When the Commission asks, what do we hand over?
A read-only link, not a folder of PDFs. Behind it is one verification record per person, where every score comes from a stored check and every gap is stated. Every view of a file is logged with who, when, from which device and where. Exports need a reason, carry a hash and a watermark, and can be verified or revoked later.
| Time | Person | Action |
|---|---|---|
| 09:12 | S. Ashton | Viewed the record |
| 09:14 | S. Ashton | Viewed the passport image |
| 11:02 | M. Ogier | Exported it, reason: periodic review file |
| 11:06 | GFSC | Verified that export by its hash |
One record per person. Nothing invented.
Identity, screening, certificates and cross-checks on one page, with the outcome at the top and the evidence for each line underneath. A check that did not run says "not read". A document that is not held says "not on file". A difference between what was typed and what the document says is shown, not smoothed over.
- Every score from a stored check
- Gaps stated in plain words
- Fiduciary and crew variants of the same record
| Check | Result | Detail |
|---|---|---|
| Typed vs document | Differs | Nationality typed "Guernsey", document GBR |
| Declaration location | Guernsey | St Peter Port, residential network |
| Proof of address | Not on file | No document held; the record says so |
Every view, logged
Opening a record, viewing a document image, exporting, viewing through an inspection link: each is a line on the record's access log with the person, the time, the browser and where they were. The log is part of the record, so an inspector sees who has looked at the file as well as what is in it.
- Who, when, device and location
- Exports logged with reason and hash
- Inspection-link views logged as such
Export needs a reason, and carries a hash
Exporting a record is a decision. It needs a reason from the Handbook's list, or Other with words; it excludes the images unless the exporter says otherwise; it carries a watermark with the firm, the exporter and the time on every page; and it is hashed. Who may export is a firm setting, MLRO and above by default.
- Reason required, logged
- Images excluded by default
- SHA-256 on the PDF and in the log
- SHA-256
- 3c9f 8a1e 27b0 … c9d2
- Verify at
- flarion.ai/record/verify/3c9f…
- Revocable
- Yes, from this screen
Read-only links for the Commission or an auditor
An inspection link is scoped to the files and registers you choose, opens with a six-digit code you give separately, expires when you say and can be revoked at any time. Five wrong codes kill it. Every document viewed through it is watermarked visibly and invisibly, keyed to the link, so a page found elsewhere can be traced back to it.
- Scoped, coded, time-limited, revocable
- Disclosures register never included
- Visible and invisible watermarks, traceable
| Link | For | Scope | Expires | Status |
|---|---|---|---|---|
| GFSC-2026-09 | GFSC on-site visit | 12 files, registers except disclosures | 30 Sep | Active |
| AUD-2026-03 | External audit | All files | 31 Mar | Expired |
The inspector enters a six-digit code you give them separately. Five wrong codes revoke the link. Every page and document they open is logged here and watermarked with the link, visibly and invisibly.
Verify, or revoke, any export later
The hash on an exported record can be checked at a public page: genuine or not, exported when, by whom and why, and whether the firm has since revoked it. A PDF that was altered does not verify. A record the firm no longer stands behind verifies as revoked.
- Public verification by hash
- Altered PDFs fail
- Revocation shows
- Result
- Genuine, current
- Record
- Marie Le Page, Ormer Family Trust
- Exported
- 22 Sep 2026 16:40 by the MLRO
- Reason
- Periodic review file
- Status
- Not revoked
Questions about evidence and inspection
What is a verification record?
One page per person: identity checks with their scores, screening result and decisions, certificates where relevant, cross-checks between what was typed and what the documents say, the rating, and who has viewed it. Every score comes from a stored check. Where there is no evidence the record says so in plain words rather than showing a tick.
Who can export it?
The MLRO and above, by default; the firm can widen that in Settings. Every export needs a reason, from the Handbook's list or Other with words, carries a watermark with the firm, the exporter and the time, and is hashed. The hash, the reason and the exporter are logged on the record.
How does an inspector verify a PDF?
The hash printed on the export is entered at flarion.ai/record/verify. The page says whether that export is genuine, when it was made, by whom and for what reason, and whether the firm has since revoked it. A revoked export verifies as revoked.
What does the Commission see through an inspection link?
What you scoped: chosen files or all of them, and the registers you include. The disclosures register never leaves through a link. The inspector enters a six-digit code, every page and document view is logged, and every document is watermarked visibly and invisibly so a leaked page traces back to the link.
Open an inspection link in the demo.
We create one on a sample file, hand you the code and let you read it as the Commission would.