Everything you need to know about Kura Protocol. Can't find an answer? Get in touch.
Product
Each photo or video you shoot through the Kura app that is cryptographically signed, geo-stamped, and anchored to the Internet Computer blockchain counts as one certified capture. Each capture generates a unique SHA-256 hash, records your GPS coordinates and timestamp, and writes a permanent record to the ICP blockchain — all in real time.
The moment you capture media, Kura computes a SHA-256 hash of the file and submits a transaction to the Internet Computer Protocol (ICP) blockchain. This creates an immutable, timestamped record that anyone can verify independently — without relying on Kura's servers. The original file never changes; if it did, the hash would no longer match the on-chain record.
Biometric binding links each capture to the device identity of the person who took it, using the device's secure enclave (Face ID, Touch ID, or equivalent). This creates a cryptographic chain of custody — proving not just that the file is unmodified, but who was holding the device when it was recorded.
Yes. Every certified capture gets a public verification link you can share with anyone. The recipient can upload the file on the Verify page and Kura will check the SHA-256 hash against the blockchain record — no account required. For private records, you control who has access.
Security & Privacy
All media and metadata is end-to-end encrypted at rest and in transit using AES-256. Kura is fully GDPR compliant — we never sell, share, or process your data beyond what is necessary to deliver the service. Enterprise customers can request a Data Processing Agreement (DPA). You retain full ownership of all your certified media at all times.
No — and that is by design. Kura uses advanced end-to-end encryption so that nobody, including us, can view your media. Your photos, videos, and audio are encrypted on your device before they ever reach our infrastructure. We only ever handle encrypted data that is meaningless without your private key. This architecture is also why Kura is fully GDPR compliant — we cannot access personal data we were never able to see in the first place.
You do — exclusively. Your encryption keys are derived from your Internet Identity, which is anchored to the biometric hardware on your device (Face ID, fingerprint, or equivalent). Kura's servers never receive your keys. Even if our infrastructure were ever compromised, your media would remain completely unreadable to any third party.
Deleting your account removes all personal data and encrypted media from Kura's infrastructure in line with your right to erasure under GDPR. The blockchain record (a cryptographic hash only — never the media itself) is immutable by design, as this is what guarantees the integrity of your certified evidence. No personal information is stored on-chain.
Internet Identity is a privacy-preserving authentication system built on the Internet Computer. It uses your device's biometric hardware (Face ID / fingerprint) to create a cryptographic identity — no password, no email, no personal data stored on Kura's servers. Each service you use gets a different anonymous identifier, so your activity cannot be tracked across apps.
Legal & Compliance
A structured PDF document containing the original media, its cryptographic SHA-256 hash, the ICP blockchain transaction ID, verified GPS coordinates, capture timestamp, device fingerprint, and biometric binding record. The document is formatted to meet evidentiary standards used in legal proceedings and can be submitted directly to courts, insurers, or regulatory bodies as certified evidence.
Blockchain-timestamped evidence and cryptographic hash verification are increasingly recognised across legal jurisdictions. Kura's court-grade export is designed to meet the chain-of-custody and authenticity standards required by legal proceedings. For specific jurisdictional guidance, we recommend consulting a legal professional.
Yes. Enterprise includes REST API access, webhooks, and SSO/SAML integration out of the box. Our team can also scope bespoke integrations for large-scale deployments — including direct integrations with legal case management systems, newsroom tools, and enterprise document workflows. Contact us at hello@kuraprotocol.io.
Still have a question?
Our team typically responds within one business day.