Skip to content

Evidence Management — Est. 2017

Security & Compliance Register

A documentary register of the certifications, patents, and independent audit results that govern every byte stored under chain-of-custody by FrozenCase, Inc. — issued for trial lawyers, Am Law 200 procurement officers, and federal public defender offices preparing vendor due-diligence packets.

Preamble

A register, not a marketing page.

The entries below are the documentary instruments procurement counsel and trial teams request before signing a master services agreement: a WORM-compliant storage substrate with cryptographic SHA-256 hashing on every upload; an annual SOC 2 Type II report; an ISO/IEC 27001 certificate; FedRAMP Moderate authorization; the issued claims of U.S. Patent No. 11,847,392; and a 99.997% data durability SLA. Each row names the auditor, the framework, the period covered, and the document a reviewer can request under NDA.

This register is structured to map directly onto the procurement checklists used by Am Law 200 firms, federal public defender offices, and in-house counsel at Fortune 500 litigation departments. Where a framework requires a named opinion (e.g., a Service Auditor's Report), the entry indicates the issuing firm and the period covered; where a framework requires a government authorization (FedRAMP), the entry cites the granting agency and the authorization date.

— Office of the General Counsel, FrozenCase, Inc.
Boulder, Colorado · 15 November 2025

The Register

Six compliance pillars, audited and on file.

Each pillar corresponds to a discrete document a reviewer may request. A complete evidence package is issued within four business hours of an executed NDA.

I.

WORM-Compliant Storage with SHA-256 Hashing

Storage Substrate · In continuous operation since 2017

Standard

Write Once Read Many (WORM) object storage with cryptographic SHA-256 hash on every uploaded evidence object; each hash bound to a UTC timestamp via the CryoLock™ protocol.

Auditor

Schellman & Co., LLP — annual SOC 2 Type II examination since 2019.

Last Verified

Q3 2025 — opinion unqualified.

Document

FC-SEC-WORM-2025 · 47 pp.

II.

SOC 2 Type II

AICPA Trust Services Criteria · Security, Availability, Confidentiality

Standard

AICPA TSP Section 100, 2017 (with 2022 revised points of focus). Annual Type II report covering a 12-month observation window.

Auditor

Schellman & Co., LLP — independent CPA firm.

Period Covered

1 October 2024 — 30 September 2025.

Document

FC-SOC2-2025 · issued 14 Nov 2025.

III.

ISO/IEC 27001:2022

Information Security Management System · UKAS-accredited certification body

Standard

ISO/IEC 27001:2022 with Statement of Applicability covering 93 Annex A controls; surveillance audits annually, full recertification every three years.

Certifier

Schellman & Co., LLC (ISAE 3000-accredited body).

Certificate Validity

Issued 22 March 2024 · valid through 21 March 2027.

Document

FC-ISO27001-2024 · certificate no. IS-738201.

IV.

FedRAMP Moderate Authorization

Federal Risk and Authorization Management Program · Agency sponsorship cleared

Standard

FedRAMP Moderate baseline (Rev. 5); 325 controls inherited from NIST SP 800-53.

Authorizing Body

FedRAMP PMO — authorization to operate granted August 2024.

3PAO

Coalfire Federal LLC — independent third-party assessment organization.

Document

FedRAMP Marketplace listing · ID F1911287907.

Independent Attestation

“CryoLock™ verification completed in under ninety seconds per object across the test corpus — the fastest sub-two-minute timestamp verification observed in the 2024 Forensic Technology Center of Excellence review of commercial evidence containers.”

Forensic Technology Center of Excellence, 2024 Review of Commercial Digital Evidence Containers, p. 42. — Independent. Not commissioned.

Next Step

From register review to a live walkthrough.

Book a thirty-minute session with a litigation solutions engineer. We will walk your team through WORM storage behavior, SHA-256 hash binding, the CryoLock™ verification flow, and the FedRAMP-architected infrastructure underlying every stored object.

A litigation solutions engineer will respond within four business hours. Procurement packets issued under NDA.