Certified geolocation: how to prove the place of a digital fact admissible in court
A hail damage claim arrives at the insurer with ten photos of a damaged roof, each tagged with GPS coordinates and a timestamp from the day of the storm. The adjuster checks the EXIF metadata, finds it coherent, authorises the payout. Six months later it turns out the photos were taken in Rome and re-presented as damage that occurred in Verona, with metadata rewritten through a free utility downloaded online. Cases like this are not frequent, but they are possible. And when a counterparty raises them, the burden of proving the location of acquisition falls back on whoever produced the evidence.
The problem is not confined to insurance. It concerns anyone who needs to demonstrate, before a judge, an insurer, a technical commission or an editorial board, that a photo or video was acquired at a specific location. Loss adjusters, civil engineers, construction project managers, private investigators, investigative reporters and legal departments all face the same situation: they hold the content but lack the location proof that would make the content unassailable.
The answer is not to improve device-side GPS metadata, because metadata generated on the user device is by nature modifiable. The answer is to bind location to the acquisition itself in a sealed, time-stamped and signed package, before the file leaves the device. Certified geolocation is exactly this: a technical chain that turns a raw coordinate into court-admissible photo evidence of location. TrueScreen integrates that chain in its mobile capture platform, applying a digital seal from a qualified QTSP and an eIDAS qualified timestamp at the moment of capture.
Why standard GPS metadata is not enough in court
Location data written into the EXIF block of a smartphone photo comes from three sources: the satellite GPS module, mobile cell tower triangulation, and Wi-Fi access point detection. All three are exposed to the operating system, and all three can be modified before the file is shared. Mock location apps are sold legally as developer tools, EXIF editing utilities are freely available, and manual procedures can rewrite a single GPSLatitude field in seconds.
This technical mutability translates into a precise procedural problem. Under the US Federal Rules of Evidence, particularly Rule 901 on authentication of evidence, the proponent of an item must produce evidence sufficient to support a finding that the item is what the proponent claims it is. For a digital photograph offered as proof of location, this means more than the bare assertion of the photographer. It means foundation evidence about how the device recorded location, who handled the file, and what guarantees exist that the metadata has not been altered.
In civil disputes across jurisdictions, courts have repeatedly held that the unsupported word of the acquiring party does not suffice when the opposing party raises a reasoned objection. Established judicial practice on digital evidence requires verifiable technical elements: integrity hashes, opposable timestamps, signed acquisition logs. On GPS metadata specifically, the prevailing scholarship treats unverified location data as a party statement: relevant, but not probative if contested.
What happens technically when GPS is falsified
Three techniques are publicly documented. The first is app-level GPS spoofing: an application installed on the device intercepts calls to the positioning system and returns arbitrary coordinates to any app that requests them, including the camera. The second is post-capture rewriting of EXIF metadata through editors that keep all related fields consistent (altitude, direction, accuracy, time zone). The third is hardware-level spoofing through low-cost transmitters that emit falsified GPS signals in a limited radius, deceiving the device's GPS module directly.
None of these techniques leaves obvious traces in a standard photo file. Without an external certification chain, a forensic technical examiner faces formally consistent but unverifiable metadata. The practical consequence is that the probative value of the file drops to the level of an uncorroborated testimony.
What "certified geolocation" means technically and legally
Certified geolocation means that the position coordinate, the moment of acquisition and the file content are bound together in a cryptographically sealed package by an independent third party, before the file becomes available for local modification. Three technical components make this chain admissible in court: the qualified electronic seal applied by a Qualified Trust Service Provider (QTSP) accredited under eIDAS, the qualified timestamp that attests the exact moment, and a structured log that reports the position parameters with their technical provenance.
Regulation (EU) 910/2014 (eIDAS) defines the qualified electronic seal as one applied by a qualified trust service provider and supported by a qualified certificate. A qualified seal enjoys, throughout the European Union, the presumption of data integrity and correctness of origin. Combined with a qualified timestamp, it provides opposable proof of both content and the moment that content was sealed. Where US proceedings reference foreign evidentiary chains under the Hague Convention or under specific treaties, the eIDAS framework also offers a recognisable technical baseline.
The standard ISO/IEC 27037:2012 sets out guidelines for the identification, collection, acquisition and preservation of digital evidence. The standard requires that acquisition be repeatable and reproducible, and that every step is traced. For location data, ISO 27037 implies that the acquired coordinate must be accompanied by technical information sufficient to assess its reliability: source (GPS, GLONASS, Cell-ID, Wi-Fi), accuracy declared by the device, and the presence or absence of mock location modes active at capture time.
Three components that make a location opposable
- Qualified electronic seal from a third-party QTSP: the package of file, coordinates and log is sealed by a qualified trust service provider under eIDAS, external to the party making the acquisition. This separates the proof of integrity from the good faith of the party with an interest in the outcome.
- Qualified eIDAS timestamp: the moment of acquisition is attested by a qualified time-stamping authority. Without a qualified timestamp, the declared moment is a party claim; with a qualified timestamp, it becomes a fact opposable to everyone.
- Provenance log of location parameters: the coordinate is not an isolated datum. It is accompanied by the technical declaration of its source (GPS module, Cell-ID, Wi-Fi triangulation), of the accuracy declared by the operating system, and of any flags indicating anomalous device configurations.
How certified geolocation works in TrueScreen
The TrueScreen mobile app integrates location detection directly into the capture process. When the operator presses the shutter, the app performs four operations together: it captures the photo or video content, it detects the position from the operating system while recording the source (GPS, Cell-ID, Wi-Fi), it computes the cryptographic hash of the package of content, coordinates and metadata, and it sends the package to the backend for sealing.
The backend receives the package and transmits it to the integrated qualified QTSP through API, which applies the qualified electronic seal and the qualified eIDAS timestamp. The result is a signed file (PAdES format for PDF reports, CAdES for acquisition packages) that binds content, location and moment in a non-separable way. Any subsequent modification to the file invalidates the seal, and any attempt to replace location parameters produces a file with an inconsistent signature.
The acquisition log, also sealed, reports the technical session data: app version, unique device identifier, active location detection modes, accuracy declared by the operating system, and the presence or absence of developer modes. This log is the technical foundation on which a forensic consultant can reconstruct the conditions of acquisition years later.
The QTSP role in the certification chain
One point needs to be clear because it affects the opposability of the evidence. TrueScreen is not a QTSP, not a Certification Authority, and does not issue qualified certificates. TrueScreen is the data authenticity platform that integrates the seal from third-party qualified QTSPs accredited under eIDAS, through API. This separation matters legally: the proof of package integrity does not depend on the party that performed the acquisition (and therefore has an interest in the outcome) but on an independent third party, subject to the supervision and periodic auditing required by the eIDAS regulation.
For anyone presenting the evidence in court, this architecture means that technical verification proceeds in two layers: file integrity verification (anyone, including the opposing party, can verify the seal with standard eIDAS tools), and verification of the QTSP identity (consultable in the public European registers of qualified trust service providers).
Field scenarios: claims, construction sites, investigative journalism
The most frequent use cases involve contexts in which the location is part of the fact to be proven and where the gap between acquisition and contestation can be long.
Insurance loss adjustment: hail damage to a building
A loss adjuster arrives on the roof of a warehouse in Verona the day after a hailstorm. They capture forty photos with the TrueScreen app: each shot is geolocated on the specific point of the roof, sealed at source with an eIDAS qualified timestamp, and the log reports the position detection mode (GPS with declared accuracy of five metres, confirmation from Cell-ID with identified tower). The complete package is delivered to the insurer. Six months later, in a contested adjustment, the insurer produces the package to the court-appointed technical consultant. The consultant verifies the qualified seal and timestamp through the QTSP portal and files confirmation that the photos are intact, were acquired at the declared location, at the declared moment, from a specifically identified device.
Construction site progress documentation
A construction project manager documents work progress with a sequence of forty shots taken along a predefined path between site areas. Each shot is sealed individually, but the full sequence is also aggregated in a signed PAdES report that attests the temporal and spatial order of the shots. In the event of a client contestation on the declared progress percentage, the report is opposable as an electronic document with qualified electronic signature under Article 25 of the eIDAS regulation.
Investigative journalism and documentation of violations
A newsroom documenting an environmental violation at an industrial site needs defensible evidence both for editorial responsibility and, possibly, in a subsequent judicial proceeding. Photos and videos captured with TrueScreen are sealed at source: the combination of certified location, certified moment and file integrity forms a package that resists a correction request or a defamation suit based on contesting the genuineness of the images.
What changes for the probative value of a photograph
The qualitative leap is not a technical detail. A photograph with standard GPS coordinates, presented in court, is a representation of fact that has prima facie probative status, but yields to a reasoned challenge. A photograph with certified geolocation, sealed by a third-party QTSP and timestamped under eIDAS, has the technical structure of an electronic document under eIDAS rules and, when acquisition is performed with qualified seal and qualified timestamp, enjoys the presumption of integrity and certain date.
In practice: a counterparty's disclaimer is no longer sufficient to neutralise the evidence. The counterparty has to demonstrate with concrete technical elements that the certification chain has been compromised. And since the chain runs through an independent third party subject to eIDAS supervision, the technical threshold for a well-founded challenge becomes very high.
| Aspect | Photo with standard GPS | Photo with certified geolocation |
|---|---|---|
| Burden of proof if contested | On the party producing the evidence | On the party contesting the evidence |
| Location verification | Party assertion | Third-party QTSP eIDAS seal |
| Moment verification | Modifiable EXIF metadata | Qualified timestamp |
| Post-capture modifiability | High (EXIF editors available) | Seal breaks on modification |
| Verification tool | No standard | Public eIDAS verification |
| Regulatory reference | General rules on digital evidence | Reg. EU 910/2014 (eIDAS) |
Honest limits and what certified geolocation does not solve
Two areas remain where technical certification does not replace the human judgement of a court. The first concerns the physical position: even a certified system records the coordinates that the device's GPS module receives. If the device is physically placed in a location to simulate an acquisition, the coordinate will be technically correct but the represented fact will be false. The answer to this risk is not technical but procedural: the corporate procedure of the adjuster, project manager or journalist must include corroborating elements (witnesses, time sequences, visual references that cannot be manipulated in context).
The second concerns the intrinsic accuracy of GPS data in difficult environments. In dense urban contexts, under metal coverings, or indoors, the accuracy declared by the operating system can degrade to tens of metres. The structured log of TrueScreen always reports the declared accuracy, so the forensic consultant can assess how reliable the coordinate is in relation to the fact to be proven. A coordinate with fifty-metre accuracy may be sufficient to demonstrate presence in a neighbourhood, but not to demonstrate presence at a specific real estate unit.
On both fronts, the transparency of the log is what keeps the credibility of the system high. The conditions of acquisition are part of the evidence: whoever reads them knows exactly what the certification guarantees and what is left to the judgement of the trial court.
