Basic10 TB
- Users
- 25
- Guests
- 10
- Integration and managed support
- Not included
- Disaster recovery
- Not included
- The six protection layers
- All six
- Suits
- Small and mid-sized law firms
From the first trace,to a clear record.
A Saudi platform that seals digital evidence as it arrives and keeps it, with its chain of custody, inside the Kingdom.
Can you prove it?
The data always exists. But on the day it is needed in a dispute, an investigation or an audit, the question becomes whether it stayed as it was.
Is it unchanged? Who has seen it? And when?
RM TraceVault is a Saudi company, based in Riyadh, set up to answer those questions. We lock your organisation’s evidential data from the moment it arrives and record every action taken on it.
When it is needed, we return it with what is needed to verify it: its fingerprint, the time it was received and its custody log.
One letter, a new fingerprint
Up to 50 MB in this demonstration.
The fingerprint is calculated in your browser. Nothing you type or choose is sent anywhere.
Evidence recordMatches the original
- Source
- Typed text
- Size
- 96 bytes
- Digital fingerprint
eeb71b75 f4389b28 eb8e02d2 7a92d1ef 5a25761f 5ac99e53 91040422 9b62d6ff 9cf96cac 90c8544a 0ce4ec9a 274464e0 0b9fcad7 35501d9c e8540f3d 4e1c6f08- Calculated on your device
- …
Original: the text before your edit
A fingerprint shows whether a file changed. On its own, it does not prove what the file shows.
The evidence journey
First, we receive.
Evidence arrives through the portal or our API over an encrypted channel, and its source and time of arrival are recorded.
Then, we document.
We take its digital fingerprint, an independent authority stamps the time of receipt, and it is encrypted with a key that belongs to your organisation alone.
Then, we preserve.
It is locked in storage that refuses any change or deletion for the retention period you set, even from administrators.
And on request, we produce.
Search, retrieve and export it as a signed package that carries its fingerprint, time stamp and custody log.
And this is its log
Every action taken on the file along the way is recorded with its time. This is what accompanies the file when it is produced.
An illustrative custody log for one file
Custody logReady to produce
- Received through the portalOver an encrypted channel, from the branch 14 security officer12 Oct 2026, 21:04:12
- Digital fingerprint taken
9f2c41d877b0e3a5…5c19e0a71e4212 Oct 2026, 21:04:12 - Receipt time-stamped by an independent authorityThe stamp is kept with the file12 Oct 2026, 21:04:13
- Encrypted with your organisation’s keyA key never used for another client12 Oct 2026, 21:04:14
- Locked until 12 October 2033Seven-year retention, set by case type12 Oct 2026, 21:04:15
- Deletion attemptRefused: the file is locked for the whole retention period14 Oct 2026, 09:12:40
- Viewed by legal counselView only, no download20 Oct 2026, 11:40:02
- Exported as a signed packageThe file, its fingerprint, time stamp and custody log27 Oct 2026, 14:05:31
Six layers behind every file
The same protection in every package, from the first file to the last.
- Fingerprint on receipt
9f2c 41d8 77b0 e3a5 0b6d … 5c19 e0a7 1e42Matches the copy producedFingerprint
Taken for every file the moment it arrives. Any later change, even one letter, alters all of it.
The original fingerprint stays with the file, so any copy produced later can be checked against it.
- Time stamp12 October 2026, 21:04:13 Riyadh timeIssued by an independent time-stamping authority
Trusted time
An independent authority stamps the moment of receipt, so the time never rests on our own clocks.
The stamp is kept with the file and can be checked at any later date.
- Organisation keyYours aloneNever leaves the key vault
Encryption
Each file is encrypted with its own key, and file keys are protected by a key that belongs to your organisation alone.
Keys are managed apart from the files, and your organisation’s key is never used for another client.
- Delete fileRefusedLocked until 12 October 2033
Lock
No change and no deletion for the whole retention period, even by administrators.
Your organisation sets retention for each case type, and a legal hold stops any disposal when needed.
- Viewed by legal counselBound to the entry beforeExported as a signed package
Custody log
Every receipt, view and retrieval goes into a signed log in which each entry is bound to the one before.
No entry can be removed or edited without it showing, and the log tells you who did what, and when.
- Your systemsEncrypted connectionThe vault
In transit
Evidence travels from your organisation’s systems to the vault over encrypted channels.
It is never exposed at any point on the way.
What your organisation can keep
- Email and attachments
EML, MSG, PST - CCTV footage
MP4, AVI, MOV - Contracts and scanned documents
PDF, TIFF, DOCX - Call and meeting recordings
WAV, MP3, M4A - System logs and database exports
LOG, CSV, JSON - Images, archives and any other format
JPG, PNG, ZIP
Upload through the portal or our API.
Who we serve
- Banking and financeRecords, correspondence and branch CCTV
- GovernmentEvidence and audit trails, kept in the Kingdom
- InsuranceClaims evidence and fraud cases
- Security servicesCCTV archives with a chain of custody
- Law firmsCase documents, exported on request
The evidence journey in under two minutes
From the moment it arrives to the signed package: what happens to every file inside the platform, in sound and picture.
Introductory film with English voice-over. The scenes are a conceptual illustration.
PackagesA fully managed service on an annual subscription, with the same protection in every package. We share pricing in a written proposal once we understand your needs. | Basic10 TB | Standard100 TB | Enterprise200 TB | Sovereign400 TBor as agreed |
|---|---|---|---|---|
| Users | 25 | 100 | 500 | Unlimited |
| Guests | 10 | 50 | 250 | Unlimited |
| Integration and managed support | Not included | Included | Included | Included |
| Disaster recovery | Not included | Not included | Included | Included |
| The six protection layers | All six | All six | All six | All six |
| Suits | Small and mid-sized law firms | Large law firms and legal departments | Banks and financial institutions | Government and large banks |
| Ask about Basic | Ask about Standard | Ask about Enterprise | Ask about Sovereign |
Packages
A fully managed service on an annual subscription, with the same protection in every package. We share pricing in a written proposal once we understand your needs.
Standard100 TB
- Users
- 100
- Guests
- 50
- Integration and managed support
- Included
- Disaster recovery
- Not included
- The six protection layers
- All six
- Suits
- Large law firms and legal departments
Enterprise200 TB
- Users
- 500
- Guests
- 250
- Integration and managed support
- Included
- Disaster recovery
- Included
- The six protection layers
- All six
- Suits
- Banks and financial institutions
Sovereign400 TBor as agreed
- Users
- Unlimited
- Guests
- Unlimited
- Integration and managed support
- Included
- Disaster recovery
- Included
- The six protection layers
- All six
- Suits
- Government and large banks
Every package has a dedicated encryption key, a lock against change and deletion, a digital fingerprint, an independent time stamp and hosting in the Kingdom. Disaster recovery keeps a second copy at a recovery site in the Kingdom.
Designed in line with Saudi law
- The Law of Evidence
- The Electronic Transactions Law
- The Personal Data Protection Law
The company
- Headquarters
- Riyadh, Saudi Arabia
- Platform data
- In the Kingdom, without exception
RM TraceVault is a Saudi company based in Riyadh, building a platform for digital evidence and chain of custody on a sovereign cloud in the Riyadh region.
Common questions
Can I send evidence through this website?
No. The website form is for enquiries only, so please do not send case files, sensitive personal data or passwords through it. Evidence channels are agreed with your organisation.
Where is our data kept?
In the Kingdom. Platform data, processing and backups stay on a sovereign cloud in the Riyadh region, and the disaster-recovery copy sits at a site in the Kingdom too.
Can anyone change or delete our files?
Not during the retention period. Storage refuses any change or deletion, even by administrators, and every view of a file goes into its custody log.
Does a fingerprint prove the content is true?
No. A fingerprint shows whether a file changed after it was received; on its own it does not prove what the file shows. That is why we keep its source, time of receipt and custody log with it.
Do you guarantee that a court will accept the evidence?
No. We design preservation so that it can be verified; how evidence is weighed is for the court in each case. We recommend checking with your legal counsel.
How are packages priced?
By annual subscription, based on the package and capacity. We share pricing in a written proposal once we understand your needs.
Book a consultation
Let’s keep your evidence ready for the day it is needed. Tell us about your organisation and what it needs to keep, and our team will reply by email.
- info@tracevault.sa
- Headquarters
- Riyadh, Saudi Arabia