Sold by: 7Layer.Studio
Prove data integrity and detect tampering with a managed Merkle tree API. Generate RFC 9162-compliant inclusion and consistency proofs via a low-latency REST endpoint on AWS.
Overview
MerkleProof API - Cryptographic Audit Proof Engine for Tamper-Evident Data Integrity
MerkleProof API delivers high-performance verifiable data structure utilities for modern cloud architectures. Construct binary Merkle trees, generate compact O(log N) cryptographic inclusion proofs, and mathematically prove that records have not been altered, omitted, or deleted - all through a managed REST API deployed in AWS Region us-east-2.
Key Capabilities
- Binary Merkle Tree Construction: Implements RFC 9162 and RFC 6962 domain separation (0x00 leaf / 0x01 internal node prefixes) across SHA-256, SHA-512, and SHA-384 hash algorithms. Build cryptographically sound tree structures from your record sets with a single API call.
- Inclusion Proofs (Audit Paths): Produces O(log2 N) audit paths that prove individual record existence in massive datasets - without revealing neighboring data or leaking confidential contents. Auditors and regulators can verify a specific record's presence without accessing the full dataset.
- Constant-Time Proof Verification: Side-channel resistant verification using constant-time cryptographic equality checks against expected root hashes. This protects against timing-based attacks during the verification step.
- Append-Only Consistency Proofs: Mathematically proves that an updated dataset contains earlier states as exact historical prefixes, guaranteeing that historical records were never retroactively modified, reordered, or deleted.
Use Cases and Target Workflows
MerkleProof API is built for backend architects, blockchain developers, audit logging infrastructure teams, and compliance engineering organizations who need cryptographic guarantees of data integrity.
- Audit Trail Integrity: Append transaction records or system events to a Merkle tree over time. Generate consistency proofs on a scheduled basis to demonstrate that your audit log has never been retroactively altered - a requirement in regulated industries where tamper-evident logging is mandated.
- Compliance Evidence Generation: When auditors or regulators request proof that a specific record exists in your dataset, generate an inclusion proof that mathematically verifies the record's presence without exposing the rest of the dataset.
- Blockchain and Distributed Ledger Verification: Leverage RFC-compliant Merkle tree construction as a building block for certificate transparency logs, distributed ledger verification layers, or any system that requires cryptographic proof of append-only data integrity.
- Data Provenance and Supply Chain: Prove that a sequence of records - such as supply chain events, document versions, or configuration changes - has maintained its integrity from origin to current state.
Technical Standards and Cryptographic Rigor
The API implements domain separation as specified in RFC 9162 (Certificate Transparency Version 2.0) and RFC 6962 (Certificate Transparency), using 0x00 prefixes for leaf nodes and 0x01 prefixes for internal nodes. This prevents second-preimage attacks where an attacker could substitute an internal node for a leaf. Three hash algorithm families are supported: SHA-256, SHA-512, and SHA-384.
All proof verification operations use constant-time comparison to resist side-channel timing attacks, ensuring that verification does not leak information about the expected root hash through execution timing.
Getting Started
Subscribe to MerkleProof API through AWS Marketplace to begin integrating cryptographic data integrity proofs into your applications. The API is accessible as a REST service in AWS Region us-east-2. After subscribing, you can verify service availability using the health-check endpoint.
To explore how MerkleProof API fits your architecture, reach out to the support team for a technical walkthrough of your specific use case.
Who Should Use MerkleProof API
- Backend engineers building tamper-evident audit logging systems
- Compliance teams that need to produce cryptographic proof of data integrity for regulators
- Blockchain and distributed systems developers requiring RFC-compliant Merkle tree primitives
- Security architects designing append-only data stores with verifiable history
Highlights
- Tamper-Evident Inclusion Proofs with O(log N) Efficiency: Prove that any record exists in your dataset without exposing other records. Compact proofs scale logarithmically - even a dataset of one million records requires only about 20 hash steps to verify. Built on RFC 9162 (Verifiable Data Structures) with RFC 6962 domain separation (0x00 leaf, 0x01 node prefixes) to prevent second-preimage attacks, giving auditors and compliance teams a standards-backed verification path.
- Constant-Time Proof Verification for Side-Channel Resistance: Proof checks execute in constant time regardless of input, eliminating timing-based side-channel attacks that could leak information about your data. This matters for security-sensitive environments where audit infrastructure itself must resist adversarial analysis. Buyers avoid the risk and complexity of implementing constant-time cryptographic routines in-house.
- Append-Only Consistency Proofs for Immutable Audit Trails: Mathematically verify that historical records were never retroactively modified, omitted, or deleted. Consistency proofs let you confirm that a previous version of your dataset is a strict prefix of the current one - critical for regulatory audit trails, compliance logging, and any system where data integrity over time must be independently verifiable.
Details
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/month |
|---|---|---|
Professional Edition | Production access up to 100,000 requests/month. Full binary Merkle tree construction (RFC 9162 / RFC 6962), O(log N) inclusion proofs, and constant-time proof verification backed by 99.9% Regional SLA. | $49.00 |
Enterprise Edition | High-volume enterprise access up to 1,000,000 requests/month. Includes all cryptographic proof operations, append-only consistency proofs, priority 4-hour critical SLA support, and high-throughput burst allowances. | $299.00 |
Vendor refund policy
Subscriptions can be cancelled anytime via the AWS Marketplace Console. We offer 30-day refunds for technical issues, billing discrepancies, or sustained service disruptions exceeding our SLA. To request a refund, email support@7layer.store with your AWS Account ID, subscription date, and issue details. Requests are reviewed and processed within 3 business days.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support Contact
For all technical support requests, contact the MerkleProof API team at .
Response Times
- Standard requests: resolved within 24 hours
- Critical severity: 4-hour response SLA
Availability
The MerkleProof API targets 99.9% uptime, backed by AWS Regional infrastructure in us-east-2. Service health can be monitored at the API health-check endpoint.
For questions about using the API, troubleshooting integration issues, or requesting refunds, please email with a description of your issue and any relevant request IDs or error messages.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Merkle’s white-glove client service and outcomes-driven global consultancy has expertise in motivating consumer behavior across Marketing, AdTech, Data & Analytics, Loyalty, and Commerce. Our consulting services are designed to enable and expand use of AWS Cloud Consumption and further AWS Services. From MarTech Assessments to Measurement Blueprints, Relationship Marketing Strategy & Services to Commerce Re-platform Initiatives, Merkle has you covered.
LoyaltyPlus is our AWS-hosted, enterprise SaaS loyalty management platform that has driven customer identification, engagement, and retention for major brands since 2009. The platform enables you to create a unique, custom loyalty program that provides near-real-time loyalty data to fuel identity, augment customer profiles, and drive activation strategy. Merkle is offering a one-month LoyaltyPlus trial so you can explore the platform admin portal and APIs, understand how loyalty programs are configured, and try out common tasks at your own pace in a dedicated test instance of the platform. Once the trial is complete, you can choose to license the platform and move into an implementation phase with Merkle via Private Offer or take advantage of our loyalty consulting services to round out your strategy.
Merkle’s Server-Side Tracking Toolkit is a modular solution designed to help companies transition from client-side to server-side tracking, especially in light of the upcoming phase-out of third-party cookies by major browsers. This shift is critical as it impacts data collection, personalized content, ad delivery, and marketing performance measurement.
Safer Match identifies known child sexual abuse material (CSAM) using cryptographic and proprietary perceptual image and video hashing. It combines a large database of verified CSAM hashes from trusted sources and cross-platform hash sharing to cast a wide net for detecting CSAM.
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.