How to Store Your Embedded Carbon Record for CBAM Compliance: Permanent, Hashed, Always Verifiable
Storing your embedded carbon record permanently takes 5 minutes. Upload your verification statement, receive a SHA-256 hashed permanent URL, share it with every EU buyer simultaneously. From $499/year.
Store Your Verified Embedded Carbon Record for CBAM Compliance →Storing an embedded carbon record for CBAM compliance means creating a permanent, cryptographically hashed, publicly verifiable record of your ISO 14065 verified embedded carbon calculation — so that your EU buyer, EU customs, and CBAM authorities can access and verify it on demand for the full 3-year CBAM audit window and beyond. embeddedcarbonrecord.com provides this infrastructure from $499 per year.
Truth Anchor: CBAM Regulation 2023/956 Article 35(3) requires that authorised declarants maintain records of the information used to determine embedded emissions for a period of at least four years after the year in which the CBAM declaration was submitted. Non-EU manufacturers must provide this information to their EU buyers. Source: EUR-Lex: Regulation 2023/956.
Why You Must Store Your Verified Calculation
Three obligations converge on the same requirement: you need a permanent, verifiable embedded carbon record.
- Your EU buyer requires it. The EU authorised declarant cannot file their CBAM declaration without your verified embedded carbon figure. They need a URL they can point CBAM authorities to — not a PDF emailed to them that they may lose or that may be altered.
- CBAM authorities can audit 3 years back. Any import from 2026 onwards can be audited until 2029. You must be able to produce the verification statement for any import within this window. A document stored only on your server is a single point of failure.
- Your verification statement must be unalterable. CBAM penalties for intentional misrepresentation carry a 3x multiplier. The SHA-256 hash provides forensic proof that the document has not been altered since verification — protecting both you and your EU buyer.
What Happens When You Store Your Record Here
Upload your verification statement
Go to /store-your-record. Enter your company details, sector, commodity CN code, reporting year, and EU buyer name. Upload your PDF verification statement (max 10MB).
SHA-256 hash computed in your browser
Your browser computes the SHA-256 hash of the document locally. The document itself is never transmitted to our servers. Only the hash and metadata are stored. Your confidential production data stays on your device.
Hash stored on dual infrastructure
The hash and metadata are written to Cloudflare D1 and backed up to Google Cloud Storage simultaneously. Dual redundancy ensures the verification URL resolves in under 2 seconds regardless of infrastructure events.
Permanent verification URL generated
You receive a permanent URL at embeddedcarbonrecord.com/verify/[hash]. This URL resolves to a public page showing your company name, commodity, CN code, reporting year, verification firm, hash timestamp, and QR code.
Share with all EU buyers simultaneously
Send the verification URL to every EU buyer who imports your goods. Each buyer can verify the record independently. You never need to email the document again — the URL is the record.
What Your EU Buyer Receives
When your EU buyer visits your verification URL, they see a public page containing:
| Field | Example | Purpose |
|---|---|---|
| Company name | Acme Steel Ltd | Identifies the manufacturer |
| Country of production | South Africa | Confirms jurisdiction for CBAM purposes |
| Commodity | Hot-rolled flat products of iron or steel | Identifies the CBAM-covered good |
| CN code | 7208 10 00 | EU customs classification code |
| Reporting year | 2026 | CBAM reporting period |
| Embedded carbon (tCO2/t) | 0.62 tCO2/t | The verified actual emission value |
| Verification firm | Bureau Veritas SA | Confirms ISO 14065 accredited verifier |
| Hash timestamp | 2026-04-15T09:32:14Z | Proves document existed on this date |
| SHA-256 hash | a3f8c2d1... | Cryptographic proof of document integrity |
| QR code | [QR image] | For physical documents and reports |
Self-Hosted vs embeddedcarbonrecord.com
| Dimension | Self-hosted | embeddedcarbonrecord.com |
|---|---|---|
| Setup time | Days to weeks (server, SSL, URL structure) | 5 minutes |
| Uptime guarantee | Depends on your infrastructure | 99.9% SLA on Cloudflare global network |
| Audit trail integrity | No cryptographic proof of non-alteration | SHA-256 hash timestamp — forensic standard |
| Third-party credibility | None — self-hosted records can be altered | Independent third-party vault — trusted by EU buyers |
| 15-year retention | Requires active server maintenance for 15 years | Guaranteed — no action required from you |
| URL resolution speed | Depends on your server location and load | Under 2 seconds globally via Cloudflare CDN |
| Annual cost | Server + SSL + maintenance (EUR 500–5,000+/year) | From $499/year — all infrastructure included |
Pricing
Starter
- 1 commodity line
- SHA-256 hashed permanent record
- Permanent verification URL
- QR code
- PDF certificate
- 15-year retention
Business
- Up to 5 commodity lines
- All Starter features
- Priority email support
- Annual renewal reminder
Industrial
- Unlimited commodity lines
- All Business features
- Priority URL resolution SLA
- Dedicated account support
Frequently Asked Questions
How do I store my CBAM embedded carbon record?
Upload your verified embedded carbon calculation at embeddedcarbonrecord.com/store-your-record. SHA-256 hash computed in browser. Hash and metadata stored permanently. Permanent verification URL generated. Annual fee from $499.
Does embeddedcarbonrecord.com store my actual document?
No. The SHA-256 hash is computed in your browser — the document itself is never transmitted to our servers. Only the hash and metadata are stored.
What does my EU buyer receive?
A permanent verification URL showing: company name, commodity, CN code, reporting year, verification firm, hash timestamp, and QR code. Resolves in under 2 seconds.
How long is the record stored?
15 years from the date of storage — exceeding the CBAM 3-year audit window by 12 years.
What does it cost?
Starter: $499/year (1 commodity line). Business: $1,499/year (up to 5 lines). Industrial: $4,999/year (unlimited lines + priority SLA).
Can I share one URL with multiple EU buyers?
Yes. The permanent verification URL is publicly accessible. Share it with all EU buyers simultaneously. Each buyer can verify the record independently.
What is SHA-256 and why does it matter for CBAM?
SHA-256 is a cryptographic hash function that produces a unique fingerprint of any document. If even one character changes, the hash changes completely — providing forensic proof of document integrity.