CERTANIX

The problem

European manufacturers of autonomous and AI-enabled systems can build machines that work. What they cannot do at the speed procurement now demands is prove to an authority or a purchaser that the machine behaves as claimed, in a form that party can check for itself.

That file is produced today by consultants, by hand, per programme, per variant, per software release. It is believed rather than verified, and it has to be rebuilt every time the software changes.

What Certanix does

Certanix produces that file as a machine-verifiable artifact instead: cryptographically signed pre-certification evidence about how a system behaved under adversarially selected test, which a recipient verifies offline, on their own machine, without trusting the manufacturer and without trusting us.

What you can check rather than believe

• Verification is offline and producer-independent A recipient checks an evidence pack against a public key alone. No network, no contact with us, and no Certanix code on the trust path. One altered byte and the check fails.
• The signing root is hardware Evidence packs are signed by a YubiHSM 2 in FIPS mode, validated under NIST CMVP certificate 5302, with the device attestation chain verified through five links to the Yubico attestation root. Current signing key fingerprint, SHA-256 over the DER SPKI:
  5849:0777:84FA:6061:6EA8:3E8B:FF35:C8B2:94E1:7631:A424:35CD:2019:2DD0:9D9F:9AE5
• Rotation signs forward, and history is never re-signed Artifacts signed before 4 September 2026 carry the superseded key and keep verifying against it. Re-signing an old record would re-date the estate and destroy the retention property that makes long-lived evidence worth holding. The key lineage is published, including its one recorded exception.
• Published schemas are immutable Every schema version a signed artifact references stays at its own permanent address, unchanged, for as long as the artifact exists. A correction is a new path, never an edit. The published vocabulary and schemas are open, at schema.certanix.eu.

Why now

The regulatory clock is not a forecast. It is a set of dates that have already been set.

11 Sep 2026

The Cyber Resilience Act's reporting obligations become applicable: actively exploited vulnerabilities and severe incidents must be notified.

20 Jan 2027

The Machinery Regulation applies.

2 Dec 2027

The AI Act binds Annex III high-risk systems, on the date set by Regulation (EU) 2026/1744.

11 Dec 2027

The Cyber Resilience Act applies in full, conformity assessment included. No harmonised standard supporting the Act has yet been cited in the Official Journal, so the presumption of conformity is unavailable and third-party assessment is the live route for important products.

2 Aug 2028

The AI Act binds Annex I products carrying high-risk AI as a safety component, with duties reaching vehicles through sectoral law.

Manufacturers must therefore prepare evidence now, against requirements whose test matrices do not yet exist.

Who

• Axel FerrazziniFounder and Chief Executive Officer
• Mircea GeoanăChairman-designate. Formerly Deputy Secretary General of NATO
• Ludovic PerretSenior Advisor, cryptography and post-quantum security
• Bruno FédriciAdvisor
• Geoffrey Le GourriérecAdvisor

What we do not claim

• No notified body has yet accepted a Certanix evidence pack. Obtaining that acceptance is a milestone, not a formality.
• The platform carries no security certification today and we claim none. A proportionate qualification route is planned. It is not done.
• Certanix is in formation. The intellectual property position is deliberately simple: one author, one assignment at incorporation.