custom Compliance or Security Review?

Our engineering team works directly with corporate compliance officers, bank treasury teams, and internal audit committees.