Staff access

Staff sign-in

Notaries and administrators enter a shared per-role passphrase. Signers do not sign in — they reach their order through the link they were sent.

Guide

How access works in this demonstration.

What the passphrase is
One shared phrase per role, set by whoever runs this demonstration. There are no individual accounts, no registration, and no password reset — a real deployment needs named users so the journal and the audit trail can say which notary did what.
Two roles · notary, administrator
What each role reaches
A notary claims orders from the queue and records the act against the journal. An administrator sees pipeline metrics, the journal and its chain check, retention deadlines, notice previews, and the per-order evidence bundle.
Administrator routes reject the notary phrase
Signers do not sign in
A signer reaches their own order through the link the intake form hands them. That link carries a long random code, and a wrong code gets the same "not found" answer as an order that was never placed — so the page cannot be used to discover whose orders exist.
No account · no password to lose