Tito Digital Evidence records what a website displayed, from inside its own browser, and produces a folder that somebody else can verify without this app.
You type an address, navigate, and capture: the visible region, the whole page as a paginated document, the rendered source of the page, and a recording of the navigation with the audio the page played. For every navigation the app keeps the network context — the effective URL, the redirects it went through, the status code, the response headers, the server's certificate chain with issuer and validity.
Before the first navigation, and again when the session closes, a public RFC 3161 timestamp authority certifies the instant. The whole session lies between those two certified instants. The root is also anchored in Bitcoin through OpenTimestamps, a second, independent proof of time.
WHAT COMES OUT
• One folder per session, numbered in a single unbroken run
• A plain-text manifest tying every file to its size, the instant it was written and its three digests
• A PDF/A-2b certificate with the identification, the procedure, the timeline, the addresses, the network context of each navigation, the root of the tree and the commands that verify all of it
• The timestamp authority's own certificates, so verification runs disconnected and goes on running if the service is ever switched off
HOW SOMEBODY ELSE CHECKS IT
By running the commands the certificate prints. The files with shasum -a 256 against the manifest, the BLAKE3 digest with a script that travels in the folder, the tree rebuilt from those digests, the timestamp tokens with openssl ts -verify, the signature with openssl dgst -verify. On any Mac, with nothing installed beyond Apple's own command line tools, offline, without this app and without trusting whoever wrote it.
IT ALWAYS CAPTURES
No network, a wrong clock, an authority that does not answer — it captures just the same. What changes is the level of temporal confidence the record declares, never whether the work can be done. Each proof of time arrives on its own.
THE ORIGINAL IS NEVER TOUCHED
No editing, no cropping, no filters, no colour correction, no recompression. The app does not alter the rendering of the page either, which rules out reader mode, ad blocking, translation and imposed themes. Nothing is imported from outside: an artifact is born inside the app, in real time, or it does not exist.
WHAT IT REFUSES TO PROMISE
This is not an electronic authentication of the captured content and it does not attest to its truthfulness. It is the technical record of a capture. Whether the displayed content corresponds to the reality it purports to show — staging, editing, a forged page — is beyond what any capture can establish, and the certificate says so on its first page rather than leaving it to be assumed.
PROCEDURES AND IDENTIFICATION
Sessions can be filed under a procedure. The organisation, the unit, the person responsible and their registration are written once and frozen inside each session, so changing them later does not touch what was already produced. An audit panel gathers the deletions and every timestamp attempt.
PRIVACY
No account, and no server of ours anywhere. No analytics, no telemetry, no third-party crash reporting, no third-party SDKs, no tracking, no advertising. What travels is what your browsing asks for, and digests and block numbers to the timestamp services — not data about anybody, and never a file.
THE PRICE
Browsing, capturing, recording, hashing, timestamping, issuing the certificate and reading everything inside the app are free and unlimited. The free plan includes one export of a session folder, once. A subscription lifts that limit.
Terms of use: https://titoprivacyai.com/evidence/terms
DISCLOSURE: The application provides technical records and verification mechanisms to support potential forensic analysis, but does not guarantee the acceptance of the content in judicial or administrative proceedings.
Show more
