NotaryChain Certified Operator Training Manual

1.1 · Why architecture matters to a regulator

A remote online notarization is only as strong as the evidence that survives it. NotaryChain was engineered so that every act generates four independent layers of proof: (1) the notarial record itself, (2) a SHA-256 cryptographic fingerprint of each document, (3) an immutable timestamp anchored to the Hedera public ledger, and (4) an AI + deterministic forensic analysis report. No single layer can be silently altered without breaking the others - which is exactly the tamper-evidence posture §117.245 and Rule 1N-7.001 expect of an electronic journal and its supporting records.

1.2 · Hedera anchoring in plain language

When a document is sealed, NotaryChain computes its SHA-256 hash - a unique 64-character fingerprint - and writes that fingerprint to the Hedera Consensus Service, a public distributed ledger operated by a council including Google, IBM, and Deloitte. The document itself NEVER leaves the platform; only the fingerprint is published. Anyone - a court, a title underwriter, a state auditor - can later re-hash the document and confirm the fingerprint matches the ledger entry, proving the document existed in exactly that form at exactly that consensus timestamp. Alter one pixel or one comma, and the fingerprint no longer matches.

1.3 · The evidence stack at a glance

Layer 1 - Ceremony record: identities verified, method used, audio-video recording reference, certificate wording. Layer 2 - Document integrity: SHA-256 hash + envelope encryption (each file sealed with its own data key, itself sealed by a master key). Layer 3 - Public anchor: Hedera consensus timestamp, transaction ID, and topic sequence, all publicly verifiable. Layer 4 - Forensics: AI vision analysis (GPT-5.5) plus deterministic signals (font inconsistency, metadata anomalies, MRZ checksums on IDs) recorded at ceremony time.

2.1 · Account creation and role selection

Navigate to /signup and register with the business email you use for notarial work. Select the Notary role during onboarding. Your account is protected by hashed credentials and session tokens; enable additional security controls under Settings → Security as soon as you log in.

2.2 · The Florida onboarding wizard

From your Notary Dashboard, open Florida Onboarding (/notary/onboard/florida). The wizard collects the exact fields the state expects you to be able to produce on demand:

1. Commission number and expiration date - entered exactly as printed on your commission certificate
2. RON registration status with the Florida Department of State
3. Surety bond ($25,000) and errors & omissions coverage details
4. Your listed RON service provider (RONSP) declaration
5. Digital certificate / electronic seal upload for online acts

2.3 · Digital seal and signature configuration

Under Digital Seal (/notary/seal), configure the electronic seal that will be applied to your online notarial certificates. Florida requires the seal to include your name, 'Notary Public - State of Florida', your commission number, and expiration date, and the certificate must state the act was an online notarization. NotaryChain renders the compliant wording automatically - your job is to confirm the commission data feeding it is accurate.

2.4 · Ceremony readiness verification

Before your first live ceremony, run the Florida Ceremony Readiness check. It validates camera, microphone, bandwidth, commission expiration, seal configuration, and journal availability in one pass, producing a readiness report you can keep on file. Do not accept a live signing until every check is green.

3.1 · Intake: the notarization request

Ceremonies begin as requests - created by a client, a partner integration, or you directly. Each request captures the signer(s), the document(s), the act type (acknowledgment, jurat/oath, etc.), and scheduling. Review the document BEFORE the session: confirm it is complete, in a language you can read, and contains no blank material terms.

3.2 · Identity proofing - the Florida standard

For a remotely located signer you must establish identity per §117.265(4). NotaryChain guides you through the two-pillar path:

1. Credential analysis - the signer captures their government ID; the platform validates security features, fonts, and (for passports) MRZ checksums, and flags anomalies before you ever see the signer
2. Knowledge-based authentication (KBA) - five questions in two minutes, minimum four correct, drawn from data sources the signer could not simply look up; one retake permitted with replacement questions
3. Fallback - personal knowledge or a credible witness under oath where the statute permits

3.3 · The live audio-video session

The ceremony room enforces the statutory sequence: confirm you are physically located in Florida and state the venue on record; confirm the signer's identity result; ask the awareness and (for wills, trusts, POAs, and advance directives) the vulnerable-adult screening questions; observe the signature in real time; then apply your electronic seal and certificate. The entire session is recorded, and the recording reference is bound into the journal entry automatically.

3.4 · Sealing and completion

On completion, NotaryChain: (1) applies your seal and the compliant online-notarization certificate wording, (2) computes the document hash and anchors it to Hedera, (3) writes the journal entry, and (4) issues the parties a verification link. You review a completion summary - verify signer names, act type, and fee before finalizing. The statutory fee cap is $25 per online notarial act; itemize any additional technology or convenience charges separately and disclose them in advance.

3.5 · When to STOP a ceremony

Terminate politely and document the reason in the journal when you observe: a signer who cannot answer awareness questions coherently; off-camera coaching or a third party directing answers; an ID that fails credential analysis; a signer under apparent duress; a document with material blanks; or any indication the signer does not understand what they are signing. A refused act with a documented reason protects you; a completed act you doubted does not.

4.1 · What the journal must contain

Florida REQUIRES an electronic journal for online acts (§117.245(1)). NotaryChain's Smart Journal captures each mandatory field automatically at ceremony time: date and time of the act; type of notarial act; type/title of the document; name and address of each principal; evidence of identity (method used and result); the fee charged; and the audio-video recording reference. You review and confirm - the platform will not finalize an entry with a missing statutory field.

4.2 · Tamper-evidence by design

Journal entries are append-only. Each day, the platform computes a Merkle root of that day's entries and anchors it to Hedera. The result: you (or an auditor) can later prove that any given entry existed on the day it claims, unmodified. This converts your journal from 'trust me' to 'verify me' - the strongest posture a notary can present to the Division of Corporations or a court.

4.3 · The 10-year retention obligation

Recordings and journal records must be retained for 10 years. NotaryChain retains them with envelope encryption at rest, and the retention clock, storage location, and access log are visible per entry. If you resign or your commission lapses, statutory custody rules apply - export your records before offboarding and follow §117.245(4) regarding designated repositories.

4.4 · Producing records on demand

When a subpoena or audit request arrives: open Smart Journal → Export, filter by date range or signer, and generate a certified export package containing the entries, hash proofs, and Hedera transaction references. The package is itself hashed and sealed, so the recipient can verify nothing was altered in transit. Respond only to the specific scope requested, and log the disclosure in the journal.

5.1 · Two engines, one verdict

Every analyzed document passes through two independent engines. Engine 1 - AI vision (GPT-5.5): reads the document like a trained examiner, flagging inconsistent fonts, misaligned seals, anachronistic formatting, and content anomalies. Engine 2 - deterministic forensics: hard signals that need no AI judgment, including metadata inconsistencies, editing-software traces, MRZ checksum failures on IDs, and image-manipulation artifacts. You receive a combined risk score with itemized findings. The platform never blocks you - YOU remain the officer making the judgment call; the report arms that judgment and is preserved as evidence of your diligence.

5.2 · Signature Vector Velocity biometrics

When a signer signs on-screen, NotaryGuard records not just the final image but the motion itself - stroke order, velocity, acceleration, and pen-lift cadence. A traced forgery reproduces the shape but not the motion signature. The biometric template is stored as vectors (not an image), bound to the ceremony record, and comparable across future signings by the same person.

5.3 · Offline Crypto QR Seals

The Offline Seal Studio generates a cryptographically signed QR seal that embeds the document fingerprint and your notary identity. Verification requires NO internet and NO NotaryChain account - any standard QR scanner reveals the signed payload, and the embedded signature proves authenticity. Use case: recorded deeds, printed certificates, and jurisdictions or counterparties that demand paper.

6.1 · The public verification portal

Anyone can verify a NotaryChain-sealed document at /verify - no account required. They upload the document (processed locally where supported; only the hash is compared), and the portal returns match/no-match against the Hedera anchor with the consensus timestamp. Teach your clients this flow: it is the fastest way to shut down a 'this document was altered' claim.

6.2 · Evidence packages

For litigation or underwriting, generate an Evidence Package: the sealed document, its hash lineage, the Hedera transaction proof, journal entry excerpt, identity-proofing summary, fraud analysis report, and the recording reference - bundled, hashed, and sealed as a single deliverable. It reads the way opposing counsel least wants it to: complete.

6.3 · Audit log exports

Under Compliance, export platform audit logs (access events, ceremony events, administrative actions) in SOC 2 / ISO-aligned CSV and JSON formats, filtered by date and actor. For a state examination, pair the audit export with the journal export from Module 4 - together they answer who, what, when, and prove-it.

7.1 · Field Scanner

The Field Scanner turns your phone into a capture-and-seal station: photograph a document, the platform de-skews and enhances it, computes the hash, and queues the seal. Ideal for hybrid practices that still meet clients in person but want every instrument in the same tamper-evident evidence stack.

7.2 · PWA Verify Wallet

Install the Verify Wallet to your phone's home screen (it is a progressive web app - no app store needed). It holds your verification history and lets you check any document's seal status in seconds, including via QR scan.

7.3 · Zero-connectivity workflows

No signal? Offline Crypto QR Seals (Module 5) verify with no network at all, and Field Scanner captures queue locally and sync when connectivity returns. Your evidence chain does not depend on the venue's Wi-Fi.

8.1 · Your public profile and the directory

Complete your marketplace profile (specialties, languages, availability, service area). Directory placement puts you in front of clients searching for Florida online notaries, and your profile displays live trust signals - ceremonies completed, verification rate, and credentials - that generic listings cannot match.

8.2 · Trust Badge and client experience

Embed the Trust Badge web component on your website: it renders your live NotaryChain credentials and links visitors straight to verification. Clients you serve receive their own portal access to retrieve documents and verify seals - every satisfied signer becomes a distribution channel.

8.3 · The certification path

Finish this manual, then complete the interactive Academy (/academy): 9 modules with quizzes and a final exam at the 80% pass standard. Passing issues a certificate sealed to Hedera - meaning a state representative, employer, or title company can verify YOUR training credential the same way they verify your documents. That symmetry - the notary held to the same evidentiary standard as the notarization - is the NotaryChain difference.

9.1 · The user management console

Admin Dashboard → Users is now a full control surface. 'Add User' creates a verified account instantly with a name, email, temporary password, and role (user, notary, or admin). Every row carries Edit and Delete actions: Edit changes the role and the account status (active, suspended, disabled); Delete permanently removes the account and revokes all of its sessions. Two guardrails are built in and cannot be bypassed - you can never edit or delete your own account from this screen, and the platform will refuse to delete the last remaining admin.

9.2 · Bulk actions and the CSV export

Select multiple users with the row checkboxes (or the select-all header) and a bulk action bar appears: Activate, Suspend, or Delete up to 100 accounts in one operation. The platform automatically skips your own account and the last admin, and reports exactly how many were processed and why any were skipped. Every bulk run is written to the audit log as a single critical entry naming each affected account. Need the roster outside the platform? 'Export CSV' downloads the complete user list - name, email, role, status, notary approval, verification state, join date, and last login - ready for a compliance binder or board report.

9.3 · Safe onboarding: welcome email + forced password change

When you create a user, leave 'Email the login details' checked: the new user receives a branded message with their email, temporary password, and a sign-in button. Security posture matters here - every admin-created account is flagged so that on first sign-in the user is locked onto a 'Set your own password' screen and cannot reach any other page until they choose a new password meeting the platform strength rules. The change also revokes every other session on that account. Result: no shared temporary password ever survives first contact.

9.4 · Operations hygiene: Sweep Test Data

Demonstrations, training sessions, and smoke tests leave artifacts. Admin Dashboard → Operations → 'Sweep Test Data' previews exactly which test escrows, ceremonies, requests, and anchors would be removed, then requires the typed phrase PURGE TEST RECORDS before deleting anything. Real client data is never touched by the sweep. Run it after every demo day; a clean database is an auditable database.

9.5 · Growth loops: referrals and Smart Routing

Two compounding tools shipped in this update. (1) Contractor referrals: every contractor using the BuildEscrow workspace has a personal share link - when another contractor signs up through it, the referrer earns NCH utility credits and the newcomer gets a welcome bonus, automatically and exactly once per new account. (2) ACN Smart Routing: on the Cross-Border dashboard, users can pre-set destination jurisdictions (say, Singapore plus the EU) that are automatically added to every document analysis and Hedera seal - even when the document text never mentions them. Clients with recurring international needs set it once and every packet routes itself.

10.1 · Practice Mode: rehearse before you notarize

Every notary account includes a Practice Session sandbox - a full ceremony rehearsal that is completely quarantined from production. Practice documents are sealed with a diagonal PRACTICE watermark, never anchor to Hedera's public record as real notarizations, and never touch a real journal. Complete a practice run and your public profile earns a 'Ceremony Rehearsed' completion badge that clients can see. New notaries who have not yet practiced receive a friendly nudge email, and administrators can track adoption on the Admin → Notaries tab (nudges sent, rehearsals completed, conversion rate).

10.2 · The SMS toolkit

Signers live on their phones, so the platform meets them there. Booking confirmations and reminders go out by text when the signer provides a phone number (their number doubles as opt-in, and every message honors STOP). Each reminder includes a one-tap reschedule link - the signer picks a new open slot from their phone with no login and no phone tag; the notary's calendar updates instantly. Administrators can audit every message on Admin → SMS Delivery Log: sent, held for quiet hours, or failed, with the exact reason.

10.3 · Payment Recovery: no booking left behind

When a signer starts checkout but the payment never completes, the platform waits an hour (life happens), verifies directly with Stripe that the payment truly did not go through, then sends a friendly 'Your notarization is one step away' email - plus a text when the number is known. The retry link reopens checkout with their package already selected and a welcome-back banner. Each signer is nudged exactly once per transaction, and payments completed after a nudge are tracked as recovered revenue. For a working notary this means fewer ghosted bookings without ever chasing a client for money yourself.

10.4 · Platform health: Webhook Health & the Nightly Test Digest

Two panels on Admin → Operations keep the platform provably healthy. Webhook Health shows every Stripe payment event delivery - processed, ignored, or errored - with signature verification status; three consecutive failures within fifteen minutes emails every administrator immediately, so a payment outage is never discovered from a complaint. Below it, the Nightly Test Digest runs the platform's full automated test suite (160+ suites) every night at 3:30 AM ET and emails a green/red pass-fail summary; the panel shows the last fourteen runs as a color strip and offers an on-demand 'Run now' button before major demos.

10.5 · The Trust Center: security you can show, not just claim

The public Trust Center at /security publishes what most platforms hide: six consecutive independent security audit rounds with every finding remediated, the defense-in-depth architecture (X.509 sealing, blockchain anchoring, passkeys, automatic threat blocking, 24/7 payment monitoring), the compliance program, and a responsible-disclosure contact. When an enterprise client, title company, or county recorder asks 'how do we know this is secure?', do not answer from memory - send the link. It is the fastest security questionnaire response in the industry.