BasalMind processes personal data under GDPR Art. 6(1)(a) (consent) and Art. 6(1)(b) (contract). Every deletion request creates a cryptographically signed, hash-chained certificate you can verify on this page -- or offline with openssl, no account required.
Request a full copy of your data or delete everything BasalMind holds about you. Deletion is irreversible, automated, and comes with a signed certificate you can verify here.
When you consent to data processing or withdraw consent, an immutable audit event is written to our ledger -- it cannot be modified or deleted, even by us.
When a deletion request is executed, every personal record is removed or anonymized and a deletion certificate is written to an append-only, hash-chained ledger. Each certificate includes a SHA-256 hash that links it to the previous certificate, forming a chain back to genesis. Any modification breaks the chain and is immediately detectable.
Certificates are also signed with an Ed25519 key whose public half is published below.
You can verify a certificate offline using openssl -- no account required.
Aggregate totals updated in real time. No personal data is exposed here.
Every executed deletion request produces a record in this format.
Enter the certificate ID from your deletion confirmation email to verify its authenticity and integrity against our public ledger.
You do not need to trust this website to verify a certificate. Download our public signing key and verify offline:
# 1. Download the public key (replace KEY_ID with the key_id from your certificate)
curl https://basalmind.com/compliance/pubkey/KEY_ID.pem -o pubkey.pem
# 2. Write the canonical JSON to a file (sort_keys=True, keys: body cert_id completed_at dsar_ref prev_hash subject_hash)
echo -n '{"body":"{...}","cert_id":"CERT-...","completed_at":"...","dsar_ref":"...","prev_hash":"...","subject_hash":"..."}' > canonical.json
# 3. Verify the signature
openssl pkeyutl -verify -pubin -inkey pubkey.pem -rawin -in canonical.json -sigfile <(xxd -r -p <<< 'SIGNATURE_HEX')