← All resources
Resources · Article

What Is an Evidence Bundle?

A plain-language guide to the customer-held artifact GeoClear hands you. What it contains, what it proves, what it doesn't, and how to verify one in five minutes.

2026-04-29 · ~7 min read · Auditor-friendly explainer

If you are reviewing a mortgage file, an insurance claim, or an autonomous-system decision years after it happened, you are going to ask one question:

What did the system actually rely on at decision time?

A screenshot of a dashboard is not enough. A line in a log file is not enough, logs expire, get rotated, get lost in vendor migrations. What you need is an artifact that is self-contained, tamper-evident, and verifiable on its own merits, without having to call the original API again.

That artifact is the GeoClear Evidence Bundle.

What's in the bundle

An Evidence Bundle is a customer-held evidence package containing the operational receipt, retained evidence, verification material, and supporting references needed for later review. It travels with your decision record and verifies independently, without contacting GeoClear servers.

Detailed bundle internals (exact file layout, verifier algorithm, key-management guidance) are available to qualified evaluators under NDA, see the Security & Verification Whitepaper. Public surfaces stay at the high-level description above; the implementation detail lives behind the NDA gate while patent disclosure is pending.

How to verify a bundle in five minutes

  1. Open the browser verifier.
  2. Drag the bundle in.
  3. The verifier checks the receipt against the bundled verification material.
  4. Green checkmarks = verified. Red = mutated since issuance.

Verification runs locally in your browser using retained verification material. GeoClear's servers do not participate in the verification result. If GeoClear is unreachable, taken offline, or no longer exists, the bundle still verifies on its own terms, which is the point.

What this proves, and what it doesn't

This is the part most procurement reviewers want to see in plain English.

What this proves

  • GeoClear issued this receipt at the timestamp inside it.
  • The recorded payload has not been mutated since issuance.
  • The verification material traces to a stable, customer-verifiable trust anchor.
  • The customer can re-verify the receipt later without contacting GeoClear servers.

What this does not prove

  • That every upstream dataset was perfect.
  • Full legal or regulatory compliance.
  • That a downstream business decision was risk-free.
  • That the physical world itself was proven (we record what was checked, not whether the world matched).

That distinction is deliberate. It is the right boundary for auditability without overclaiming what cryptography can prove.

Real-world examples

Three of these examples have downloadable sample bundles you can verify in 5 minutes, pick the vertical that matches your workflow:

Mortgage QC →

A loan originated in 2026 includes the flood determination, census tract, and risk score in the file. Three years later, a secondary-market reviewer asks what data the lender relied on. The Evidence Bundle on file produces, in five minutes, the full audit trail. No vendor support ticket. No "trust our logs." See the sample bundle gallery →

Insurance audit

A claim adjuster pulls a policy from 2026 to investigate a peril. The bundle shows the climate composite, the perils that were considered, and the timestamp, bound to retained verification material from the moment the policy was priced. (Insurance vertical sample is on the roadmap; for now, pick the closest field shape from the sample bundles gallery.)

Agentic-commerce chargeback

A merchant disputes a chargeback on a $5,000 transaction. The bundle includes the transaction record, consent context, and compliance snapshot from the original verdict, the issuing bank’s investigator can verify the consent context independently using the customer-held verification material.

Drone delivery audit →

A delivery is challenged: was the drone authorized to land at that address at that time? The bundle includes the location result at decision time, with the operational receipt binding it to GeoClear’s response. See the sample bundle gallery →

Agent-to-agent verification →

An autonomous agent calls a result-returning tool and passes the operational receipt to a downstream agent (or human reviewer). The bundle is what the downstream consumer verifies independently, tamper-evident proof of what the upstream agent saw, regardless of whether the upstream agent’s logs are still intact. See the sample bundle gallery →

What you should retain

For high-stakes results, retain the full Evidence Bundle alongside the rest of your file. The bundle is self-contained and verifies independently, for as long as your audit horizon requires.

For procurement / SOC 2 / ISO contexts, the verification material is durable: it does not depend on GeoClear’s continued operation for re-verification.

Try it

, Shailesh, founder at GeoClear
More: All resources · Evidence Bundle verification on the Security page · Compliance: records that outlive the application