Loading staff access…
Authorized staff only
Sign in
Staff account
Identity document review
Review the complete original front and back. Check document validity and adult age only. Do not record ID values or use notes.
Reviewer key readiness
Checking reviewer key readiness…
Prepare a one-use case key
Test a saved case-key file
This local test decrypts the protected file only in this browser. It does not select a case, reveal the private key, or contact Darbayn.
Prepare an operational receipt key
This separate signing key closes withdrawn cases without decrypting images and signs restore receipts.
ID submissions ready for review
A submission appears here only after Darbayn confirms both the front and back images. Select Refresh after a member finishes uploading.
Selected case
For privacy, open images and the unlocked case key are cleared when the 15-minute claim expires.
Original front
Original back
Withdrawal requests
Close without opening any images. The signed receipt records that no decryption was performed.
Restore receipts after a D1 recovery
Before restoring D1, stop ID review and set the recovery gate to false. Import the complete off-cloud receipt archive in batches, independently check its count, and reopen only after reconciliation is verified. Signatures attest registered-key control, not physical erasure or receipt time.
Safety case review
Only authorized safety staff can review reports. Evidence stays encrypted until a claimed case is opened on this device.
Reports
Appeals
Selected case
Import every listed key file before requesting the encrypted evidence. Files stay on this device.
Decrypted evidence on this device
Safety encryption keys
Private key files are protected by a passphrase and stay offline. Registering sends only the public encryption key. Keep every retired key file for records encrypted with it.
Audit signer keys
The audit signer is separate from encryption keys. Keep its protected private file and signed archives offline. Old public signer keys are retained to verify earlier checkpoints.
Signed safety checkpoint
Checkpoint export requires paused safety writes. It creates one audited marker, then reads all four content-free streams. Do not continue unless out-of-app D1 changes and account-data deletions can be ruled out.
Compare archive after a D1 recovery
This check does not repair D1 or change the recovery setting. Safety access stays closed until the off-cloud archive, live export and registered checkpoint all match and an independent review is complete.