Attested is a secure evidence sharing platform built for legal professionals. You upload evidence files, Attested hashes them with SHA-256 to verify integrity, and you share them through time-limited links. Every viewer is identified through viewer identity watermarking, so if a file leaks, you can trace it back to the person who viewed it.
Who is Attested for?
Attorneys, paralegals, insurance adjusters, HR departments, and law enforcement agencies. Anyone who needs to share sensitive media and prove it was not altered. Attested is especially useful for solo practitioners and small firms that handle evidence-intensive litigation but cannot justify enterprise e-discovery platforms. Defense attorneys use it to verify the integrity of discovery materials received from prosecution or opposing counsel.
How do I get started?
Create a free account, upload a file, and share the generated link. The Essential plan includes 200 MB of storage with auto-expiring file sharing. No credit card required. A welcome guide walks you through the key features on your first login.
What file types does Attested support?
Attested supports video (MP4, MOV, WebM, AVI), audio (MP3, WAV, M4A, AAC), images (JPEG, PNG, GIF, WebP, HEIC), and documents (PDF, Word, text files, spreadsheets including DOCX, TXT, CSV, and XLSX). All file types receive SHA-256 integrity verification, access audit trail, and certificates. Video, audio, and image files additionally receive viewer identity watermarking during viewing.
What is the Activity Feed?
The Activity Feed on your dashboard shows a real-time log of who viewed your shared evidence and when. You see the viewer’s verified identity, the file they accessed, and the timestamp. You can filter by case, time range, or activity type to find specific events. Email notifications still go out separately.
How do I organize files by case?
Click “New Case” on your dashboard to create a case or matter. Assign files to cases during upload or afterward from the file actions menu. Each case can have its own Bates numbering prefix and confidentiality designation. Cases help you group related evidence and track productions.
Is there a walkthrough for new users?
Yes. When you first log in, Attested displays a welcome guide that walks you through uploading, sharing, and viewing your evidence. You can reopen it at any time from the bottom of your dashboard.
How is Attested different from email or Dropbox?
Email and generic file sharing tools have no viewer attribution, no integrity verification, and no chain of custody logging. If you email a deposition video and it leaks, you have no way to trace who shared it. Attested embeds the viewer’s identity in every frame, hashes every file at upload, and logs every access event with timestamps and IP addresses.
How is Attested different from Relativity or Axon?
Relativity and Axon are enterprise platforms priced at $18,000 to $270,000+ per year. They serve large-scale document review and law enforcement evidence management. Attested serves the specific moment when attorneys share evidence with opposing counsel, co-counsel, or clients — and when defense attorneys need to verify the integrity of evidence they receive in discovery. Attested starts free and the Professional plan is $199 per month per firm, not per seat.
Security and Privacy
How does Attested prove a file has not been altered?
Every file is hashed with SHA-256 at upload. The hash is stored alongside the file. At any point, you can generate a certificate showing the original hash, upload timestamp, and file metadata. If the file were changed even by a single byte, the hash would not match. SHA-256 is the same standard defined in NIST FIPS 180-4.
What is viewer identity watermarking?
When a viewer opens a shared link, Attested overlays their identity onto the video or image using canvas rendering. The watermark includes their email address and IP address. If they take a screen recording or screenshot and share it, that identity data is embedded in what they captured. This is a visible watermark, not steganographic.
Does watermarking work on all file types?
Watermarking is applied to video, audio, and image files during viewing. For documents (PDFs, Word files, spreadsheets), the content is text-based and extractable regardless of any visual overlay, so watermarking is not effective for attribution on those file types. All file types still receive SHA-256 integrity verification, chain of custody logging, and certificate generation.
Where is my data stored?
Files are stored in Supabase Storage, which runs on AWS infrastructure. Data is encrypted at rest with AES-256 and encrypted in transit with TLS. Attested does not sell or share your data.
Can Attested staff access my files?
Attested uses Row Level Security on all database tables, meaning queries are scoped to your account credentials. We do not access your files for advertising, analytics, or any purpose outside of technical support you specifically request.
What is viewer verification?
When you require verification on a share link, recipients must confirm their identity by entering a code sent to their email address before viewing. Their verified name and email are logged in your Activity Feed and access records, creating a stronger chain of custody than anonymous viewing. Verification includes rate limiting and brute force protection.
What are access acknowledgments?
When a recipient opens a share link, they must acknowledge that the material is confidential, agree not to redistribute, and consent to access logging before viewing. Every acknowledgment is timestamped and logged in your chain of custody records.
What are confidentiality designations?
You can mark cases as Confidential, Attorney Eyes Only, Privileged, or Work Product. The designation appears as a banner when viewers access evidence and is included on certificates. Designations are set per case and apply to all files within it.
What happens when I download a file?
You see a warning that chain of custody protections no longer apply once evidence leaves the platform. You must acknowledge this before the download proceeds. Your acknowledgment is logged.
What is work product protection?
Attested separates your internal notes, tags, and case organization from the evidence itself. When you share evidence with opposing counsel, they see only the clean file plus Bates number, confidentiality designation, and exhibit sticker. Your work product never leaves the firm.
Can judges see the original without watermarks?
Yes. View Original mode serves the unmodified file with zero watermark overlay. Watermarks are a rendering layer and never alter the original evidence. This is useful when a court requires the original file for review or when submitting evidence for the record.
What authentication methods does Attested support?
Attested supports email and password, magic link login, Google OAuth, and Microsoft OAuth. All authentication is handled through Supabase Auth with HTTP-only cookies for session management.
Legal Compliance
Can Attested certificates be used in court?
Attested generates certificates documenting file hash, timestamp, and access history. Whether a court accepts this evidence depends on the jurisdiction and how the evidence is presented. The certificates are formatted to support authentication under FRE 902(13) and 28 U.S.C. § 1746. Consult your attorney about admissibility under the applicable rules in your jurisdiction.
What certificate types does Attested generate?
Three types. FRE 902(13) for federal self-authentication of electronic records. FRE 902(14) for verifying that a copy matches the original via hash comparison. And a Louisiana Art. 901(B)(9) authentication packet for state courts that require live witness testimony. The Louisiana packet includes system documentation and suggested foundation questions for your witness. Certificates are generated using court-specific templates for EDLA, MDLA, WDLA, Louisiana State, and Generic Federal formats.
Does Attested work for Louisiana state courts?
Yes. Louisiana has not adopted the federal self-authentication rules (FRE 902(13) and 902(14)), so state courts require witness testimony under Article 901(B)(9). Attested generates a Louisiana-specific authentication packet with system documentation, chain of custody records, and suggested foundation questions.
What is a chain of custody log?
Every time someone accesses a shared file, Attested records the action with a timestamp, IP address, and user agent. This log is available to the file owner and can be included in a certificate. It documents who saw the file and when.
Does Attested support litigation holds?
Yes. Professional and Enterprise plans include litigation hold. When a hold is placed on a file, it cannot be deleted or modified regardless of expiration settings. This is designed to help satisfy preservation obligations under FRCP 37(e) during discovery.
What are Bates numbers and how does Attested handle them?
Bates numbers are sequential identifiers used in litigation to label every file in a document production. Attested assigns Bates numbers automatically when files are added to a case. You can set a custom prefix per case (for example, “JOHNSON-”) or use the default prefix. Bates numbers appear on shared files, in viewer identity watermarks, and on certificates.
Are Bates numbers permanent?
Yes. Once assigned, a Bates number is never reused or reassigned, even if the file is removed from a case. This follows standard legal practice for document productions. Bates assignment uses row-level locking in the database to prevent duplicates.
Is Attested HIPAA compliant?
Attested does not currently have a signed Business Associate Agreement in place. If you need HIPAA compliance for medical evidence, contact us to discuss your requirements before uploading protected health information. A HIPAA BAA is available on the Enterprise plan.
What court formats do you support?
Attested includes certificate templates for EDLA (Eastern District of Louisiana), MDLA (Middle District of Louisiana), WDLA (Western District of Louisiana), Louisiana State, and Generic Federal formats. Exhibit sticker formatting follows court-specific conventions for each jurisdiction.
What is Trial Mode?
Trial Mode is a compact, mobile-friendly view of all case exhibits designed for use at counsel table. It includes bench conference cards for quick reference during proceedings, 15-minute share links for in-court use when sharing exhibits with the bench or opposing counsel, and trial preparation checklists to help organize your evidence before court.
What rules of evidence does Attested support?
Attested’s features map to FRE 901(b)(9) for system authentication, FRE 902(13) for self-authenticating electronic records, FRE 902(14) for hash-verified copies, FRCP 37(e) for ESI preservation obligations, and Louisiana Art. 901(B)(9) for state court authentication. Certificates reference the applicable rule and are formatted per 28 U.S.C. § 1746.
Can I electronically sign certificates?
Yes. When generating an FRE 902(13), 902(14), or Louisiana C.E. Art. 901 certificate, you can electronically sign using the /s/ convention accepted by federal courts. Your name, title, bar number, and declaration under penalty of perjury are rendered directly on the PDF. You can also download unsigned certificates to print and sign by hand.
Can I view a sample certificate before signing up?
Yes. A public demo certificate is available at attested.legal/api/certificates/demo. It shows the format, hash documentation, and access history structure that a real certificate includes.
Sharing and Access
How do share links work?
When you share a file, Attested generates a unique token-based URL. You set an expiration time (24 hours, 48 hours, or 7 days) and optionally a maximum view count. When the link expires or hits the view limit, it stops working. The original file is unaffected.
What do recipients see before accessing evidence?
Recipients first verify their identity with their email address. Then they see a legal acknowledgment screen where they must confirm they understand the material is confidential, agree not to redistribute it, and consent to access logging. If the case has a confidentiality designation like Attorney Eyes Only, it is displayed prominently. Only after completing both steps can they view the evidence.
What is the difference between Temporary Access and Preserved Evidence?
Temporary Access is for time-sensitive sharing where files expire automatically after the set duration. Preserved Evidence retains files permanently until you manually delete them, and supports litigation hold to prevent accidental deletion. Preserved Evidence requires a Professional or Enterprise plan.
Can I revoke a share link before it expires?
Yes. From your dashboard, you can revoke any active share token immediately. The link stops working the moment it is revoked. Revocation is logged in your chain of custody records.
Do viewers need an Attested account?
No. Viewers open the link in a browser and are asked for their email address so Attested can embed it in the watermark and log the access. They do not need to create an account.
Can I share multiple files at once?
Yes. Select multiple files and generate one secure bundle link. Recipients open a single URL and see all included files, each with the same viewer identity watermarking and chain of custody tracking as a single-file share. Batch sharing is available on Professional (up to 25 files per bundle) and Enterprise (unlimited) plans.
How do I manage all my active share links?
The Shared Evidence section on your dashboard shows every share link you have created, whether active, expiring soon, expired, or revoked. From there you can copy links, extend expiration dates, or revoke access. Links expiring within 24 hours are highlighted so nothing slips through.
Can I extend a share link that is about to expire?
Yes. From the Shared Evidence section, click the actions menu on any active link and choose to extend by 24 hours, 7 days, or 30 days. The extension is logged in your access records.
What happens when I revoke a share link?
The link stops working immediately. Anyone who tries to open it sees an access denied message. Revocation is logged in your chain of custody records. You can create a new link for the same file if needed.
Tags, Search, and Organization
How do tags work?
Attested includes 28 pre-built legal tags (like Deposition, Body Camera, Medical Records, Police Report, Exhibit, and more) plus the ability to create custom tags. You can apply tags during upload or afterward from the file actions menu. Tags work across cases, so you can filter all your Deposition files regardless of which case they belong to.
Can I search across all my evidence?
Yes. The search bar on your dashboard searches across file names, SHA-256 hashes, tags, and case names. You can also filter by file type, upload date, status, storage mode, and tags. Filters combine so you can narrow down to exactly what you need.
How many cases can I create?
Essential accounts can create up to 3 cases. Professional and Enterprise accounts have unlimited cases.
Can I move files between cases?
Yes. You can reassign a file to a different case from the file actions menu on your dashboard. The file retains its original Bates number from the first case it was assigned to.
What is discovery production tracking?
Productions let you formally produce evidence to opposing counsel with a complete production log. Each production tracks the recipient, files produced with Bates ranges, SHA-256 hashes, and a downloadable production log. Available on Professional and Enterprise plans.
Can I download my original files?
Yes. File owners can download their original uploaded files at any time from the file viewer or the actions menu. Downloads are logged in the audit trail.
Notifications and Emails
How do access notification emails work?
When someone views your shared evidence, Attested can send you an email notification with the viewer’s identity, the file they accessed, and the timestamp. You can toggle notifications on or off from your dashboard settings.
Is there a limit on notification emails?
Essential (free) accounts receive up to 10 access notification emails per month. Professional and Enterprise plans have unlimited notifications. You can always see all access events in your Activity Feed regardless of the notification limit.
What other emails does Attested send?
Attested sends three types of transactional emails beyond access notifications: a confirmation when you upload your first file (including the SHA-256 hash), a notification when you create your first share link, and a storage warning when you approach your plan limit. These are one-time emails designed to help you get started.
Pricing and Billing
What does the Essential plan include?
The Essential plan is free and includes 200 MB of storage, up to 3 files, 3 active share links, 48-hour auto-expiring file sharing, SHA-256 integrity verification, viewer identity watermarking, access audit trail, and up to 3 cases. No credit card required.
What does the Professional plan include?
Professional includes 50 GB of storage, up to 500 files, 500 share links per month, 50 certificates per month, Temporary Access and Preserved Evidence, FRE 902(13), 902(14), and Louisiana Art. 901(B)(9) certificates, FRCP 37(e) litigation hold, unlimited cases with Bates numbering, batch sharing up to 25 files per bundle, tags, search and filter, confidentiality designations, access acknowledgment gates, email notifications, and discovery production tracking. It costs $199 per month or $169 per month on an annual plan. Pricing is per firm, not per seat.
What does the Enterprise plan include?
Enterprise includes everything in Professional plus 500 GB of storage, unlimited files, 2,500 share links per month, 250 certificates per month, unlimited batch sharing, priority support with a 24-hour SLA, custom branding, API access, HIPAA BAA availability, and a dedicated onboarding session. It costs $599 per month or $499 per month on an annual plan. Pricing is per firm, not per seat.
Is batch sharing available on all plans?
Batch sharing requires a Professional ($199/mo) or Enterprise ($599/mo) plan. Essential accounts can share files individually.
Is there a refund policy?
Yes. If you are not satisfied within the first 30 days, contact us for a full refund. See the refund policy page for complete terms.
Do you offer custom pricing for larger organizations?
The Enterprise plan at $599 per month covers most firm needs. For organizations with higher volume or specific compliance requirements, contact us to discuss custom arrangements.
What happens if I downgrade my plan?
If you downgrade from Professional to Essential, your existing Preserved Evidence files are not deleted, but you cannot upload new files in Preserved Evidence mode. Files over the Essential storage limit remain accessible but you cannot upload more until you are within the limit. Certificates generated before the downgrade remain valid.
What happens if I cancel my subscription?
Your account reverts to the Essential plan at the end of your billing period. You retain access to your files within the Essential storage limit. Preserved Evidence files are not immediately deleted, but you should export any certificates or download any files you need before cancellation.
How does annual billing work?
Annual plans are billed once per year at a discounted rate. Professional is $2,028 per year ($169/month equivalent, save 15%). Enterprise is $5,988 per year ($499/month equivalent, save 17%).
How does usage-based pricing work?
Your subscription includes a generous monthly allowance of evidence shares and certificates. Professional includes 500 shares and 50 certificates per month. Enterprise includes 2,500 shares and 250 certificates per month. If you exceed the included amount, overage is billed automatically at $0.15 per share and $1.50 per certificate at the end of each billing cycle. Most attorneys stay well within their included limits.
Can I switch between monthly and annual billing?
Yes. You can switch from monthly to annual billing at any time from your billing page. The change takes effect at the start of your next billing period. Contact support if you need to switch from annual to monthly.
Technical
What happens to files when a Temporary Access link expires?
When the expiration time is reached, the share link stops working and the file is marked for deletion. Deletion is permanent and the file cannot be recovered after expiration.
Can I download a copy of my certificate?
Yes. From the dashboard, you can generate and download a PDF certificate for any file. The certificate includes the SHA-256 hash, timestamps, file metadata, and access log.
What browsers does Attested support?
Attested works in Chrome, Firefox, Safari, and Edge. The watermark overlay uses canvas rendering which is supported in all modern browsers. Internet Explorer is not supported.
Is there a file size limit?
Individual file uploads are subject to browser-based upload limits, which vary by connection speed and browser. For very large files (multi-gigabyte body camera footage, for example), a desktop upload tool is planned for a future release. Contact support if you need to upload files larger than 1 GB.
Does Attested have an API?
API access is available on the Enterprise plan. Contact us for documentation and integration details.
Can I use Attested on my phone?
Yes. Attested is a web application that works in mobile browsers. The dashboard and viewer are responsive and function on phones and tablets. There is no native mobile app at this time.
What is the uptime SLA?
Enterprise plans include a Service Level Agreement. Attested is hosted on Vercel with Supabase infrastructure, both of which provide high availability. For specific uptime commitments, see the SLA page or contact us.
Resources and Support
Where can I find guides and documentation?
The Resources page at attested.legal/resources includes downloadable PDF guides covering getting started, FRE 902(13) certificate usage, evidence handling best practices, legal terminology reference, a spoliation checklist, and a cost analysis comparing Attested to alternatives.
How do I contact support?
Email support@attested.legal or use the contact link in the footer. Enterprise customers receive priority support with a 24-hour response SLA. All other plans receive support via email.
Can I book a demo?
Yes. Book a live demo at calendly.com/anthony-kulick/attested-demo. Demos run about 25 minutes and walk through the full upload, share, and certificate workflow using real evidence files.
Does Attested have a blog?
Yes. The Attested blog at attested.legal/blog covers topics including FRE 902(13) authentication, spoliation sanctions and FRCP 37(e), and body camera footage chain of custody. New articles are published regularly.