Blockchain-Verified Compliance Auditing Platform on Hedera
GlyphHash provides immutable audit trails for SOC 2, ISO 27001, NIST, and HIPAA compliance. Built on Hedera's enterprise-grade distributed ledger technology.
This is a minimum viable product demonstrating the core GlyphHash workflow:
- Create Hedera topic with company binding
- Upload documents with blockchain-anchored hashes
- Auditor verification against Hedera
Currently running on Hedera Testnet - not for production use.
This project showcases modern full-stack development with:
- Next.js 14 with App Router and TypeScript
- Hedera Consensus Service (HCS) for immutable audit trails
- Microservices architecture with API Gateway pattern
- PostgreSQL with Prisma ORM
- Tailwind CSS with custom design system
- Turbo for monorepo management
See the development roadmap for planned features including authentication and production deployment.
The Problem: SOC 2 audits cost $50,000+, with 65+ hours spent verifying evidence timestamps.
The Solution: GlyphHash uses Hedera blockchain to provide instant, mathematical proof of when compliance evidence was created.
The Result: Reduce audit costs by eliminating timestamp verification work. ROI: 114-340x return on investment.
┌─────────────────────────────────────────────────────────────────┐
│ Next.js 14 Frontend (React + TypeScript) │
│ • App Router • Petroglyph UI Theme • Real-time Dashboard │
└────────────────────────────┬────────────────────────────────────┘
│ REST API
│
┌────────────────────────────▼────────────────────────────────────┐
│ Express.js API Gateway │
│ • Topic Management • Document Upload • Verification │
└────┬───────────────────────┬────────────────────────┬───────────┘
│ │ │
┌────▼─────┐ ┌──────▼──────┐ ┌──────▼──────┐
│PostgreSQL│ │ Local │ │ Hedera HCS │
│ (Data) │ │ Storage │ │ + Mirror │
└──────────┘ └─────────────┘ └─────────────┘
glyphHash/
├── apps/
│ ├── api/ # Express.js API server
│ │ ├── src/
│ │ │ ├── routes/ # REST endpoints
│ │ │ ├── services/ # Business logic
│ │ │ ├── middleware/ # Error handling, validation
│ │ │ └── lib/ # Prisma, Hedera, Storage
│ │ └── prisma/ # Database schema
│ └── web/ # Next.js frontend
│ └── src/
│ ├── app/ # App Router pages
│ │ ├── demo/ # Shareholder demo flow
│ │ └── dashboard/ # Admin dashboard
│ └── lib/ # API client, utilities
├── packages/
│ ├── types/ # Shared TypeScript types
│ └── hedera/ # Hedera SDK wrapper
├── docs/ # Documentation
│ ├── ARCHITECTURE.md # Technical architecture
│ └── ROADMAP.md # Future development
├── docker-compose.yml # Local development
└── README.md
- Node.js: ≥20.0.0
- Docker & Docker Compose (for PostgreSQL)
- Hedera Testnet Account: Get one here
This is a demo environment using shared Hedera testnet credentials. All users operate on the same account.
# Clone the repository
git clone https://github.com/yourorg/glyphHash.git
cd glyphHash
# Copy environment files
cp .env.example .env
# Edit .env with your Hedera testnet credentials
nano .env
# Install dependencies
npm install
# Start database
docker-compose up -d postgres
# Run database migrations
npm run db:migrate
# Start development servers
npm run dev- Go to Hedera Portal
- Create a testnet account
- Get free testnet HBAR from the faucet
- Copy your Account ID and Private Key to
.env
Visit http://localhost:3000/demo to experience:
- Create Topic - Creates a dedicated Hedera HCS topic
- Upload Document - Hashes file and submits to blockchain
- Verify - Cross-references document against Hedera record
All transactions are visible on HashScan Testnet.
- Architecture Guide - Technical deep dive
- Roadmap - Future features and timeline
- API Reference - Endpoint documentation
# Run all tests
npm test
# Run tests with coverage
npm run test:coverage
# Run tests in watch mode
npm run test:watch# Start all services in development
npm run dev
# Start only API
npm run dev --workspace=@glyphhash/api
# Start only frontend
npm run dev --workspace=@glyphhash/web
# Database migrations
npm run db:migrate
# Open Prisma Studio
npm run db:studioSee ROADMAP.md for the full plan.
- Topic creation with binding
- Document upload & hashing
- Basic verification
- Shareholder demo
- Auth0 authentication
- S3 storage integration
- Real-time WebSocket updates
- PDF report generation
- Multi-tenant architecture
- USDC payment integration
- Advanced analytics
- Compliance frameworks (SOC 2, ISO 27001)
MIT License - see LICENSE file.
GlyphHash — Blockchain-verified compliance on Hedera