0 items
How?
Add the exact original files for this part of the record. Keep them unchanged; a different export or edit has a different fingerprint.
Add link and screenshots
The link is recorded, not fetched or verified.
IT security
Keep the access request, real approval, grant and expiry records in one dated export.
Keep the access request, real approval, grant and expiry records in one dated export. Keep your original source records together, then date the exact files. It cannot approve or revoke access, identify the approver, establish a genuine session or prove required security controls operated.
Your photos and files stay on your device, so keep them.
EXAMPLE
Break-glass or just-in-time admin access: approval, grant and expiry as one dated chain
1 Nov 2026
Authority time: 14:02 UTC · example
Bitcoin block time: 14:10 UTC · example
Last checked: 15:02 UTC · example
Bitcoin block time: 14:10 UTC · example
Last checked: 15:02 UTC · example
✓ Dated◆ Permanent
Now keep it safe: three things
- Keep your photos and files unedited. The receipt only matches the originals. Put them in an album such as “My records”.
- Save this receipt to your camera roll.
Keep the receipt file too. The image is a handy copy; checking needs the file.
- Email it to yourself.Email it to myself
Your mail app opens a draft. Attach your receipt image and receipt file. Don’t attach your photos or documents. Timevolt does not send it or know whether it was sent.
Your record, one step at a time.
Your photos and files stay on your device, so keep them.
Local preview: files are fingerprinted here. Notes and progress stay in this browser. Keep downloaded copies; browser storage is not a backup.
0 items
How?
Record the date, time, place and who you spoke to. New notes are saved separately rather than editing an old note.
How to keep notes that hold upWrite it down
By making a receipt you agree to the Terms and Privacy Policy. The Bitcoin record is permanent.
By making a receipt you agree to the Terms and Privacy Policy. The Bitcoin record is permanent.
How to keep notes that hold up
Write notes as soon as you can. Keep the original account rather than replacing it later; the venue decides what weight it gets.
- Write it down straight away, on paper or in the box on a step.
- Put the date, time and place at the top, and who you spoke to.
- Use their words where you can; separate what you saw from what you were told.
- Sign or initial a paper note, photograph it and add the photo.
- Never edit an old note. Add a new dated entry when something changes. A device save time is not independent time evidence or proof of event order.
Break-glass or just-in-time admin access: approval, grant and expiry as one dated chain
Break-glass or just-in-time admin access: approval, grant and expiry as one dated chain
01 · Keep the exact files
Keep the original files for break-glass or just-in-time admin access: approval, grant and expiry as one dated chain. Include any existing photos, signed records and source-system exports.
Records to keep: Request, approver decision, grant time and window as one chain entry
Break-glass or just-in-time admin access: approval, grant and expiry as one dated chain
02 · Date the file’s code
Your device fingerprints the selected file or manifest. Dated follows an independent timestamp; Permanent follows Bitcoin anchoring.
An independent time, tied to the exact bytes.
Break-glass or just-in-time admin access: approval, grant and expiry as one dated chain
03 · Keep the evidence
Keep the original files and complete receipt separately, alongside any existing venue, signature and workflow records.
Keep the originals too. A changed or compressed copy has a different fingerprint.
Try a file. It stays here.
Make a test receipt on this device.
By making a receipt you agree to the Terms and Privacy Policy. The Bitcoin record is permanent.
or drop a file here
Related cases
Related cases from nearby fields. We don’t claim a time receipt would have changed the result.
What courts, schemes and regulators say.
Positions below refer to the cited rule or record type, not endorsement of Timevolt. This service is not represented as an eIDAS qualified timestamp provider. A non-qualified timestamp does not receive the qualified timestamp presumption.
NCSC
Just in time and just enough administration
Guidance describes actual approved temporary credentials and constrained privileges; a timestamp receipt is not a credential or grant.
Source summary as of 2026-10-29. Check the current source and applicable local rules.
Read the sourceNCSC
Log and audit administrator activities
Collect relevant who/when/where/action data and connect it to monitoring and response; a bundle hash does not replace the native logs.
Source summary as of 2026-10-29. Check the current source and applicable local rules.
Read the sourceMicrosoft Learn
PIM activation/approval role settings
Approvals and expiry are actual per-role/resource configuration; provider documentation does not confer legal or audit acceptance on an external date.
Source summary as of 2026-10-29. Check the current source and applicable local rules.
Read the sourceOther ways to do this
Prices change. Check each provider’s site for current prices and service details.
Related workflows.
Proves / Doesn’t prove
Proves
A completed time receipt shows that the exact selected file existed by the independently witnessed time. You can check whether a later copy has the same bytes. It does not establish creation time, authorship, identity, event order, location or the truth of the contents.
Doesn’t prove
It cannot approve or revoke access, identify the approver, establish a genuine session or prove required security controls operated.
It cannot approve or revoke access, identify the approver, establish a genuine session or prove required security controls operated.
These are the bounds of a completed proof. The local tester does not establish any time. The chosen court, scheme or regulator decides what to accept.
Questions, answered plainly.
Your file stays on your device. During normal receipt creation, your device sends a randomized code made from its fingerprint, plus encrypted recovery data. It doesn't send the plain fingerprint or the random value that opens the code. Keep the original file and the complete receipt for checking. Privacy Policy.
Does dating a request grant access?
No. NCSC describes an actual approval process issuing temporary credentials; file dating does not perform that process.
Source summary as of October 30, 2026. Check the current source and its scope.
Context for this answerDoes the receipt show the session really expired?
A completed time receipt shows that the exact selected file existed by the independently witnessed time. You can check whether a later copy has the same bytes. It does not establish creation time, authorship, identity, event order, location or the truth of the contents.
Source summary as of October 30, 2026. Check the current source and its scope.
Context for this answerWhat belongs beside an approval export?
NCSC recommends records of who acted, when, where and what happened, connected to monitoring.
Source summary as of October 30, 2026. Check the current source and its scope.
Context for this answerIs every access window the same length?
No. Azure PIM settings are specific to roles and resources; its documented activation limits are product settings, not universal rules.
Source summary as of October 30, 2026. Check the current source and its scope.
Context for this answerDoes an old approval prevent later misuse?
No. The Drizly complaint alleged previously granted access persisted; the settlement required real security controls, not just a file date.
Source summary as of October 30, 2026. Check the current source and its scope.
Context for this answerThe file tester runs on your device. It does not issue a timestamp or take a payment.
Keep the records you already have.
Keep your original files and any existing official records while the receipt service is being prepared.