- Architecture
- Two multi-tenant applications. TraceX is event-sourced and built to be embedded — widgets, an SDK and a REST API; CrestX runs behind a closed perimeter.
- The record
- TraceX keeps a per-tenant append-only event log as the source of truth — editing history is refused, not merely discouraged — with every view derived from it. CrestX keeps a per-tenant activity ledger plus a content fingerprint on each evidence item.
- Verification
- TraceX re-walks its whole event chain on demand behind an authenticated check, and serves an unauthenticated per-unit provenance page addressed by GS1 Digital Link. CrestX re-verifies its own chain and fingerprints on screen.
- Intelligence
- Deterministic and explainable, not learned: TraceX scores a match into a confidence figure that prints its own reasons; CrestX scores evidence into a transparent provenance readout capped by its strongest tier.
- Integration
- Open-format exports, route-served: GS1 EPCIS 2.0 traceability documents in JSON-LD, Peppol BIS Billing 3.0 / UBL 2.1 invoice XML, and GS1 Digital Link identifiers. Accounting-connector integration is built against OAuth 2.0.
- Security
- Per-tenant isolation applied uniformly on every data access path, role-scoped party portals, read-only reviewer rooms, passwords and API keys never stored in a readable form, embeds that expire on their own, and stored credentials encrypted at rest.