Modulo 05 · Compliance

Blockchain verification — Polygon

Immutable policy notarization on Polygon with public QR-code verification.

What is blockchain verification for insurance policies?

Blockchain verification is the module that notarises every issued policy on the Polygon blockchain by registering the SHA-256 hash of the signed PDF through a dedicated smart contract. The certificate includes a QR code that lets anyone — contracting company, public authority, control body, beneficiary — verify in 3 seconds without credentials the policy's authenticity: number, issue date, insurer, validity. An anti-fraud tool recognised by the Italian market: some surety insurers apply sum-insured discounts of up to −10% on blockchain-verified policies. Negligible gas cost (< 0.001 €/policy) and minimal environmental impact thanks to Polygon Proof-of-Stake architecture.

For whom

Who benefits from on-chain verification

Contracting authoritiesAuthenticity verification of surety bonds attached to public tenders
Contracting companiesInstant validity confirmation of the received surety
Surety insurersCommercial differentiation + anti-fraud deterrent
Brokers & coverholdersSales element toward risk-aware corporate customers
Key features

What the blockchain module does

Notarisation
  • SHA-256 hash computation of the signed PDF
  • Automatic registration at issuance
  • Dedicated smart contract on Polygon mainnet
  • Transaction hash returned and archived on the policy record
  • QR code generation on the certificate
  • Batch registration for mass issuance
Public verification
  • Public portal /verify/{hash} without credentials
  • On-chain hash vs uploaded-PDF hash comparison
  • Public-metadata display (date, insurer, number)
  • Verification time: ~3 seconds
  • Mobile-friendly: direct QR scan from smartphone
  • REST API for integration with third-party systems (e.g. ANAC)
Typical workflow

From issuance to public verification

01

Policy issuance

Policy issued and digitally signed (see eIDAS signing module). The signed PDF is the final document subject to notarisation.

02

Hash computation

System computes SHA-256 of the PDF (64 hex characters). The hash is unique: any modification of even a single byte produces a completely different hash.

03

On-chain registration

System calls the Polygon smart contract passing the hash + public metadata (policy number, insurer, date). Transaction confirmed in ~3 seconds.

04

QR code generation

QR code generated and printed on the certificate. Points to public /verify/{hash} URL. Physical certificate printing includes the QR too.

05

Third-party verification

Beneficiary / contracting authority scans the QR. System queries Polygon, retrieves the registered hash, compares to the uploaded PDF hash (if provided).

06

Verification outcome

OK: \"Authentic policy, issued on by \". Modified: \"WARNING: PDF does not match on-chain hash\". Not found: \"Policy not registered in NewPicass 14.Net\".

Technologies

Technical stack

Blockchain
Polygon PoS mainnet Dedicated smart contract SHA-256 hashing
Verification & integration
No-login public portal REST API for third parties SVG QR code generation
Measurable results

Anti-fraud and commercial impact

~3sVerification timeFrom QR scan to smartphone response
< 0.001 €Gas cost per policyPolygon mainnet, average gas 2025
−10%Possible sum-insured discountInsurers valuing anti-fraud deterrent
0Counterfeit policiesPDF modification changes the hash → verification fails
FAQ

Frequently asked questions about blockchain verification

What is a blockchain and why Polygon?

A blockchain is an immutable distributed ledger: every transaction, once confirmed, cannot be deleted or modified. Polygon is an Ethereum-compatible blockchain with high energy efficiency and negligible gas cost (< 0.001 € per registration). NewPicass 14.Net uses Polygon mainnet to anchor the cryptographic hash of every signed policy.

What is registered on-chain?

NOT the policy in cleartext (privacy) but only its SHA-256 hash, a unique 64-character cryptographic fingerprint. Anyone with the original PDF can recompute the hash and compare it to the on-chain one: if they match, the policy is authentic and unmodified. If they differ, it has been altered.

How does the public QR-code verification work?

Every policy certificate includes a QR code pointing to a public URL like /verify/{hash}. Opening it from a smartphone (or from the contracting authority's portal) the system shows: on-chain registration date, Polygon transaction hash, policy number, issuing insurer, validity. No credentials required. Verification time: ~3 seconds.

How much does it cost to register a policy on-chain?

Average gas cost on Polygon is < 0.001 € per registration (2025). For a coverholder issuing 5,000 policies/year, total cost is < 5 €/year. The added value in anti-fraud deterrence and commercial differentiation is many times higher.

Do Italian insurers recognise blockchain as a valid tool?

Yes. IVASS has recognised blockchain-based anti-fraud tools. Some insurers apply sum-insured discounts of up to −10% on blockchain-verified policies, considering them more secure against counterfeiting. The tool is especially valued by public contracting authorities receiving surety bonds in tenders.

What happens if Polygon went offline or changed?

Polygon is a decentralised blockchain: no single point of failure. In an extreme scenario (network termination) QR verification would fall back to an internal notarised repository + platform audit trail. The platform is designed to support migration to alternative chains (e.g. Ethereum mainnet, Polygon zkEVM) without impact on already-issued PDFs.

Related modules
Let's talk · 45 minutes

Want to see Blockchain verification — Polygon in action on your real flows?

45 minutes with one of our engineers, no sales script. You show us your current process and we show you concretely how this module would solve the critical points.