The Challenge
Truepic’s original blockchain-based trust model required centralized processing that impacted scalability and increased infrastructure complexity. As the company launched new SDKs and prepared for widespread adoption, the engineering team looked for a more flexible and efficient trust foundation.
The first generation trust infrastructure created a bottleneck that did not have the scalability or flexibility we needed.”
-
Scalability limitations
Centralized blockchain notarization could not support the anticipated growth in image volume.
-
PKI expertise gap
Designing and operating a high-scale PKI required specialized skills not readily available in-house.
-
Aggressive delivery timelines
A new trust architecture had to be deployed quickly to support SDK customers and market expansion.
The Solution
PKI as the Foundation of Trust
Truepic selected Keyfactor EJBCA and SignServer to replace blockchain with a new PKI-based trust model. Truepic now uses EJBCA and SignServer in AWS environments to support certificate-based authentication and cryptographic sealing of image provenance data. EJBCA enabled Truepic to operate its own certificate authority in the cloud while securely authenticating devices and digitally signing images at scale.
PKI is an absolute foundational piece to what we are building. Without EJBCA, we could not have what we have.It is a key pillar to the future of our products.”
Business Impact
With Keyfactor, Truepic delivered its next-generation Controlled Capture 2.0 platform, enabling image authenticity without centralized processing or blockchain dependencies. PKI-based authentication and digital signatures significantly reduced infrastructure complexity while improving privacy for end users. Automated certificate provisioning and signing workflows allow Truepic to scale globally with confidence.
-
Massive scalability and performance
PKI enables authentication and signing at internet scale without bottlenecks.
-
Improved privacy and security
Images are authenticated and sealed cryptographically without being uploaded to centralized systems.
-
Faster time to market and global readiness
Professional services accelerated delivery and prepared the platform for international expansion and regulatory compliance.