Built for the Nevada eNotary solution-provider standard.

Credential analysis via Persona and dynamic knowledge-based authentication (KBA). Three-attempt lockout, audit trail per attempt.

src/lib/ron/identity.functions.ts, src/lib/ron/kba.functions.ts

Two-way live AV via Daily.co with full session recording. Recordings stored in the encrypted recordings bucket with retention metadata.

src/lib/ron/recordings.functions.ts, src/routes/api/public/webhooks/daily.ts

Automated, append-only journal entries with required Nevada fields, exportable, RLS-scoped to the commissioned notary and admins.

src/lib/ron/journal.functions.ts, src/routes/_authenticated/notary.journal.tsx

Notary uploads their official Secretary-of-State-issued seal. Active seal required to finalize any package. NexusSeal never fabricates a state seal.

Captured signatures hashed and appended to an immutable per-document hash chain with IP/UA audit metadata.

Final PDF package embeds certificate ID, root document hash, certificate SHA-256, and verification URL. Independent verification portal endpoint scheduled.

Generates exemplar packages with the notary's commission details, seal, and selected acknowledgment/jurat short-form wording.

Configurable retention windows per state. Nevada default tracks NRS 240.202 minimums. Recording retention monitored from the admin Compliance Center.

RLS on every user table; security-definer role checks; append-only audit_logs for every privileged action; service-role keys server-only.

Compliance documentation, security attestations, and Secretary-of-State submission packaging.