Cryptographic Proof of Receipt
When the recipient opens your message, their device generates a signed receipt with timestamp, Hat code, and content hash. This proof is unforgeable and mathematically verifiable.
Send messages with cryptographic proof of delivery and reading. Get tamper-proof receipts, a protected viewer that blocks screenshots, and verifiable evidence the message was opened.

Four steps captured in the app — from composing a certified message to receiving cryptographic proof that it was read.




Certified Send replaces "trust me, I read it" with cryptographic evidence that is mathematically verifiable and tamper-proof.
When the recipient opens your message, their device generates a signed receipt with timestamp, Hat code, and content hash. This proof is unforgeable and mathematically verifiable.
Certified messages open in a secure viewer that blocks screenshots, screen recording, copy-paste, and forwarding. The content stays between sender and recipient.
Read receipts are cryptographically signed by the recipient's device keys. No one — not even City of Hats — can forge a receipt. Each one is uniquely tied to the message and moment.
The entire certified send flow — composition, delivery, reading, and receipt — forms a tamper-proof chain. Any modification to any step is immediately detectable.
Four steps from composition to verifiable proof of reading.
Write your message and enable Certified Send. The app prepares the message with a content hash and certification metadata.
The message is end-to-end encrypted and delivered. The recipient sees a certified message notification with delivery confirmation.
The recipient opens the message in the Protected Viewer — a secure environment that prevents screenshots, recording, and copying.
Upon viewing, the recipient's device signs a cryptographic receipt. The sender receives verifiable proof that the message was read, with timestamp.
Any situation where you need verifiable evidence that a message was delivered and read.
Send legal communications with cryptographic proof of delivery and reading. Receipts are timestamped and verifiable — stronger than email read receipts.
Deliver contracts and receive proof the other party opened and read them. The protected viewer prevents unauthorized copies.
Send sensitive medical information with proof the patient received and viewed it. Protected viewer ensures no screenshots or leaks.
Deliver financial statements, tax documents, or investment notices with verifiable proof of receipt. Audit-ready evidence.
Send sensitive tips or documents with proof they reached the journalist. The protected viewer prevents unauthorized redistribution.
Distribute compliance notices, policy updates, or HR communications with proof each employee received and read the message.
Certified Send is built on cryptographic signatures, protected viewing, and zero-knowledge architecture.
Send messages with cryptographic proof of delivery and reading. Get tamper-proof receipts, a protected viewer that blocks screenshots, and verifiable evidence the message was opened.