DIGITAL COMPLIANCE & CONNECTIVITY

Turn inspection and lab results into verifiable, shareable proof.

BQCIS digital layer: QR-secured, connected, and auditable.

BQCIS provides a secure digital layer that issues QR-secured certificates, centralizes evidence, and connects your partners via API/EDI—so your compliance pack moves as fast as your cargo.

Value in One Glance

• Instant trust: scan a QR to validate authenticity, version, and scope.
• Single source of truth: certificate, photos, seals, and raw data—linked and searchable.
• No re-keying: push/pull data with ERP/TMS/WMS/LIMS.
• Governed sharing: public verify links for regulators/banks; granular roles for suppliers and carriers.

Core Modules

1. QR-Secured Certificates: Tamper-evident PDFs with unique IDs and embedded QR. Public verify pages display scope, version, signer(s), attached evidence, and status.
2. Digital Signatures & PKI: Signer identity captured with time, role, and optional method/instrument IDs. Full version history preserved.
3. Evidence Vault: Store photo logs, seal registries, weigh tickets, raw lab data, and method statements. Searchable and filterable.
4. Portals & Sharing: Client portal, supplier upload portals, public lookup for any QR (no login required).
5. Integrations: REST API, webhooks, SFTP, and email-in parsing.
6. Dashboards & KPIs: Lead time, reissue rate, scans, disputes, completeness—filterable by supplier, lane, product, or site.

Typical Workflows

Issue a Certificate

Create job → Attach results/evidence → Reviewer signs → Share QR-secured PDF + verify link.

Verify a Certificate

Scan QR → View validity, scope, attachments, version history → Download PDF/CSV.

Dispute or Reissue

Flag non-conformity → Lock doc → Add addendum → Reissue v2 → QR resolves to v2, v1 marked “superseded.”

Supplier Onboarding

Invite supplier → Upload via portal/email → Files auto-attach with identity + timestamps.

Roles & Permissions (RBAC)

• Viewer: external, read-only verification.
• Partner: suppliers/carriers upload to assigned jobs only.
• Client User: create jobs, review evidence, share links.
• Reviewer/Signer: approve and digitally sign certificates.
• Admin: manage roles, templates, retention, keys.

Least-privilege by default; access scoping by site, lane, product, or customer.

Data Model (Plain Language)

Job: shipment/batch/test • Samples: unit records • Results: values, units, uncertainty • Evidence: logs, seals, data • Certificates: signed PDFs + verify page.

Key fields: job_id • lot/shipment • product/HS • site • method_code • instrument_id • result_value • qualifier • seal_no • signer • version • link.

Governance & Security

• SSO/MFA, optional IP allowlist.
• TLS transport; encrypted storage; signed URLs.
• Audit trails for all views/edits/signs.
• Configurable retention, purge, legal hold.
• Backups & point-in-time recovery.
• Change control with visible logs.

Integrations

• ERP/TMS/WMS — push cert links, sync shipment/lot data.
• LIMS/QA — sync methods, results, instruments.
• Bank/regulator portals — public verify links, no login needed.
• Email-in — subject parsing routes docs.
• Webhooks — notify when cert issued/revoked.

Formats: PDF, CSV/JSON. Transport: REST API, SFTP, email-in.

Dashboards & KPIs

Lead time • Reissue rate • QR scans • Dispute cycle time • Attachment completeness • Supplier timeliness.

Onboarding Path

Week 1–2: Discovery → Week 3–4: Connect → Week 5–6: Rollout → Week 7+: Improve dashboards, KPIs, retention rules.

Service Profile

• High availability, uptime target for operational docs.
• Business-hours support, escalation path.
• RTO/RPO recovery objectives.
• SLA monitors: latency, processing time, uptime.

Playbooks

• Trade compliance: QR pre-export certificates for customs.
• Bank presentation: Single-link certificate packs to reduce rejections.
• Marketplace proof: QR packs with test results/labels on product cartons.
• Supplier performance: KPI dashboards with timeliness and dispute trends.

Admin Tools

Template builder • Role manager • Retention/legal hold • API keys/webhooks • Change log/export.

Accessibility & Internationalization

Keyboard-friendly UI, high-contrast mode, multilingual verify pages, ISO 8601 timestamps with timezone.

Readiness Checklist

• Define role scopes
• Choose templates
• Map data fields
• Pick integration path
• Set retention/revocation rules
• Define KPI targets

Case Snapshots

• QR verification cut document fraud attempts and shortened dispute handling by ~40%.
• Single-link sharing sped bank release on pre-export inspections.
• API→ERP integration eliminated re-keying, auto-attaching certificates to shipments.

Compliance & References

• ISO/IEC 27001 — Information security management.
• ISO 22095 — Chain of custody standards.
• BQCIS QR Certificate Verification
• BQCIS Client Portal